Rodolphe Bréard
|
4235f417e9
|
Refactor the rc script
|
1 year ago |
Nicolas K
|
5bce4d1d6d
|
Add common certs in trusted store of default docker image
|
1 year ago |
Nicolas K
|
b52ab46be4
|
Add resources to build a docker image
|
1 year ago |
Nicolas K
|
686e8e7061
|
decompose mkdir and cp, for some reason it was not working well with podman
|
1 year ago |
Eduardo Sánchez Muñoz
|
3307f59e05
|
Fix code path in build-docker.sh
|
2 years ago |
Rodolphe Bréard
|
390b67f898
|
Add a rc.d script
|
2 years ago |
Rodolphe Bréard
|
596d55a486
|
Add the acmed@user.service systemd unit configuration
|
3 years ago |
Rodolphe Bréard
|
39dd471ca3
|
Enable ProtectKernelModules in the unit file
|
3 years ago |
Rodolphe Bréard
|
f4b80cb1e4
|
Explicitly set the configuration file and logging mode
|
3 years ago |
Rodolphe Bréard
|
a52f6d1da7
|
Add documentation links in the unit file
|
3 years ago |
Rodolphe Bréard
|
8aae7d58b0
|
Change ProtectSystem to yes
The strict mode was not adapted since it would prevent ACMEd to write
http-01 challenge files inside the web server's directory.
|
4 years ago |
Rodolphe Bréard
|
2834d16530
|
Add a sysusers and tmpfiles files
|
4 years ago |
Rodolphe Bréard
|
00821e8998
|
Move the contrib files into dedicated directories
|
4 years ago |
Rodolphe Bréard
|
fc4e442c0b
|
Set the default log level to info
|
4 years ago |
Rodolphe Bréard
|
9a52340303
|
Add new verbs to the polkit rule
|
4 years ago |
Ralf Zerres
|
849b24b261
|
systemd.unit: reworked `acmed.service`
acmed.service: hardened sandbox systemd unit
* comments the logical units
* update working directory (ACMEd needs write access)
* update runtime directory (write/update the pid-file)
* reduce privileges for filesystem and kernel-space
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
|
4 years ago |
Rodolphe Bréard
|
45fd53de4d
|
Add a polkit policy that enables ACMEd to restart services
|
4 years ago |
Rodolphe Breard
|
c91cb82f07
|
Move the example service file into the contrib directory
|
4 years ago |
Rodolphe Breard
|
22d5081a3b
|
Move the docker build script into a `contrib` directory
rel #23
|
5 years ago |