Compare commits

..

2 Commits

Author SHA1 Message Date
5eb5ce724f Add ruby application service sample 2025-06-28 14:13:24 +02:00
be3fcc6075 Add nftables firewall 2025-06-28 13:59:15 +02:00
16 changed files with 52 additions and 0 deletions

View File

@ -0,0 +1 @@
application-ruby-srv

View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

View File

@ -0,0 +1 @@
3

View File

@ -0,0 +1 @@
application-ruby

View File

@ -0,0 +1,5 @@
#!/bin/execlineb -P
s6-setuidgid application
exec -c
s6-log -d3 -- T /srv/httpd/application/ruby/log

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1,2 @@
postgresql
redis-instances

View File

@ -0,0 +1 @@
/srv/httpd/application

View File

@ -0,0 +1 @@
production

View File

@ -0,0 +1 @@
application-ruby-log

View File

@ -0,0 +1,8 @@
#!/bin/execlineb -P
fdmove -c 2 1
foreground { chown application:users supervise supervise/control event }
s6-setuidgid application
s6-envdir env
cd /srv/httpd/application/ruby/current/
rbenv exec bundle exec puma

View File

@ -0,0 +1 @@
longrun

View File

@ -0,0 +1,4 @@
network
# In some cases this service might need to be started after the service
# below dealing with IP packet forwarding
#ip_forward

View File

@ -0,0 +1,9 @@
######################################################
# Run the rc.firewall_shutdown script (if it exists) #
######################################################
if -t { [ -x /etc/rc.d/rc.firewall_shutdown ] }
# Prepend every output with the service's name
pipeline -w { sed -u "s/^/firewall: /" }
fdmove -c 2 1
nft flush ruleset

View File

@ -0,0 +1 @@
oneshot

11
rc.firewall/firewall/up Normal file
View File

@ -0,0 +1,11 @@
####################################################################
# Run the rc.firewall script #
# #
# See the HOWTOs on http://www.netfilter.org/ for documentation on #
# setting up a firewall or NAT on Linux #
####################################################################
# Prepend every output with the service's name
pipeline -w { sed -u "s/^/firewall: /" }
fdmove -c 2 1
nft -f /etc/nftables/conf.nft