From 878b37178d5b55046871ce53371eec5efb52cc78 Mon Sep 17 00:00:00 2001 From: Xe Iaso Date: Fri, 4 Apr 2025 08:15:04 -0400 Subject: implement packaging proof of concept with yeet (#194) * implement packaging proof of concept with yeet Signed-off-by: Xe Iaso * docs/developer: add local dev docs for yeet Signed-off-by: Xe Iaso * apply review feedback Signed-off-by: Xe Iaso * build package artifacts in CI Signed-off-by: Xe Iaso * tell CI to fetch all git metadata Signed-off-by: Xe Iaso * rename package builds job Signed-off-by: Xe Iaso * upload each package individually Signed-off-by: Xe Iaso * split package build CI jobs Signed-off-by: Xe Iaso * fix code injection? Signed-off-by: Xe Iaso * fix ci? Signed-off-by: Xe Iaso * fix security alert Signed-off-by: Xe Iaso * docs/local-dev: point people to yeet v1.13.3 Signed-off-by: Xe Iaso --------- Signed-off-by: Xe Iaso --- run/anubis.env.default | 5 ----- run/anubis@.service | 8 +++++++- run/default.env | 5 +++++ 3 files changed, 12 insertions(+), 6 deletions(-) delete mode 100644 run/anubis.env.default create mode 100644 run/default.env (limited to 'run') diff --git a/run/anubis.env.default b/run/anubis.env.default deleted file mode 100644 index b72eddd..0000000 --- a/run/anubis.env.default +++ /dev/null @@ -1,5 +0,0 @@ -BIND=:8923 -DIFFICULTY=3 -METRICS_BIND=:9090 -SERVE_ROBOTS_TXT=0 -TARGET=http://localhost:3000 \ No newline at end of file diff --git a/run/anubis@.service b/run/anubis@.service index 102775f..5103fef 100644 --- a/run/anubis@.service +++ b/run/anubis@.service @@ -5,8 +5,14 @@ Description="Anubis HTTP defense proxy (instance %i)" ExecStart=/usr/bin/anubis Restart=always RestartSec=30s -EnvironmentFile=/etc/anubis/anubis-%i.env +EnvironmentFile=/etc/anubis/%i.env LimitNOFILE=infinity +DynamicUser=yes +CacheDirectory=anubis/%i +CacheDirectoryMode=0755 +StateDirectory=anubis/%i +StateDirectoryMode=0755 +ReadWritePaths=/run [Install] WantedBy=multi-user.target \ No newline at end of file diff --git a/run/default.env b/run/default.env new file mode 100644 index 0000000..935cdb6 --- /dev/null +++ b/run/default.env @@ -0,0 +1,5 @@ +BIND=:8923 +DIFFICULTY=4 +METRICS_BIND=:9090 +SERVE_ROBOTS_TXT=0 +TARGET=http://localhost:3000 \ No newline at end of file -- cgit v1.2.3