OSS/s6
1
0
Fork 0
Code Issues Pull Requests Activity

Compare commits

base: OSS:6f22b57d1761e196e2d01c684977737c9f0afe5b
Branches Tags
OSS:master
...
compare: OSS:master
Branches Tags
OSS:master

7 Commits
6f22b57d17 ... master

Author SHA1 Message Date
Eugen Wissner
5eb5ce724f Add ruby application service sample 2025-06-28 14:13:24 +02:00
Eugen Wissner
be3fcc6075 Add nftables firewall 2025-06-28 13:59:15 +02:00
Eugen Wissner
544d98d884 Add gitea server 2025-06-26 21:37:38 +02:00
Eugen Wissner
66c0bf0bf5 Add prosody 2025-06-26 21:37:17 +02:00
Eugen Wissner
3bc4d1c00e Add clamav 2025-06-25 11:25:35 +02:00
Eugen Wissner
a32eb01f97 Add rspamd 2025-06-22 10:57:27 +02:00
Eugen Wissner
ac8738f8e9 Add php-fpm82 2025-06-22 10:39:54 +02:00
116 changed files with 378 additions and 0 deletions
Expand all files Collapse all files

1
applications/application-ruby-log/consumer-for Normal file
View File

@ -0,0 +1 @@
application-ruby-srv

4
applications/application-ruby-log/dependencies Normal file
View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

1
applications/application-ruby-log/notification-fd Normal file
View File

@ -0,0 +1 @@
3

1
applications/application-ruby-log/pipeline-name Normal file
View File

@ -0,0 +1 @@
application-ruby

5
applications/application-ruby-log/run Normal file
View File

@ -0,0 +1,5 @@
#!/bin/execlineb -P
s6-setuidgid application
exec -c
s6-log -d3 -- T /srv/httpd/application/ruby/log

1
applications/application-ruby-log/type Normal file
View File

@ -0,0 +1 @@
longrun

2
applications/application-ruby-srv/dependencies Normal file
View File

@ -0,0 +1,2 @@
postgresql
redis-instances

1
applications/application-ruby-srv/env/HOME vendored Normal file
View File

@ -0,0 +1 @@
/srv/httpd/application

1
applications/application-ruby-srv/env/RAILS_ENV vendored Normal file
View File

@ -0,0 +1 @@
production

1
applications/application-ruby-srv/producer-for Normal file
View File

@ -0,0 +1 @@
application-ruby-log

8
applications/application-ruby-srv/run Normal file
View File

@ -0,0 +1,8 @@
#!/bin/execlineb -P
fdmove -c 2 1
foreground { chown application:users supervise supervise/control event }
s6-setuidgid application
s6-envdir env
cd /srv/httpd/application/ruby/current/
rbenv exec bundle exec puma

1
applications/application-ruby-srv/type Normal file
View File

@ -0,0 +1 @@
longrun

5
bundles/clamav/contents Normal file
View File

@ -0,0 +1,5 @@
# Start an anti-virus daemon
clamd
# Start a virus database update tool
freshclam

1
bundles/clamav/type Normal file
View File

@ -0,0 +1 @@
bundle

2
rc.clamav/clamav-log/consumer-for Normal file
View File

@ -0,0 +1,2 @@
clamd
freshclam

4
rc.clamav/clamav-log/dependencies Normal file
View File

@ -0,0 +1,4 @@
# Comment out "remount-root" and uncomment "local-fs"
# if you use separate partition for /var/log
remount-root
#local-fs

1
rc.clamav/clamav-log/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
s6-log

1
rc.clamav/clamav-log/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-d3

2
rc.clamav/clamav-log/env/LOGDIR_GROUP vendored Normal file
View File

@ -0,0 +1,2 @@
root
# Logging directory group ownership

2
rc.clamav/clamav-log/env/LOGDIR_OWNER vendored Normal file
View File

@ -0,0 +1,2 @@
root
# Logging directory owner

2
rc.clamav/clamav-log/env/LOGDIR_PATH vendored Normal file
View File

@ -0,0 +1,2 @@
/var/log/clamav
# Logging directory path

2
rc.clamav/clamav-log/env/LOGDIR_PERMS vendored Normal file
View File

@ -0,0 +1,2 @@
750
# Logging directory access rights in octal

2
rc.clamav/clamav-log/env/LOG_SCRIPT vendored Normal file
View File

@ -0,0 +1,2 @@
n4 s500000 T $LOGDIR_PATH
# Logging script used by s6-log

1
rc.clamav/clamav-log/notification-fd Normal file
View File

@ -0,0 +1 @@
3

24
rc.clamav/clamav-log/run Normal file
View File

@ -0,0 +1,24 @@
#!/bin/execlineb -P
################################################
# Start a logging daemon for the clamav daemon #
################################################
s6-envdir env
multisubstitute {
importas -u LOGDIR_OWNER LOGDIR_OWNER
importas -u LOGDIR_GROUP LOGDIR_GROUP
importas -u LOGDIR_PERMS LOGDIR_PERMS
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
importas -usCd" " LOG_SCRIPT LOG_SCRIPT
}
s6-envuidgid -B ${LOGDIR_OWNER}:${LOGDIR_GROUP}
multisubstitute {
importas -u LOGDIR_PATH LOGDIR_PATH
importas -u UID UID
importas -u GID GID
}
if { install -dm $LOGDIR_PERMS -o $UID -g $GID $LOGDIR_PATH }
s6-setuidgid ${UID}:${GID}
exec -c $CMD $CMD_OPTS -- $LOG_SCRIPT

1
rc.clamav/clamav-log/type Normal file
View File

@ -0,0 +1 @@
longrun

3
rc.clamav/clamd/data/check Executable file
View File

@ -0,0 +1,3 @@
#!/bin/execlineb -P
test -S /run/clamav/clamd.sock

5
rc.clamav/clamd/dependencies Normal file
View File

@ -0,0 +1,5 @@
tmpfs-run
# Comment out "remount-root" and uncomment "local-fs"
# if you use separate partition for /var
remount-root
#local-fs

1
rc.clamav/clamd/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
clamd

1
rc.clamav/clamd/notification-fd Normal file
View File

@ -0,0 +1 @@
3

1
rc.clamav/clamd/producer-for Normal file
View File

@ -0,0 +1 @@
clamav-log

13
rc.clamav/clamd/run Normal file
View File

@ -0,0 +1,13 @@
#!/bin/execlineb -P
######################################
# Start clamd (an anti-virus daemon) #
######################################
fdmove -c 2 1
foreground { install -o clamav -g clamav -m 0771 -d /run/clamav }
s6-envdir env
importas -u CMD CMD
s6-notifyoncheck -d -w3750 -n16
s6-setuidgid clamav
exec -c $CMD

1
rc.clamav/clamd/type Normal file
View File

@ -0,0 +1 @@
longrun

1
rc.clamav/freshclam/dependencies Normal file
View File

@ -0,0 +1 @@
clamd

1
rc.clamav/freshclam/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
freshclam

1
rc.clamav/freshclam/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-d

1
rc.clamav/freshclam/producer-for Normal file
View File

@ -0,0 +1 @@
clamav-log

14
rc.clamav/freshclam/run Normal file
View File

@ -0,0 +1,14 @@
#!/bin/execlineb -P
##################################################
# Start freshclam (a virus database update tool) #
##################################################
fdmove -c 2 1
s6-envdir env
multisubstitute {
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
}
s6-setuidgid clamav
exec -c $CMD $CMD_OPTS

1
rc.clamav/freshclam/type Normal file
View File

@ -0,0 +1 @@
longrun

4
rc.firewall/firewall/dependencies Normal file
View File

@ -0,0 +1,4 @@
network
# In some cases this service might need to be started after the service
# below dealing with IP packet forwarding
#ip_forward

9
rc.firewall/firewall/down Normal file
View File

@ -0,0 +1,9 @@
######################################################
# Run the rc.firewall_shutdown script (if it exists) #
######################################################
if -t { [ -x /etc/rc.d/rc.firewall_shutdown ] }
# Prepend every output with the service's name
pipeline -w { sed -u "s/^/firewall: /" }
fdmove -c 2 1
nft flush ruleset

1
rc.firewall/firewall/type Normal file
View File

@ -0,0 +1 @@
oneshot

11
rc.firewall/firewall/up Normal file
View File

@ -0,0 +1,11 @@
####################################################################
# Run the rc.firewall script #
# #
# See the HOWTOs on http://www.netfilter.org/ for documentation on #
# setting up a firewall or NAT on Linux #
####################################################################
# Prepend every output with the service's name
pipeline -w { sed -u "s/^/firewall: /" }
fdmove -c 2 1
nft -f /etc/nftables/conf.nft

1
rc.php-fpm/php-fpm82-log/consumer-for Normal file
View File

@ -0,0 +1 @@
php-fpm82-srv

4
rc.php-fpm/php-fpm82-log/dependencies Normal file
View File

@ -0,0 +1,4 @@
# Comment out "remount-root" and uncomment "local-fs"
# if you use separate partition for /var/log
remount-root
#local-fs

1
rc.php-fpm/php-fpm82-log/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
s6-log

1
rc.php-fpm/php-fpm82-log/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-d3

2
rc.php-fpm/php-fpm82-log/env/LOGDIR_GROUP vendored Normal file
View File

@ -0,0 +1,2 @@
adm
# Logging directory group ownership

2
rc.php-fpm/php-fpm82-log/env/LOGDIR_OWNER vendored Normal file
View File

@ -0,0 +1,2 @@
adm
# Logging directory owner

2
rc.php-fpm/php-fpm82-log/env/LOGDIR_PATH vendored Normal file
View File

@ -0,0 +1,2 @@
/var/log/php-fpm82
# Logging directory path

2
rc.php-fpm/php-fpm82-log/env/LOGDIR_PERMS vendored Normal file
View File

@ -0,0 +1,2 @@
750
# Logging directory access rights in octal

2
rc.php-fpm/php-fpm82-log/env/LOG_SCRIPT vendored Normal file
View File

@ -0,0 +1,2 @@
n4 s500000 T $LOGDIR_PATH
# Logging script used by s6-log

1
rc.php-fpm/php-fpm82-log/notification-fd Normal file
View File

@ -0,0 +1 @@
3

1
rc.php-fpm/php-fpm82-log/pipeline-name Normal file
View File

@ -0,0 +1 @@
php-fpm82

24
rc.php-fpm/php-fpm82-log/run Normal file
View File

@ -0,0 +1,24 @@
#!/bin/execlineb -P
#################################################
# Start a logging daemon for the php-fpm daemon #
#################################################
s6-envdir env
multisubstitute {
importas -u LOGDIR_OWNER LOGDIR_OWNER
importas -u LOGDIR_GROUP LOGDIR_GROUP
importas -u LOGDIR_PERMS LOGDIR_PERMS
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
importas -usCd" " LOG_SCRIPT LOG_SCRIPT
}
s6-envuidgid -B ${LOGDIR_OWNER}:${LOGDIR_GROUP}
multisubstitute {
importas -u LOGDIR_PATH LOGDIR_PATH
importas -u UID UID
importas -u GID GID
}
if { install -dm $LOGDIR_PERMS -o $UID -g $GID $LOGDIR_PATH }
s6-setuidgid ${UID}:${GID}
exec -c $CMD $CMD_OPTS -- $LOG_SCRIPT

1
rc.php-fpm/php-fpm82-log/type Normal file
View File

@ -0,0 +1 @@
longrun

5
rc.php-fpm/php-fpm82-srv/dependencies Normal file
View File

@ -0,0 +1,5 @@
tmpfs-run
# Comment out "remount-root" and uncomment "local-fs"
# if you use separate partition for /var
remount-root
#local-fs

1
rc.php-fpm/php-fpm82-srv/down-signal Normal file
View File

@ -0,0 +1 @@
SIGQUIT

1
rc.php-fpm/php-fpm82-srv/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
php-fpm-8.2

1
rc.php-fpm/php-fpm82-srv/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-F -O

1
rc.php-fpm/php-fpm82-srv/producer-for Normal file
View File

@ -0,0 +1 @@
php-fpm82-log

13
rc.php-fpm/php-fpm82-srv/run Normal file
View File

@ -0,0 +1,13 @@
#!/bin/execlineb -P
################################################
# Start the PHP FastCGI Process Manager daemon #
################################################
fdmove -c 2 1
s6-envdir env
multisubstitute {
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
}
exec -c $CMD $CMD_OPTS

1
rc.php-fpm/php-fpm82-srv/type Normal file
View File

@ -0,0 +1 @@
longrun

1
rc.prosody/prosody-log/consumer-for Normal file
View File

@ -0,0 +1 @@
prosody-srv

4
rc.prosody/prosody-log/dependencies Normal file
View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

1
rc.prosody/prosody-log/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
s6-log

1
rc.prosody/prosody-log/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-d3

2
rc.prosody/prosody-log/env/LOGDIR_GROUP vendored Normal file
View File

@ -0,0 +1,2 @@
root
# Logging directory group ownership

2
rc.prosody/prosody-log/env/LOGDIR_OWNER vendored Normal file
View File

@ -0,0 +1,2 @@
root
# Logging directory owner

2
rc.prosody/prosody-log/env/LOGDIR_PATH vendored Normal file
View File

@ -0,0 +1,2 @@
/var/log/prosody
# Logging directory path

2
rc.prosody/prosody-log/env/LOGDIR_PERMS vendored Normal file
View File

@ -0,0 +1,2 @@
750
# Logging directory access rights in octal

2
rc.prosody/prosody-log/env/LOG_SCRIPT vendored Normal file
View File

@ -0,0 +1,2 @@
n4 s500000 T $LOGDIR_PATH
# Logging script used by s6-log

1
rc.prosody/prosody-log/notification-fd Normal file
View File

@ -0,0 +1 @@
3

1
rc.prosody/prosody-log/pipeline-name Normal file
View File

@ -0,0 +1 @@
prosody

24
rc.prosody/prosody-log/run Normal file
View File

@ -0,0 +1,24 @@
#!/bin/execlineb -P
#################################################
# Start a logging daemon for the prosody daemon #
#################################################
s6-envdir env
multisubstitute {
importas -u LOGDIR_OWNER LOGDIR_OWNER
importas -u LOGDIR_GROUP LOGDIR_GROUP
importas -u LOGDIR_PERMS LOGDIR_PERMS
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
importas -usCd" " LOG_SCRIPT LOG_SCRIPT
}
s6-envuidgid -B ${LOGDIR_OWNER}:${LOGDIR_GROUP}
multisubstitute {
importas -u LOGDIR_PATH LOGDIR_PATH
importas -u UID UID
importas -u GID GID
}
if { install -dm $LOGDIR_PERMS -o $UID -g $GID $LOGDIR_PATH }
s6-setuidgid ${UID}:${GID}
exec -c $CMD $CMD_OPTS -- $LOG_SCRIPT

1
rc.prosody/prosody-log/type Normal file
View File

@ -0,0 +1 @@
longrun

5
rc.prosody/prosody-srv/dependencies Normal file
View File

@ -0,0 +1,5 @@
tmpfs-run
# Comment out "remount-root" and uncomment "local-fs"
# if you use separate partition for /var
remount-root
#local-fs

1
rc.prosody/prosody-srv/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
prosody

1
rc.prosody/prosody-srv/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
--config /etc/prosody/prosody.cfg.lua -F

1
rc.prosody/prosody-srv/producer-for Normal file
View File

@ -0,0 +1 @@
prosody-log

16
rc.prosody/prosody-srv/run Normal file
View File

@ -0,0 +1,16 @@
#!/bin/execlineb -P
###################################
# Start prosody (Lua XMPP Server) #
###################################
fdmove -c 2 1
if { install -do ldap -g ldap /var/run/openldap }
emptyenv -p
s6-envdir env
multisubstitute {
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
}
s6-setuidgid prosody
exec -c $CMD $CMD_OPTS

1
rc.prosody/prosody-srv/type Normal file
View File

@ -0,0 +1 @@
longrun

1
rc.rspamd/rspamd-log/consumer-for Normal file
View File

@ -0,0 +1 @@
rspamd-srv

4
rc.rspamd/rspamd-log/dependencies Normal file
View File

@ -0,0 +1,4 @@
# Comment out remount-root and uncomment local-fs
# if you use separate partition for /var/log
remount-root
#local-fs

1
rc.rspamd/rspamd-log/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
s6-log

1
rc.rspamd/rspamd-log/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-d3

2
rc.rspamd/rspamd-log/env/LOGDIR_GROUP vendored Normal file
View File

@ -0,0 +1,2 @@
root
# Logging directory group ownership

2
rc.rspamd/rspamd-log/env/LOGDIR_OWNER vendored Normal file
View File

@ -0,0 +1,2 @@
root
# Logging directory owner

2
rc.rspamd/rspamd-log/env/LOGDIR_PATH vendored Normal file
View File

@ -0,0 +1,2 @@
/var/log/rspamd
# Logging directory path

2
rc.rspamd/rspamd-log/env/LOGDIR_PERMS vendored Normal file
View File

@ -0,0 +1,2 @@
750
# Logging directory access rights in octal

2
rc.rspamd/rspamd-log/env/LOG_SCRIPT vendored Normal file
View File

@ -0,0 +1,2 @@
n4 s500000 T $LOGDIR_PATH
# Logging script used by s6-log

1
rc.rspamd/rspamd-log/notification-fd Normal file
View File

@ -0,0 +1 @@
3

1
rc.rspamd/rspamd-log/pipeline-name Normal file
View File

@ -0,0 +1 @@
rspamd

24
rc.rspamd/rspamd-log/run Normal file
View File

@ -0,0 +1,24 @@
#!/bin/execlineb -P
################################################
# Start a logging daemon for the rspamd daemon #
################################################
s6-envdir env
multisubstitute {
importas -u LOGDIR_OWNER LOGDIR_OWNER
importas -u LOGDIR_GROUP LOGDIR_GROUP
importas -u LOGDIR_PERMS LOGDIR_PERMS
importas -u CMD CMD
importas -usCd" " CMD_OPTS CMD_OPTS
importas -usCd" " LOG_SCRIPT LOG_SCRIPT
}
s6-envuidgid -B ${LOGDIR_OWNER}:${LOGDIR_GROUP}
multisubstitute {
importas -u LOGDIR_PATH LOGDIR_PATH
importas -u UID UID
importas -u GID GID
}
if { install -dm $LOGDIR_PERMS -o $UID -g $GID $LOGDIR_PATH }
s6-setuidgid ${UID}:${GID}
exec -c $CMD $CMD_OPTS -- $LOG_SCRIPT

1
rc.rspamd/rspamd-log/type Normal file
View File

@ -0,0 +1 @@
longrun

3
rc.rspamd/rspamd-srv/data/check Executable file
View File

@ -0,0 +1,3 @@
#!/bin/execlineb -P
rspamc uptime

2
rc.rspamd/rspamd-srv/dependencies Normal file
View File

@ -0,0 +1,2 @@
redis-instances
bind

1
rc.rspamd/rspamd-srv/env/CMD vendored Normal file
View File

@ -0,0 +1 @@
rspamd

1
rc.rspamd/rspamd-srv/env/CMD_OPTS vendored Normal file
View File

@ -0,0 +1 @@
-f -c /etc/rspamd/rspamd.conf -u rspamd -g rspamd

3
rc.rspamd/rspamd-srv/finish Executable file
View File

@ -0,0 +1,3 @@
#!/bin/sh
/bin/rm -f /var/lib/rspamd/rspamd.sock

Some files were not shown because too many files have changed in this diff Show More