17 lines
765 B
Markdown
17 lines
765 B
Markdown
# Frontal web configuration
|
|
|
|
This repository contains units and config files for our frontal web starting (at boot). Certificates volume should be
|
|
automatically unlocked via TPM. If not, we must manually unlock it and start nginx.
|
|
|
|
### Files
|
|
* `etc-letsencrypt.mount` allows to unlock and mount encrypted certificates volume.
|
|
* Relevant information should be added to `/etc/crypttab`.
|
|
* Make sure that `/etc/letsencrypt` directory exists
|
|
* `timeout.conf` is a drop-in Systemd unit file, to let system start even if above volume is not unlocked
|
|
* `wait-for-dns.conf` is a drop-in Systemd unit file, which prevents nginx to start before DNS server is operational.
|
|
#### Installation
|
|
* `install.sh` script copies Systemd files to their destination.
|
|
|
|
### TODO
|
|
* RAS
|