aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
* test: initialize local apt repository for testingdebian/bookwormMohammed Amar-Bensaber2024-10-08-0/+37
| | | | | | | This with the combination of `podman run --rm -v "$PWD:/tmp/shione" -it debian:stable /bin/bash` allows me to quickly install packages to validate that the installation process is valid. Post-deployment failures/mis-configurations are another problem.
* nginx: generate certificates for test targetsMohammed Amar-Bensaber2024-10-08-11/+21
| | | | | | | | Podman will be used to test the generated Debian packages to ensure that they work properly. However, this means that it is NOT shione and therefore cannot solve letsencrypt challenge among many other things that can only be done by shione. The goal is to have a staging area that can mock the latter.
* cgit: implement initial postinstall logicMohammed Amar-Bensaber2024-10-08-6/+57
| | | | | Mainly creating `git` user if missing as well as restarting relevant systemd services.
* gitignore: ignore build ans wireguard directoriesMohammed Amar-Bensaber2024-10-08-1/+2
|
* gbp: set build directory to ./buildMohammed Amar-Bensaber2024-10-08-1/+1
|
* ssh: limit overall login attempts and interactionsMohammed Amar-Bensaber2024-10-08-0/+17
| | | | Additionally also disable any unnecessary/unused features by default.
* nginx: fix nginx default config path to be hiddenMohammed Amar-Bensaber2024-10-08-1/+1
|
* nginx: drop letsencrypt conf in favor of mozilla sslMohammed Amar-Bensaber2024-10-08-4/+10
| | | | | | | | `certbox` argument parsing and plugin management isn't very suitable when it comes to automating nginx configuration through Debian packaging. It is not possible to instruct it to *only* generate letsencrypt ssl configuration for nginx which breaks the postinst script. Also missing fancyindex dependency was added.
* cgit: add missing comma in dependencies listMohammed Amar-Bensaber2024-10-08-1/+1
|
* nftables: fix broken displace logicMohammed Amar-Bensaber2024-10-08-2/+3
| | | | | It seems that my package was broken due to a somewhat misinterpretation of `config-package-dev` documentation.
* cgit: postinst: enable and start fcgiwrap serviceMohammed Amar-Bensaber2024-08-29-0/+12
|
* cgit: init config packageMohammed Amar-Bensaber2024-08-29-0/+122
|
* wireguard: postinst: enable and start wg0 serviceMohammed Amar-Bensaber2024-08-28-0/+11
|
* nginx: postinst: setup certbot and restart serviceMohammed Amar-Bensaber2024-08-28-0/+22
|
* build: explicitly call gbp with --export-dir=WCMohammed Amar-Bensaber2024-08-27-1/+1
|
* gbp: git export current working copyMohammed Amar-Bensaber2024-08-27-0/+1
|
* clean: remove debhelper artifactsMohammed Amar-Bensaber2024-08-27-0/+7
| | | | TODO: Maybe gbp supports this already?
* wireguard: add trailing slashMohammed Amar-Bensaber2024-08-27-1/+1
|
* nftables: add missing commaMohammed Amar-Bensaber2024-08-27-1/+1
|
* todo: integrate deb-systemd-invokeMohammed Amar-Bensaber2024-08-27-0/+4
|
* build: copy wireguard secretsMohammed Amar-Bensaber2024-08-27-0/+18
|
* wireguard: document initial setupMohammed Amar-Bensaber2024-08-27-0/+15
|
* wireguard: init config packageMohammed Amar-Bensaber2024-08-27-0/+79
|
* nginx: init config packageMohammed Amar-Bensaber2024-08-27-0/+120
|
* nftables: init config packageMohammed Amar-Bensaber2024-08-27-0/+134
|
* openssh-server: init config packageMohammed Amar-Bensaber2024-08-27-0/+16
|
* init gbp configurationMohammed Amar-Bensaber2024-08-27-0/+7
|
* debian: init shione-config source packageMohammed Amar-Bensaber2024-08-27-0/+26
|
* license: agplv3Mohammed Amar-Bensaber2024-08-27-0/+661
|
* .gitignore: ignore misc artifacts and secret filesMohammed Amar-Bensaber2024-08-27-0/+16
|
* readme: initMohammed Amar-Bensaber2024-08-27-0/+33