diff --git a/README.md b/README.md index 338edcb..b81c3de 100644 --- a/README.md +++ b/README.md @@ -1,12 +1,13 @@ # Frontal web configuration -This repository contains units and config files for our frontal web starting (at boot). We start lighttpd with a WebSSH -instance running (for web remote access if need be). We must manually unlock certificates volume, then start nginx. +This repository contains units and config files for our frontal web starting (at boot). Certificates volume should be +automatically unlocked via TPM. If not, we must manually unlock it and start nginx. ### Files * `etc-letsencrypt.mount` allows to unlock and mount encrypted certificates volume. * Relevant information should be added to `/etc/crypttab`. * Make sure that `/etc/letsencrypt` directory exists +* `timeout.conf` is a drop-in Systemd unit file, to let system start even if above volume is not unlocked * `wait-for-dns.conf` is a drop-in Systemd unit file, which prevents nginx to start before DNS server is operational. #### Installation * `install.sh` script copies Systemd files to their destination.