From beb16b0fc814f3d9e9ae8ad7e5abee46a9bd0945 Mon Sep 17 00:00:00 2001 From: Alexandre CATTEAU Date: Wed, 26 Jul 2023 20:38:09 +0200 Subject: [PATCH] Update README --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 338edcb..b81c3de 100644 --- a/README.md +++ b/README.md @@ -1,12 +1,13 @@ # Frontal web configuration -This repository contains units and config files for our frontal web starting (at boot). We start lighttpd with a WebSSH -instance running (for web remote access if need be). We must manually unlock certificates volume, then start nginx. +This repository contains units and config files for our frontal web starting (at boot). Certificates volume should be +automatically unlocked via TPM. If not, we must manually unlock it and start nginx. ### Files * `etc-letsencrypt.mount` allows to unlock and mount encrypted certificates volume. * Relevant information should be added to `/etc/crypttab`. * Make sure that `/etc/letsencrypt` directory exists +* `timeout.conf` is a drop-in Systemd unit file, to let system start even if above volume is not unlocked * `wait-for-dns.conf` is a drop-in Systemd unit file, which prevents nginx to start before DNS server is operational. #### Installation * `install.sh` script copies Systemd files to their destination.