adminconf/frontal-web-conf
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
This repository has been archived on 2023-07-27. You can view files and clone it, but cannot push or open issues or pull requests.
7c0cbe8110
frontal-web-conf/README.md

1.1 KiB
Raw Blame History

Frontal web configuration

This repository contains units and config files for our frontal web starting (at boot). We start lighttpd with a WebSSH instance running (for web remote access if need be). We must manually unlock certificates volume, then start nginx.

Files

  • lighttpd-webssh.conf is a sub-conf file for lighttpd, making it serve WebSSH.
  • etc-letsencrypt.mount allow to unlock and mount encrypted certificates volume.
    • Relevant information should be added to /etc/crypttab.
  • etc-letsencrypt.timer is a timer to automatically start previous unit, but this is currently not used.
  • start-lighttpd.conf is a drop-in Systemd unit file, which starts lighttpd should nginx fail to start.
    • This is not intended for starting process, more in case of failed (remote) restart of nginx.
  • wait-for-dns.conf is a drop-in Systemd unit file, which prevents nginx to start before DNS server is operational.
  • webssh.service is a service file for WebSSH.

Installation

  • install.sh script copies Systemd files to their destination and sets lighttpd conf (and creates a certificate if needed).

TODO

  • Finish install script