Commit d697226d authored by jan.koester's avatar jan.koester
Browse files

test

parent 4bfdb51e

debian/authdb.default-config.yaml

+2 −2
Changes for debian/authdb.default-config.yaml: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -3,8 +3,8 @@ AUTHDB: 
  PORT: 9090

  MAXCONN: 1024

  SSL:

    CERT: "/etc/authdb/ssl/cert.pem"

    KEY: "/etc/authdb/ssl/key.pem"

    CERT: "/etc/authdb/ssl/cert.der"

    KEY: "/etc/authdb/ssl/key.der"

  ADMINDB:

    PATH: "/var/lib/authdb/admin.db"

  PLUGINS:

debian/authdb.postinst

+7 −4
Changes for debian/authdb.postinst: 7 added lines, 4 removed lines.
Original line number Diff line number Diff line
@@ -18,7 +18,7 @@ case "$1" in 
        fi



        # Generate self-signed SSL certificate if none exists

        if [ ! -f /etc/authdb/ssl/cert.pem ]; then

        if [ ! -f /etc/authdb/ssl/cert.der ]; then

            mkdir -p /etc/authdb/ssl

            chown authdb:authdb /etc/authdb/ssl

            chmod 750 /etc/authdb/ssl
@@ -26,9 +26,12 @@ case "$1" in 
                -keyout /etc/authdb/ssl/key.pem \

                -out /etc/authdb/ssl/cert.pem \

                -days 3650 \

                -subj "/CN=authdb/O=authdb/OU=auto-generated"' authdb

            chmod 600 /etc/authdb/ssl/key.pem

            chmod 644 /etc/authdb/ssl/cert.pem

                -subj "/CN=authdb/O=authdb/OU=auto-generated" && \

                openssl x509 -in /etc/authdb/ssl/cert.pem -outform DER -out /etc/authdb/ssl/cert.der && \

                openssl rsa -in /etc/authdb/ssl/key.pem -outform DER -out /etc/authdb/ssl/key.der && \

                rm -f /etc/authdb/ssl/cert.pem /etc/authdb/ssl/key.pem' authdb

            chmod 600 /etc/authdb/ssl/key.der

            chmod 644 /etc/authdb/ssl/cert.der

        fi

        ;;

esac

debian/authdb.service

+1 −0
Changes for debian/authdb.service: 1 added line, 0 removed lines.
Original line number Diff line number Diff line
@@ -11,6 +11,7 @@ Group=authdb 
StateDirectory=authdb

ConfigurationDirectory=authdb

ProtectSystem=strict

ReadWritePaths=/var/lib/authdb

ProtectHome=yes

NoNewPrivileges=yes

PrivateTmp=yes