Compare commits

..

4 Commits

Author SHA1 Message Date
5eb5ce724f Add ruby application service sample 2025-06-28 14:13:24 +02:00
be3fcc6075 Add nftables firewall 2025-06-28 13:59:15 +02:00
544d98d884 Add gitea server 2025-06-26 21:37:38 +02:00
66c0bf0bf5 Add prosody 2025-06-26 21:37:17 +02:00
47 changed files with 146 additions and 0 deletions

View File

@ -0,0 +1 @@
application-ruby-srv

View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

View File

@ -0,0 +1 @@
3

View File

@ -0,0 +1 @@
application-ruby

View File

@ -0,0 +1,5 @@
#!/bin/execlineb -P
s6-setuidgid application
exec -c
s6-log -d3 -- T /srv/httpd/application/ruby/log

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1,2 @@
postgresql
redis-instances

View File

@ -0,0 +1 @@
/srv/httpd/application

View File

@ -0,0 +1 @@
production

View File

@ -0,0 +1 @@
application-ruby-log

View File

@ -0,0 +1,8 @@
#!/bin/execlineb -P
fdmove -c 2 1
foreground { chown application:users supervise supervise/control event }
s6-setuidgid application
s6-envdir env
cd /srv/httpd/application/ruby/current/
rbenv exec bundle exec puma

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1,4 @@
network
# In some cases this service might need to be started after the service
# below dealing with IP packet forwarding
#ip_forward

View File

@ -0,0 +1,9 @@
######################################################
# Run the rc.firewall_shutdown script (if it exists) #
######################################################
if -t { [ -x /etc/rc.d/rc.firewall_shutdown ] }
# Prepend every output with the service's name
pipeline -w { sed -u "s/^/firewall: /" }
fdmove -c 2 1
nft flush ruleset

View File

@ -0,0 +1 @@
oneshot

11
rc.firewall/firewall/up Normal file
View File

@ -0,0 +1,11 @@
####################################################################
# Run the rc.firewall script #
# #
# See the HOWTOs on http://www.netfilter.org/ for documentation on #
# setting up a firewall or NAT on Linux #
####################################################################
# Prepend every output with the service's name
pipeline -w { sed -u "s/^/firewall: /" }
fdmove -c 2 1
nft -f /etc/nftables/conf.nft

View File

@ -0,0 +1 @@
prosody-srv

View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

1
rc.prosody/prosody-log/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
s6-log

1
rc.prosody/prosody-log/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-d3

View File

@ -0,0 +1,2 @@
root
# Logging directory group ownership

View File

@ -0,0 +1,2 @@
root
# Logging directory owner

View File

@ -0,0 +1,2 @@
/var/log/prosody
# Logging directory path

View File

@ -0,0 +1,2 @@
750
# Logging directory access rights in octal

2
rc.prosody/prosody-log/env/LOG_SCRIPT vendored Normal file
View File

@ -0,0 +1,2 @@
n4 s500000 T $LOGDIR_PATH
# Logging script used by s6-log

View File

@ -0,0 +1 @@
3

View File

@ -0,0 +1 @@
prosody

View File

@ -0,0 +1,24 @@
#!/bin/execlineb -P
#################################################
# Start a logging daemon for the prosody daemon #
#################################################
s6-envdir env
multisubstitute {
importas -u LOGDIR_OWNER LOGDIR_OWNER
importas -u LOGDIR_GROUP LOGDIR_GROUP
importas -u LOGDIR_PERMS LOGDIR_PERMS
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
importas -usCd" " LOG_SCRIPT LOG_SCRIPT
}
s6-envuidgid -B ${LOGDIR_OWNER}:${LOGDIR_GROUP}
multisubstitute {
importas -u LOGDIR_PATH LOGDIR_PATH
importas -u UID UID
importas -u GID GID
}
if { install -dm $LOGDIR_PERMS -o $UID -g $GID $LOGDIR_PATH }
s6-setuidgid ${UID}:${GID}
exec -c $CMD $CMD_OPTS -- $LOG_SCRIPT

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1,5 @@
tmpfs-run
# Comment out "remount-root" and uncomment "local-fs"
# if you use separate partition for /var
remount-root
#local-fs

1
rc.prosody/prosody-srv/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
prosody

1
rc.prosody/prosody-srv/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
--config /etc/prosody/prosody.cfg.lua -F

View File

@ -0,0 +1 @@
prosody-log

View File

@ -0,0 +1,16 @@
#!/bin/execlineb -P
###################################
# Start prosody (Lua XMPP Server) #
###################################
fdmove -c 2 1
if { install -do ldap -g ldap /var/run/openldap }
emptyenv -p
s6-envdir env
multisubstitute {
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
}
s6-setuidgid prosody
exec -c $CMD $CMD_OPTS

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1 @@
server-git-srv

View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

View File

@ -0,0 +1 @@
3

View File

@ -0,0 +1 @@
server-git

View File

@ -0,0 +1,5 @@
#!/bin/execlineb -P
s6-setuidgid git
exec -c
s6-log -d3 -- T /srv/httpd/server/git/log

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1,2 @@
postgresql
redis-instances

View File

@ -0,0 +1 @@
/srv/httpd/server/git/

1
server/server-git-srv/env/HOME vendored Normal file
View File

@ -0,0 +1 @@
/srv/git

View File

@ -0,0 +1 @@
server-git-log

View File

@ -0,0 +1,6 @@
#!/bin/execlineb -P
fdmove -c 2 1
s6-setuidgid git
s6-envdir env
/srv/httpd/server/git/bin/gitea web --config /srv/httpd/server/git/etc/app.ini -p 3001

View File

@ -0,0 +1 @@
longrun