Commit 546c9e72 authored by jan.koester's avatar jan.koester
Browse files

test

parent a6f523ab

debian/blogi-editor.install

0 → 100644
+1 −0
Original line number Diff line number Diff line 
usr/bin/blogi-editor

debian/blogi.default-config.yaml

0 → 100644
+42 −0
Original line number Diff line number Diff line 
BLOGI:

  TEMPLATE: "/usr/share/blogi/themes/default"

  LANGUAGE: "DE"

  STARTPAGE: "/blog/content/index"

  PLUGINDIR:

    - "/usr/lib/blogi/plugins"

  HTTP:

    URL: "http://localhost"

    DOMAIN: "localhost"

    PREFIX: "/blog"

    PORT: 8080

    BIND: "0.0.0.0"

    MAXCON: 1024

  DATABASE:

    DRIVER: "sqlite"

    CONNECTION: "/var/lib/blogi/blog.db"

  AUTHDB:

    - URL: "https://localhost:8443"

      CLIENTNAME: "blogiclient"

      CLIENTSECRET: "changeme"

      DOMAIN: "localhost"

  MEDIADB:

    URL: "https://localhost:8442"

  NGINXFILER:

    HOST: "localhost"

    PORT: 80

    PREFIX: "/files/"

    SSL: False

    TIMEOUT: 10

  com: "/tmp/blogi"

  COOKIE:

    DOMAIN: "localhost"

  SMTP:

    ADDR: "localhost"

    PORT: 587

    USER: ""

    PASS: ""

    SENDER: ""

  CONTACT:

    RECEIVER: ""

  DOMAIN:

    NAME: "localhost"

debian/blogi.install

0 → 100644
+3 −0
Original line number Diff line number Diff line 
usr/bin/blogi

usr/lib/blogi/

usr/share/blogi/

debian/blogi.postinst

0 → 100755
+45 −0
Original line number Diff line number Diff line 
#!/bin/sh

set -e



case "$1" in

    configure)

        # Create system user if it does not exist

        if ! getent passwd blogi >/dev/null 2>&1; then

            adduser --system --group --home /var/lib/blogi \

                --no-create-home --disabled-login --quiet blogi

        fi



        # Install default config if none exists

        if [ ! -f /etc/blogi/config.yaml ]; then

            mkdir -p /etc/blogi

            cp /usr/share/blogi/blogi.default-config.yaml /etc/blogi/config.yaml

            chmod 640 /etc/blogi/config.yaml

            chown root:blogi /etc/blogi/config.yaml

        fi



        # Generate self-signed SSL certificate in DER format if none exists

        if [ ! -f /etc/blogi/ssl/cert.der ]; then

            mkdir -p /etc/blogi/ssl

            chown blogi:blogi /etc/blogi/ssl

            chmod 750 /etc/blogi/ssl

            su -s /bin/sh -c '

                openssl req -x509 -newkey rsa:4096 -nodes \

                    -keyout /tmp/blogi_key.pem \

                    -out /tmp/blogi_cert.pem \

                    -days 3650 \

                    -subj "/CN=blogi/O=blogi/OU=auto-generated" && \

                openssl x509 -in /tmp/blogi_cert.pem -outform DER \

                    -out /etc/blogi/ssl/cert.der && \

                openssl rsa -in /tmp/blogi_key.pem -outform DER \

                    -out /etc/blogi/ssl/key.der && \

                rm -f /tmp/blogi_key.pem /tmp/blogi_cert.pem

            ' blogi

            chmod 600 /etc/blogi/ssl/key.der

            chmod 644 /etc/blogi/ssl/cert.der

        fi

        ;;

esac



#DEBHELPER#



exit 0

debian/blogi.service

0 → 100644
+22 −0
Original line number Diff line number Diff line 
[Unit]

Description=Blogi Blog Engine Server

After=network.target authdb.service



[Service]

Type=simple

AmbientCapabilities=CAP_NET_BIND_SERVICE

ExecStart=/usr/bin/blogi -c yaml:/etc/blogi/config.yaml -f true

Restart=on-failure

RestartSec=5

User=blogi

Group=blogi

StateDirectory=blogi

ConfigurationDirectory=blogi

ProtectSystem=strict

ReadWritePaths=/var/lib/blogi

ProtectHome=yes

NoNewPrivileges=yes

PrivateTmp=yes



[Install]

WantedBy=multi-user.target