adminconf/frontal-web-conf
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update README

Browse Source
This commit is contained in:
Alexandre CATTEAU 2023-07-26 20:38:09 +02:00
parent a5c0b46cd8
commit beb16b0fc8
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -1,12 +1,13 @@
# Frontal web configuration # Frontal web configuration
This repository contains units and config files for our frontal web starting (at boot). We start lighttpd with a WebSSH This repository contains units and config files for our frontal web starting (at boot). Certificates volume should be
instance running (for web remote access if need be). We must manually unlock certificates volume, then start nginx. automatically unlocked via TPM. If not, we must manually unlock it and start nginx.
### Files ### Files
* `etc-letsencrypt.mount` allows to unlock and mount encrypted certificates volume. * `etc-letsencrypt.mount` allows to unlock and mount encrypted certificates volume.
* Relevant information should be added to `/etc/crypttab`. * Relevant information should be added to `/etc/crypttab`.
* Make sure that `/etc/letsencrypt` directory exists * Make sure that `/etc/letsencrypt` directory exists
* `timeout.conf` is a drop-in Systemd unit file, to let system start even if above volume is not unlocked
* `wait-for-dns.conf` is a drop-in Systemd unit file, which prevents nginx to start before DNS server is operational. * `wait-for-dns.conf` is a drop-in Systemd unit file, which prevents nginx to start before DNS server is operational.
#### Installation #### Installation
* `install.sh` script copies Systemd files to their destination. * `install.sh` script copies Systemd files to their destination.