Ajout : 3615.cyclocoop.org .

diff --git a/etc/gitolite b/etc/gitolite
index 6714e91..0dbe0bb 160000 (submodule)
--- a/etc/gitolite
+++ b/etc/gitolite
@@ -1 +1 @@
-Subproject commit 6714e91491e77570d65f72f96d1f6d9c623b4de6
+Subproject commit 0dbe0bb9a10796622eaf30f27b1d2c26f7771397

diff --git a/etc/nginx/nginx.conf b/etc/nginx/nginx.conf
index ad979c3..70aed2c 100644 (file)
--- a/etc/nginx/nginx.conf
+++ b/etc/nginx/nginx.conf
@@ -9,6 +9,16 @@ http {
         '$remote_addr - $remote_user [$time_local] "$request" '
         '$status $body_bytes_sent "$http_referer" '
         '"$http_user_agent" "$http_x_forwarded_for"';
+       log_format piwik
+        '{"ip": "$remote_addr",'
+        '"host": "$host",'
+        '"path": "$request_uri",'
+        '"status": "$status",'
+        '"referrer": "$http_referer",'
+        '"user_agent": "$http_user_agent",'
+        '"length": $bytes_sent,'
+        '"generation_time_milli": $request_time,'
+        '"date": "$time_iso8601"}';
        access_log /var/log/nginx/access.log main buffer=32k;
        client_body_buffer_size 4K;
                # NOTE: % getconf PAGESIZE

diff --git a/etc/nginx/site.d/cyclo-3615/http.conf b/etc/nginx/site.d/cyclo-3615/http.conf
new file mode 100644 (file)
index 0000000..83500fb
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-3615/http.conf
@@ -0,0 +1,7 @@
+server {
+       listen 80;
+       server_name
+        3615.cyclocoop.org;
+       
+       return 301 https://$host$request_uri;
+ }

diff --git a/etc/nginx/site.d/cyclo-3615/local.conf b/etc/nginx/site.d/cyclo-3615/local.conf
new file mode 100644 (file)
index 0000000..20b0972
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-3615/local.conf
@@ -0,0 +1,6 @@
+listen 443;
+include /etc/nginx/conf.d/ssl.conf;
+ssl_certificate        /etc/nginx/x509.d/cyclo-3615/crt.pem;
+ssl_certificate_key    /etc/nginx/x509.d/cyclo-3615/key.pem;
+ssl_client_certificate /etc/nginx/x509.d/cyclo-3615/user-crt.pem;
+ssl_session_timeout 5m;

diff --git a/etc/nginx/site.d/cyclo-3615/local.sh b/etc/nginx/site.d/cyclo-3615/local.sh
new file mode 100644 (file)
index 0000000..e714202
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-3615/local.sh
@@ -0,0 +1,116 @@
+hint="run before: remote/runit-configure nginx -- $site"
+assert "sudo test -f /etc/nginx/x509.d/\"$site\"/key.pem" hint
+assert "sudo test -f ~wiki-$site/etc/ssh/id_rsa" hint
+
+sudo install -m 664 -o www -g www \
+ "$tool"/var/pub/x509/3615.cyclocoop.org/crt+ca.pem \
+ /etc/nginx/x509.d/"$site"/crt.pem
+
+"$tool"/local/apt-get-install ikiwiki \
+ xapian-omega \
+ libsearch-xapian-perl \
+ libdigest-sha-perl \
+ libhtml-scrubber-perl
+
+#"$tool"/local/adduser fcgi-"$site" \
+# --disabled-login \
+# --disabled-password \
+# --group \
+# --home /home/cyclo/var/ikiwiki/'"'$site'"' \
+# --shell /bin/false \
+# --system
+"$tool"/local/adduser www-"$site" \
+ --disabled-login \
+ --disabled-password \
+ --group \
+ --home /home/www/data/"$site" \
+ --shell /bin/false \
+ --system
+#sudo adduser fcgi-"$site" www-"$site"
+#sudo adduser fcgi-"$site" wiki-"$site"
+#sudo adduser www-"$site"-tls www-"$site"
+sudo install -d -m 2770 -o wiki-"$site" -g wiki-"$site" \
+ /home/cyclo/var/ikiwiki/"$site"
+sudo install -d -m 3771 -o git -g git \
+ /home/git/hooks/cyclo
+sudo install -d -m 2770 -o git -g www-"$site" \
+ /home/git/hooks/cyclo/"$site"
+sudo install -m 771 -o git -g git /dev/stdin \
+ /home/git/data/3615cyclo.git/hooks/post-update <<-EOF
+       #!/bin/sh -efux
+       
+       # The cd below is why we must use this script.
+       # The current directory may not be accessible
+       # by the user running the ikiwiki.
+       # the execution of the ikiwiki wrapper would fail with :
+       # "E: Failed to change to directory '...': Permission denied"
+       cd /
+       
+       exec /home/git/hooks/cyclo/$site/post-update.ikiwiki
+       EOF
+
+if sudo test -d /home/cyclo/var/ikiwiki/"$site"/src/.git
+ then sudo -u wiki-"$site" sh -$-c ' \
+               cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
+               git pull -v &&
+               git submodule update --recursive --init'
+ else
+       sudo -u wiki-"$site" sh -$-c ' \
+               umask 007 &&
+               git clone \
+                git@localhost:3615cyclo \
+                /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
+               cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
+               git config core.sharedRepository group
+        '
+ fi
+
+sudo adduser wiki-"$site" www-"$site"
+sudo adduser wiki-"$site" wiki-cyclo-wiki
+sudo install -d -m 2770 -o wiki-"$site" -g fcgi-"$site" \
+ /home/www/data/"$site"/cgi
+
+sudo install -d -m 2771 -o wiki-"$site" -g wiki-"$site" \
+ /home/cyclo/var/ikiwiki/"$site" \
+ /home/cyclo/var/ikiwiki/"$site"/src
+cd /
+sudo -u wiki-"$site" ikiwiki \
+ --verbose \
+ --setup /home/cyclo/var/ikiwiki/"$site"/src/ikiwiki.setup \
+ --refresh \
+ --wrappers
+sudo chmod g+w \
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki \
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/3615 # TODO: chmod all database
+
+sudo install -m 664 -o wiki-"$site" -g wiki-"$site" /dev/stdin \
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/omega.conf <<-EOF
+       database_dir .
+       template_dir ./templates
+       EOF
+
+sudo cat /etc/gitweb/gitweb.conf - <<-EOF |
+       \$export_ok = "cyclo-3615-export-ok";
+       \$favicon = "/gitweb/static/git-favicon.png";
+       \$home_link = "/";
+       \$home_link_str = '3615';
+       \$home_text = "/etc/gitweb/cyclo.home_text.html";
+       \$javascript = "/gitweb/static/gitweb.js";
+       \$logo = "/gitweb/static/git-logo.png";
+       \$my_uri = "/gitweb/";
+       \$my_url = "/gitweb/";
+       \$projects_list = "/etc/gitweb/cyclo-3615.projects.list";
+       \$site_footer = "/etc/gitweb/cyclo.site_footer.html";
+       \$site_header = "/etc/gitweb/cyclo.site_header.html";
+       \$site_name = "3615.cyclocoop.org";
+       @stylesheets = ("/gitweb/static/gitweb.css");#
+       EOF
+sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
+ /etc/gitweb/cyclo-3615.conf
+sudo install -m 640 -o root -g fcgi-gitweb \
+ "$tool"/etc/gitweb/cyclo.home_text.html \
+        /etc/gitweb/cyclo.home_text.html
+sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
+ /etc/gitweb/cyclo-3615.projects.list <<-EOF
+       cyclo3615.git
+       EOF

diff --git a/etc/nginx/site.d/cyclo-3615/remote.sh b/etc/nginx/site.d/cyclo-3615/remote.sh
new file mode 100644 (file)
index 0000000..87d6cb5
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-3615/remote.sh
@@ -0,0 +1,34 @@
+gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
+"$tool"/remote/ssh root@"$local_ipv4" ' \
+       set +x
+       key=$(cat)
+       set -e -f -u -x
+       sudo install -d -m 1751 -o cyclo -g cyclo \
+        /home/cyclo \
+        /home/cyclo/var \
+        /home/cyclo/var/ikiwiki
+       getent passwd wiki-'"'$site'"' >/dev/null ||
+       sudo adduser wiki-'"'$site'"' \
+        --disabled-login \
+        --disabled-password \
+        --group \
+        --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \
+        --shell /bin/false \
+        --system
+       sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+        /home/cyclo/var/ikiwiki/'"'$site'"'
+       sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+        /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh
+       sudo install    -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
+        /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF
+               $key
+               EOF
+       sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
+        /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi
+       sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
+        /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh
+       sudo install    -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \
+        /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF
+               $key
+               EOF
+ '

diff --git a/etc/nginx/site.d/cyclo-3615/site.conf b/etc/nginx/site.d/cyclo-3615/site.conf
new file mode 100644 (file)
index 0000000..331fd19
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-3615/site.conf
@@ -0,0 +1,77 @@
+server_name
+ 3615.cyclocoop.org;
+
+access_log /home/www/log/cyclo-3615/nginx/access.piwik.log piwik;
+auth_basic "pour demander un compte: admin+3615@cyclocoop.org";
+auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
+client_body_buffer_size 8k;
+client_max_body_size 10m;
+error_page 404 /cgi/ikiwiki.cgi?do=create&page=$uri;
+
+location ~ ^/gitweb/static/.+\.(css|png|js)$ {
+       root /usr/share/;
+       access_log off;
+       expires 30d;
+       log_not_found off;
+ }
+location ~ ^/gitweb($|/) {
+       root /usr/share/gitweb;
+       fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
+       include /etc/nginx/conf.d/fastcgi.conf;
+       set $no_cache "0";
+       if ($request_method !~ ^(GET|HEAD)$) {
+        # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
+               set $no_cache "1";
+        }
+       if ($no_cache = "1") {
+        # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
+               add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
+               add_header X-Microcachable "0";
+        }
+       if ($http_cookie ~* "_mcnc") {
+        # NOTE: bypass cache if no-cache cookie is set.
+               set $no_cache "1";
+        }
+       fastcgi_cache_bypass $no_cache;
+       fastcgi_cache_use_stale updating;
+       fastcgi_cache_valid 200 10s;
+       fastcgi_cache_valid 404 30m;
+       fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
+       fastcgi_no_cache $no_cache;
+       fastcgi_param GITWEB_CONFIG /etc/gitweb/cyclo-3615.conf;
+       fastcgi_param PATH_INFO $uri;
+       
+       fastcgi_pass_header Cookie;
+       fastcgi_pass_header Set-Cookie;
+       fastcgi_split_path_info ^(.+\.cgi)(/.+)$;
+       
+       fastcgi_pass unix:/run/spawn-fcgi/gitweb;
+ }
+
+location /cgi/ikiwiki.cgi {
+       include /etc/nginx/conf.d/fastcgi.conf;
+       fastcgi_index cgi/ikiwiki.cgi;
+       fastcgi_pass unix:/run/spawn-fcgi/cyclo-3615;
+ }
+location ~* ^.+\.(css|gif|ico|jpeg|js|jpg|png)$ {
+       access_log off;
+       expires 30d;
+       log_not_found off;
+ }
+location ~* ^.+\.(html|txt|xhtml|xml)$ {
+       expires 60s;
+ }
+location ~ /\. {
+       access_log off;
+       deny all;
+       log_not_found off;
+ }
+location / {
+       index index.html;
+ }
+location /Public {
+       rewrite ^/Public(.*)$ https://wiki.cyclocoop.org$1 last;
+       #return 301 https://wiki.cyclocoop.org;
+ }
+
+# vim: ft=sh

diff --git a/etc/nginx/site.d/cyclo-3615/x509_host b/etc/nginx/site.d/cyclo-3615/x509_host
new file mode 100644 (file)
index 0000000..4c0285c
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-3615/x509_host
@@ -0,0 +1 @@
+3615.cyclocoop.org

diff --git a/etc/nginx/site.d/cyclo-vie/http.conf b/etc/nginx/site.d/cyclo-vie/http.conf
deleted file mode 100644 (file)
index 53c3101..0000000
--- a/etc/nginx/site.d/cyclo-vie/http.conf
+++ /dev/null
@@ -1,7 +0,0 @@
-server {
-       listen 80;
-       server_name
-        vie.cyclocoop.org;
-       
-       return 301 https://$host$request_uri;
- }

diff --git a/etc/nginx/site.d/cyclo-vie/local.conf b/etc/nginx/site.d/cyclo-vie/local.conf
deleted file mode 100644 (file)
index 8c85cc2..0000000
--- a/etc/nginx/site.d/cyclo-vie/local.conf
+++ /dev/null
@@ -1,6 +0,0 @@
-listen 443;
-include /etc/nginx/conf.d/ssl.conf;
-ssl_certificate        /etc/nginx/x509.d/cyclo-vie/crt.pem;
-ssl_certificate_key    /etc/nginx/x509.d/cyclo-vie/key.pem;
-ssl_client_certificate /etc/nginx/x509.d/cyclo-vie/user-crt.pem;
-ssl_session_timeout 5m;

diff --git a/etc/nginx/site.d/cyclo-vie/local.sh b/etc/nginx/site.d/cyclo-vie/local.sh
deleted file mode 100644 (file)
index d4ed833..0000000
--- a/etc/nginx/site.d/cyclo-vie/local.sh
+++ /dev/null
@@ -1,110 +0,0 @@
-hint="run before: remote/runit-configure nginx -- $site"
-assert "sudo test -f /etc/nginx/x509.d/\"$site\"/key.pem" hint
-assert "sudo test -f ~wiki-$site/etc/ssh/id_rsa" hint
-
-sudo install -m 664 -o www -g www \
- "$tool"/var/pub/x509/vie.cyclocoop.org/crt+ca.pem \
- /etc/nginx/x509.d/"$site"/crt.pem
-
-"$tool"/local/apt-get-install ikiwiki \
- xapian-omega \
- libsearch-xapian-perl \
- libdigest-sha-perl \
- libhtml-scrubber-perl
-
-"$tool"/local/adduser fcgi-"$site" \
- --disabled-login \
- --disabled-password \
- --group \
- --home /home/cyclo/var/ikiwiki/'"'$site'"' \
- --shell /bin/false \
- --system
-"$tool"/local/adduser www-"$site" \
- --disabled-login \
- --disabled-password \
- --group \
- --home /home/www/data/"$site" \
- --shell /bin/false \
- --system
-sudo adduser fcgi-"$site" www-"$site"
-sudo adduser fcgi-"$site" wiki-"$site"
-#sudo adduser www-"$site"-tls www-"$site"
-sudo install -d -m 2770 -o wiki-"$site" -g wiki-"$site" \
- /home/cyclo/var/ikiwiki/"$site"
-sudo install -d -m 3771 -o git -g git \
- /home/git/hooks/cyclo
-sudo install -d -m 750 -o wiki-"$site" -g git \
- /home/git/hooks/cyclo/"$site"
-sudo install -m 771 -o git -g git /dev/stdin \
- /home/git/data/cyclovie.git/hooks/post-update <<-EOF
-       #!/bin/sh -efux
-       
-       # The cd below is why we must use this script.
-       # The current directory may not be accessible
-       # by the user running the ikiwiki.
-       # the execution of the ikiwiki wrapper would fail with :
-       # "E: Failed to change to directory '...': Permission denied"
-       cd /
-       
-       exec /home/git/hooks/cyclo/$site/post-update.ikiwiki
-       EOF
-
-if sudo test -d /home/cyclo/var/ikiwiki/"$site"/src/.git
- then sudo -u wiki-"$site" sh -$-c ' \
-               cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
-               git pull -v &&
-               git submodule update --recursive --init'
- else
-       sudo -u wiki-"$site" sh -$-c ' \
-               umask 007 &&
-               git clone \
-                git@localhost:cyclovie \
-                /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
-               cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
-               git config core.sharedRepository group &&
-               git submodule update --recursive --init
-        '
- fi
-
-sudo adduser wiki-"$site" www-"$site"
-sudo install -d -m 2770 -o wiki-"$site" -g fcgi-"$site" \
- /home/www/data/"$site"/cgi
-cd /
-sudo -u wiki-"$site" ikiwiki \
- --verbose \
- --setup /home/cyclo/var/ikiwiki/"$site"/src/ikiwiki.setup \
- --refresh \
- --wrappers
-sudo chown fcgi-"$site":wiki-"$site" \
- /home/git/hooks/cyclo/"$site"/post-update.ikiwiki
-sudo chmod 6755 \
- /home/git/hooks/cyclo/"$site"/post-update.ikiwiki
-sudo chmod g+w \
- /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki \
- /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/default
-
-sudo cat /etc/gitweb/gitweb.conf - <<-EOF |
-       \$export_ok = "cyclo-vie-export-ok";
-       \$favicon = "/gitweb/static/git-favicon.png";
-       \$home_link = "/";
-       \$home_link_str = 'vie';
-       \$home_text = "/etc/gitweb/cyclo.home_text.html";
-       \$javascript = "/gitweb/static/gitweb.js";
-       \$logo = "/gitweb/static/git-logo.png";
-       \$my_uri = "/gitweb/";
-       \$my_url = "/gitweb/";
-       \$projects_list = "/etc/gitweb/cyclo-vie.projects.list";
-       \$site_footer = "/etc/gitweb/cyclo.site_footer.html";
-       \$site_header = "/etc/gitweb/cyclo.site_header.html";
-       \$site_name = "vie.cyclocoop.org";
-       @stylesheets = ("/gitweb/static/gitweb.css");#
-       EOF
-sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
- /etc/gitweb/cyclo-vie.conf
-sudo install -m 640 -o root -g fcgi-gitweb \
- "$tool"/etc/gitweb/cyclo.home_text.html \
-        /etc/gitweb/cyclo.home_text.html
-sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
- /etc/gitweb/cyclo-vie.projects.list <<-EOF
-       cyclovie.git
-       EOF

diff --git a/etc/nginx/site.d/cyclo-vie/remote.sh b/etc/nginx/site.d/cyclo-vie/remote.sh
deleted file mode 100644 (file)
index 87d6cb5..0000000
--- a/etc/nginx/site.d/cyclo-vie/remote.sh
+++ /dev/null
@@ -1,34 +0,0 @@
-gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
-"$tool"/remote/ssh root@"$local_ipv4" ' \
-       set +x
-       key=$(cat)
-       set -e -f -u -x
-       sudo install -d -m 1751 -o cyclo -g cyclo \
-        /home/cyclo \
-        /home/cyclo/var \
-        /home/cyclo/var/ikiwiki
-       getent passwd wiki-'"'$site'"' >/dev/null ||
-       sudo adduser wiki-'"'$site'"' \
-        --disabled-login \
-        --disabled-password \
-        --group \
-        --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \
-        --shell /bin/false \
-        --system
-       sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
-        /home/cyclo/var/ikiwiki/'"'$site'"'
-       sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
-        /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh
-       sudo install    -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
-        /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF
-               $key
-               EOF
-       sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
-        /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi
-       sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
-        /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh
-       sudo install    -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \
-        /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF
-               $key
-               EOF
- '

diff --git a/etc/nginx/site.d/cyclo-vie/site.conf b/etc/nginx/site.d/cyclo-vie/site.conf
deleted file mode 100644 (file)
index 6de43fd..0000000
--- a/etc/nginx/site.d/cyclo-vie/site.conf
+++ /dev/null
@@ -1,69 +0,0 @@
-server_name
- vie.cyclocoop.org;
-
-auth_basic "pour demander un compte: admin+vie@cyclocoop.org";
-auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
-client_body_buffer_size 8k;
-client_max_body_size 10m;
-error_page 404 /cgi/ikiwiki.cgi?do=create&page=$uri;
-
-location ~ ^/gitweb/static/.+\.(css|png|js)$ {
-       root /usr/share/;
-       access_log off;
-       expires 30d;
-       log_not_found off;
- }
-location ~ ^/gitweb($|/) {
-       root /usr/share/gitweb;
-       fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
-       include /etc/nginx/conf.d/fastcgi.conf;
-       set $no_cache "0";
-       if ($request_method !~ ^(GET|HEAD)$) {
-        # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
-               set $no_cache "1";
-        }
-       if ($no_cache = "1") {
-        # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
-               add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
-               add_header X-Microcachable "0";
-        }
-       if ($http_cookie ~* "_mcnc") {
-        # NOTE: bypass cache if no-cache cookie is set.
-               set $no_cache "1";
-        }
-       fastcgi_cache_bypass $no_cache;
-       fastcgi_cache_use_stale updating;
-       fastcgi_cache_valid 200 10s;
-       fastcgi_cache_valid 404 30m;
-       fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
-       fastcgi_no_cache $no_cache;
-       fastcgi_param GITWEB_CONFIG /etc/gitweb/cyclo-vie.conf;
-       fastcgi_param PATH_INFO $uri;
-       
-       fastcgi_pass_header Cookie;
-       fastcgi_pass_header Set-Cookie;
-       fastcgi_split_path_info ^(.+\.cgi)(/.+)$;
-       
-       fastcgi_pass unix:/run/spawn-fcgi/gitweb;
- }
-
-location /cgi/ikiwiki.cgi {
-       include /etc/nginx/conf.d/fastcgi.conf;
-       fastcgi_index cgi/ikiwiki.cgi;
-       fastcgi_pass unix:/run/spawn-fcgi/cyclo-vie;
- }
-location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
-       access_log off;
-       expires 30d;
-       log_not_found off;
- }
-location ~ /\. {
-       access_log off;
-       deny all;
-       log_not_found off;
- }
-location / {
-       index index.html;
- }
-
-# vim: ft=sh

diff --git a/etc/nginx/site.d/cyclo-vie/x509_host b/etc/nginx/site.d/cyclo-vie/x509_host
deleted file mode 100644 (file)
index 0466032..0000000
--- a/etc/nginx/site.d/cyclo-vie/x509_host
+++ /dev/null
@@ -1 +0,0 @@
-vie.cyclocoop.org

diff --git a/etc/nginx/site.d/cyclo-wiki/local.sh b/etc/nginx/site.d/cyclo-wiki/local.sh
index c539e47..3697bf5 100644 (file)
--- a/etc/nginx/site.d/cyclo-wiki/local.sh
+++ b/etc/nginx/site.d/cyclo-wiki/local.sh
@@ -46,6 +46,7 @@ sudo install -m 771 -o git -g git /dev/stdin \
        # "E: Failed to change to directory '...': Permission denied"
        cd /
        
+       /home/git/hooks/cyclo/cyclo-3615/post-update.ikiwiki &
        exec /home/git/hooks/cyclo/$site/post-update.ikiwiki
        EOF
 
@@ -61,7 +62,7 @@ if sudo test -d /home/cyclo/var/ikiwiki/"$site"/src/.git
                 git@localhost:cyclowiki \
                 /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
                cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
-               git config core.sharedRepository group &&
+               git config core.sharedRepository all &&
                git submodule update --recursive --init
         '
  fi
@@ -77,7 +78,8 @@ sudo -u wiki-"$site" ikiwiki \
  --wrappers
 sudo chmod g+w \
  /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki \
- /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/default
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/wiki # TODO: chmod all database
+
 sudo install -m 664 -o wiki-"$site" -g wiki-"$site" /dev/stdin \
  /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/omega.conf <<-EOF
        database_dir .

diff --git a/etc/nginx/site.d/cyclo-wiki/site.conf b/etc/nginx/site.d/cyclo-wiki/site.conf
index 834df10..e96dc74 100644 (file)
--- a/etc/nginx/site.d/cyclo-wiki/site.conf
+++ b/etc/nginx/site.d/cyclo-wiki/site.conf
@@ -1,6 +1,7 @@
 server_name
  wiki.cyclocoop.org;
 
+access_log /home/www/log/cyclo-wiki/nginx/access.piwik.log piwik;
 auth_basic "pour demander un compte: admin+wiki@cyclocoop.org";
 auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
 client_body_buffer_size 8k;
@@ -14,6 +15,8 @@ location ~ ^/gitweb/static/.+\.(css|png|js)$ {
        log_not_found off;
  }
 location ~ ^/gitweb($|/) {
+       auth_basic "no pasaran";
+       auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
        root /usr/share/gitweb;
        fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
        include /etc/nginx/conf.d/fastcgi.conf;
@@ -52,11 +55,14 @@ location /cgi/ikiwiki.cgi {
        fastcgi_index cgi/ikiwiki.cgi;
        fastcgi_pass unix:/run/spawn-fcgi/cyclo-wiki;
  }
-location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
+location ~* ^.+\.(css|gif|ico|jpeg|js|jpg|png)$ {
        access_log off;
        expires 30d;
        log_not_found off;
  }
+location ~* ^.+\.(html|txt|xhtml|xml)$ {
+       expires 60s;
+ }
 location ~ /\. {
        access_log off;
        deny all;
@@ -65,5 +71,9 @@ location ~ /\. {
 location / {
        index index.html;
  }
+location /3615 {
+       rewrite ^/3615(.*)$ https://3615.cyclocoop.org$1 last;
+       #return 301 https://3615.cyclocoop.org;
+ }
 
 # vim: ft=sh

diff --git a/etc/nginx/site.d/cyclo-wiki/site.conf.old b/etc/nginx/site.d/cyclo-wiki/site.conf.old
new file mode 100644 (file)
index 0000000..834df10
--- /dev/null
+++ b/etc/nginx/site.d/cyclo-wiki/site.conf.old
@@ -0,0 +1,69 @@
+server_name
+ wiki.cyclocoop.org;
+
+auth_basic "pour demander un compte: admin+wiki@cyclocoop.org";
+auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
+client_body_buffer_size 8k;
+client_max_body_size 10m;
+error_page 404 /cgi/ikiwiki.cgi?do=create&page=$uri;
+
+location ~ ^/gitweb/static/.+\.(css|png|js)$ {
+       root /usr/share/;
+       access_log off;
+       expires 30d;
+       log_not_found off;
+ }
+location ~ ^/gitweb($|/) {
+       root /usr/share/gitweb;
+       fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
+       include /etc/nginx/conf.d/fastcgi.conf;
+       set $no_cache "0";
+       if ($request_method !~ ^(GET|HEAD)$) {
+        # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
+               set $no_cache "1";
+        }
+       if ($no_cache = "1") {
+        # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
+               add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
+               add_header X-Microcachable "0";
+        }
+       if ($http_cookie ~* "_mcnc") {
+        # NOTE: bypass cache if no-cache cookie is set.
+               set $no_cache "1";
+        }
+       fastcgi_cache_bypass $no_cache;
+       fastcgi_cache_use_stale updating;
+       fastcgi_cache_valid 200 10s;
+       fastcgi_cache_valid 404 30m;
+       fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
+       fastcgi_no_cache $no_cache;
+       fastcgi_param GITWEB_CONFIG /etc/gitweb/cyclo-wiki.conf;
+       fastcgi_param PATH_INFO $uri;
+       
+       fastcgi_pass_header Cookie;
+       fastcgi_pass_header Set-Cookie;
+       fastcgi_split_path_info ^(.+\.cgi)(/.+)$;
+       
+       fastcgi_pass unix:/run/spawn-fcgi/gitweb;
+ }
+
+location /cgi/ikiwiki.cgi {
+       include /etc/nginx/conf.d/fastcgi.conf;
+       fastcgi_index cgi/ikiwiki.cgi;
+       fastcgi_pass unix:/run/spawn-fcgi/cyclo-wiki;
+ }
+location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
+       access_log off;
+       expires 30d;
+       log_not_found off;
+ }
+location ~ /\. {
+       access_log off;
+       deny all;
+       log_not_found off;
+ }
+location / {
+       index index.html;
+ }
+
+# vim: ft=sh

diff --git a/etc/nsd3/zone.d/cyclocoop.org.zone.m4 b/etc/nsd3/zone.d/cyclocoop.org.zone.m4
index bca662d..072bf95 100644 (file)
--- a/etc/nsd3/zone.d/cyclocoop.org.zone.m4
+++ b/etc/nsd3/zone.d/cyclocoop.org.zone.m4
@@ -32,6 +32,7 @@ $TTL 1d ; TTL (Time To Live) par défaut pour les enregistrements
 
 ; ENREGISTREMENTS « A » (DNS -> adresse IPv4)
 @                   A IP4(GRESILLE)
+3615                A IP4(GRESILLE)
 agendav             A IP4(GRESILLE)
 autoconfig          A IP4(GRESILLE)
 caldavzap           A IP4(GRESILLE)
@@ -52,7 +53,6 @@ sql                 A IP4(GRESILLE)
 ssh                 A IP4(GRESILLE)
 submission          A IP4(GRESILLE)
 sympa               A IP4(GRESILLE)
-vie                 A IP4(GRESILLE)
 wiki                A IP4(GRESILLE)
 www                 A IP4(GRESILLE)
 

diff --git a/etc/openssl/3615.cyclocoop.org/ca b/etc/openssl/3615.cyclocoop.org/ca
new file mode 120000 (symlink)
index 0000000..2ef2817
--- /dev/null
+++ b/etc/openssl/3615.cyclocoop.org/ca
@@ -0,0 +1 @@
+../cyclocoop.org
\ No newline at end of file

diff --git a/etc/openssl/3615.cyclocoop.org/host.cfg b/etc/openssl/3615.cyclocoop.org/host.cfg
new file mode 100644 (file)
index 0000000..ec6f3eb
--- /dev/null
+++ b/etc/openssl/3615.cyclocoop.org/host.cfg
@@ -0,0 +1,70 @@
+       SERVICE     = 3615
+       RANDFILE    = var/sec/x509/openssl.rand
+       oid_section = extra_oids
+[ extra_oids ]
+       # NOTE: pour une éventuelle validation étendue (Extended Validation (EV))
+       jurisdictionOfIncorporationLocalityName        = 1.3.6.1.4.1.311.60.2.1.1
+       jurisdictionOfIncorporationStateOrProvinceName = 1.3.6.1.4.1.311.60.2.1.2
+       jurisdictionOfIncorporationCountryName         = 1.3.6.1.4.1.311.60.2.1.3
+[ req ]
+       prompt             = no
+       distinguished_name = distinguished_name
+       string_mask        = pkix
+       #x509_extensions    = root_extensions
+       #req_extensions     = extension
+       #attributes         = req_attributes
+[ distinguished_name ]
+       countryName            = $ENV::x509_country
+       stateOrProvinceName    = $ENV::x509_state_or_province
+       localityName           = $ENV::x509_state_or_province
+       0.organizationName     = $ENV::x509_organization
+       organizationalUnitName = 3615 CYCLO
+       commonName             = $SERVICE.$ENV::x509_host
+       businessCategory                               = $ENV::x509_business_category
+       jurisdictionOfIncorporationLocalityName        = $ENV::x509_state_or_province
+       jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
+       jurisdictionOfIncorporationCountryName         = $ENV::x509_country
+[ extensions ]
+       basicConstraints       = critical,CA:TRUE,pathlen:0
+       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
+       subjectKeyIdentifier   = hash
+       issuerAltName          = issuer:copy
+       authorityKeyIdentifier = keyid:always,issuer:always
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
+       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+       certificatePolicies    = @certificate_policies
+[ self_signed_extensions ]
+       basicConstraints       = critical,CA:TRUE,pathlen:0
+       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
+       subjectKeyIdentifier   = hash
+       issuerAltName          = issuer:copy
+       authorityKeyIdentifier = keyid:always,issuer:always
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+[ user_extensions ]
+       basicConstraints       = critical,CA:FALSE,pathlen:0
+       keyUsage               = digitalSignature,keyEncipherment
+       subjectAltName         = email:$ENV::user@$ENV::x509_host
+       subjectKeyIdentifier   = hash
+       issuerAltName          = issuer:copy
+       authorityKeyIdentifier = keyid:always,issuer:always
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+[ certificate_policies ]
+       policyIdentifier = 1.2.250.1.42
+       CPS.1            = https://www.$ENV::x509_host/x509/cps
+[ ca ]
+       private_key      = var/sec/x509/$ENV::x509/key.pem
+       dir              = var/pub/x509/$ENV::x509
+       crl_dir          = $dir
+       crlnumber        = $dir/crl.num
+       crl              = $dir/crl.pem
+       database         = $dir/idx.txt
+[ self_signed_ca ]
+       private_key      = var/sec/x509/$ENV::x509/key.pem
+       dir              = var/pub/x509/$ENV::x509
+       crl_dir          = $dir
+       crlnumber        = $dir/crl.self-signed.num
+       crl              = $dir/crl.self-signed.pem
+       database         = $dir/idx.self-signed.txt

diff --git a/etc/openssl/3615.cyclocoop.org/user.cfg b/etc/openssl/3615.cyclocoop.org/user.cfg
new file mode 100644 (file)
index 0000000..5677438
--- /dev/null
+++ b/etc/openssl/3615.cyclocoop.org/user.cfg
@@ -0,0 +1,14 @@
+       SERVICE  = 3615
+       HOME     = .
+       RANDFILE = var/sec/x509/openssl.rand
+[ req ]
+       prompt             = no
+       distinguished_name = user_distinguished_name
+       string_mask        = pkix
+[ user_distinguished_name ]
+       countryName            = $ENV::x509_country
+       stateOrProvinceName    = $ENV::x509_state_or_province
+       #localityName           =
+       0.organizationName     = $ENV::x509_organization
+       organizationalUnitName = Certificat utilisateurice du 3615 CYCLO
+       commonName             = $ENV::user

diff --git a/etc/openssl/vie.cyclocoop.org/ca b/etc/openssl/vie.cyclocoop.org/ca
deleted file mode 120000 (symlink)
index 2ef2817..0000000
--- a/etc/openssl/vie.cyclocoop.org/ca
+++ /dev/null
@@ -1 +0,0 @@
-../cyclocoop.org
\ No newline at end of file

diff --git a/etc/openssl/vie.cyclocoop.org/host.cfg b/etc/openssl/vie.cyclocoop.org/host.cfg
deleted file mode 100644 (file)
index b60115b..0000000
--- a/etc/openssl/vie.cyclocoop.org/host.cfg
+++ /dev/null
@@ -1,70 +0,0 @@
-       SERVICE     = vie
-       RANDFILE    = var/sec/x509/openssl.rand
-       oid_section = extra_oids
-[ extra_oids ]
-       # NOTE: pour une éventuelle validation étendue (Extended Validation (EV))
-       jurisdictionOfIncorporationLocalityName        = 1.3.6.1.4.1.311.60.2.1.1
-       jurisdictionOfIncorporationStateOrProvinceName = 1.3.6.1.4.1.311.60.2.1.2
-       jurisdictionOfIncorporationCountryName         = 1.3.6.1.4.1.311.60.2.1.3
-[ req ]
-       prompt             = no
-       distinguished_name = distinguished_name
-       string_mask        = pkix
-       #x509_extensions    = root_extensions
-       #req_extensions     = extension
-       #attributes         = req_attributes
-[ distinguished_name ]
-       countryName            = $ENV::x509_country
-       stateOrProvinceName    = $ENV::x509_state_or_province
-       localityName           = $ENV::x509_state_or_province
-       0.organizationName     = $ENV::x509_organization
-       organizationalUnitName = CycloVie
-       commonName             = $SERVICE.$ENV::x509_host
-       businessCategory                               = $ENV::x509_business_category
-       jurisdictionOfIncorporationLocalityName        = $ENV::x509_state_or_province
-       jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
-       jurisdictionOfIncorporationCountryName         = $ENV::x509_country
-[ extensions ]
-       basicConstraints       = critical,CA:TRUE,pathlen:0
-       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
-       subjectKeyIdentifier   = hash
-       issuerAltName          = issuer:copy
-       authorityKeyIdentifier = keyid:always,issuer:always
-       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
-       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
-       certificatePolicies    = @certificate_policies
-[ self_signed_extensions ]
-       basicConstraints       = critical,CA:TRUE,pathlen:0
-       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
-       subjectKeyIdentifier   = hash
-       issuerAltName          = issuer:copy
-       authorityKeyIdentifier = keyid:always,issuer:always
-       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
-       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
-[ user_extensions ]
-       basicConstraints       = critical,CA:FALSE,pathlen:0
-       keyUsage               = digitalSignature,keyEncipherment
-       subjectAltName         = email:$ENV::user@$ENV::x509_host
-       subjectKeyIdentifier   = hash
-       issuerAltName          = issuer:copy
-       authorityKeyIdentifier = keyid:always,issuer:always
-       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
-[ certificate_policies ]
-       policyIdentifier = 1.2.250.1.42
-       CPS.1            = https://www.$ENV::x509_host/x509/cps
-[ ca ]
-       private_key      = var/sec/x509/$ENV::x509/key.pem
-       dir              = var/pub/x509/$ENV::x509
-       crl_dir          = $dir
-       crlnumber        = $dir/crl.num
-       crl              = $dir/crl.pem
-       database         = $dir/idx.txt
-[ self_signed_ca ]
-       private_key      = var/sec/x509/$ENV::x509/key.pem
-       dir              = var/pub/x509/$ENV::x509
-       crl_dir          = $dir
-       crlnumber        = $dir/crl.self-signed.num
-       crl              = $dir/crl.self-signed.pem
-       database         = $dir/idx.self-signed.txt

diff --git a/etc/openssl/vie.cyclocoop.org/user.cfg b/etc/openssl/vie.cyclocoop.org/user.cfg
deleted file mode 100644 (file)
index 56696b8..0000000
--- a/etc/openssl/vie.cyclocoop.org/user.cfg
+++ /dev/null
@@ -1,14 +0,0 @@
-       SERVICE  = vie
-       HOME     = .
-       RANDFILE = var/sec/x509/openssl.rand
-[ req ]
-       prompt             = no
-       distinguished_name = user_distinguished_name
-       string_mask        = pkix
-[ user_distinguished_name ]
-       countryName            = $ENV::x509_country
-       stateOrProvinceName    = $ENV::x509_state_or_province
-       #localityName           =
-       0.organizationName     = $ENV::x509_organization
-       organizationalUnitName = Certificat utilisateurice de la CycloVie
-       commonName             = $ENV::user

diff --git a/etc/sv/cyclo-3615/local.sh b/etc/sv/cyclo-3615/local.sh
new file mode 100644 (file)
index 0000000..ffd82e3
--- /dev/null
+++ b/etc/sv/cyclo-3615/local.sh
@@ -0,0 +1,11 @@
+"$tool"/local/www-init
+
+home=~www-data/"$sv"
+
+#"$tool"/local/adduser fcgi-"$sv" \
+# --disabled-login \
+# --disabled-password \
+# --group \
+# --home "$home" \
+# --shell /bin/false \
+# --system

diff --git a/etc/sv/cyclo-3615/log/local.sh b/etc/sv/cyclo-3615/log/local.sh
new file mode 100644 (file)
index 0000000..1fa4bf0
--- /dev/null
+++ b/etc/sv/cyclo-3615/log/local.sh
@@ -0,0 +1,12 @@
+home=~www/log/"$sv"/spawn-fcgi
+
+"$tool"/local/adduser log-fcgi-"$sv" \
+ --disabled-login \
+ --disabled-password \
+ --group \
+ --home "$home" \
+ --shell /bin/false \
+ --system
+
+sudo install -d -m 770 -o log-fcgi-"$sv" -g log-fcgi-"$sv" \
+ "$home"

diff --git a/etc/sv/cyclo-3615/log/run b/etc/sv/cyclo-3615/log/run
new file mode 100755 (executable)
index 0000000..f8924cd
--- /dev/null
+++ b/etc/sv/cyclo-3615/log/run
@@ -0,0 +1,8 @@
+#!/bin/sh -eux
+sv=${PWD%/log}
+sv=${sv#/etc/sv/}
+eval home="~log-fcgi-$sv"
+
+cd "$home"
+exec chpst -u log-fcgi-"$sv":log-fcgi-"$sv" \
+       svlogd -v -tt "$home"

diff --git a/etc/sv/cyclo-3615/run b/etc/sv/cyclo-3615/run
new file mode 100755 (executable)
index 0000000..35bd800
--- /dev/null
+++ b/etc/sv/cyclo-3615/run
@@ -0,0 +1,20 @@
+#!/bin/sh -eux
+exec 2>&1
+sv=${PWD#/etc/sv/}
+
+/usr/bin/sv -w 3 start sshd
+
+install -d -m 1771 -o root -g root \
+ /run/spawn-fcgi
+
+exec /usr/bin/spawn-fcgi \
+ -u wiki-"$sv" \
+ -g www-"$sv" \
+ -U www-data \
+ -G www-data \
+ -M 0660 \
+ -n \
+ -s /run/spawn-fcgi/"$sv" \
+ -- /usr/bin/multiwatch \
+ --forks 3 \
+ -- /usr/sbin/fcgiwrap

diff --git a/etc/sv/cyclo-vie/local.sh b/etc/sv/cyclo-vie/local.sh
deleted file mode 100644 (file)
index 698054a..0000000
--- a/etc/sv/cyclo-vie/local.sh
+++ /dev/null
@@ -1,11 +0,0 @@
-"$tool"/local/www-init
-
-home=~www-data/"$sv"
-
-"$tool"/local/adduser fcgi-"$sv" \
- --disabled-login \
- --disabled-password \
- --group \
- --home "$home" \
- --shell /bin/false \
- --system

diff --git a/etc/sv/cyclo-vie/log/local.sh b/etc/sv/cyclo-vie/log/local.sh
deleted file mode 100644 (file)
index 1fa4bf0..0000000
--- a/etc/sv/cyclo-vie/log/local.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-home=~www/log/"$sv"/spawn-fcgi
-
-"$tool"/local/adduser log-fcgi-"$sv" \
- --disabled-login \
- --disabled-password \
- --group \
- --home "$home" \
- --shell /bin/false \
- --system
-
-sudo install -d -m 770 -o log-fcgi-"$sv" -g log-fcgi-"$sv" \
- "$home"

diff --git a/etc/sv/cyclo-vie/log/run b/etc/sv/cyclo-vie/log/run
deleted file mode 100755 (executable)
index f8924cd..0000000
--- a/etc/sv/cyclo-vie/log/run
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/sh -eux
-sv=${PWD%/log}
-sv=${sv#/etc/sv/}
-eval home="~log-fcgi-$sv"
-
-cd "$home"
-exec chpst -u log-fcgi-"$sv":log-fcgi-"$sv" \
-       svlogd -v -tt "$home"

diff --git a/etc/sv/cyclo-vie/run b/etc/sv/cyclo-vie/run
deleted file mode 100755 (executable)
index 7f8b35a..0000000
--- a/etc/sv/cyclo-vie/run
+++ /dev/null
@@ -1,20 +0,0 @@
-#!/bin/sh -eux
-exec 2>&1
-sv=${PWD#/etc/sv/}
-
-/usr/bin/sv -w 3 start sshd
-
-install -d -m 1771 -o root -g root \
- /run/spawn-fcgi
-
-exec /usr/bin/spawn-fcgi \
- -u fcgi-"$sv" \
- -g fcgi-"$sv" \
- -U www-data \
- -G www-data \
- -M 0660 \
- -n \
- -s /run/spawn-fcgi/"$sv" \
- -- /usr/bin/multiwatch \
- --forks 3 \
- -- /usr/sbin/fcgiwrap

diff --git a/etc/sv/cyclo-wiki/local.sh b/etc/sv/cyclo-wiki/local.sh
index 698054a..ffd82e3 100644 (file)
--- a/etc/sv/cyclo-wiki/local.sh
+++ b/etc/sv/cyclo-wiki/local.sh
@@ -2,10 +2,10 @@
 
 home=~www-data/"$sv"
 
-"$tool"/local/adduser fcgi-"$sv" \
- --disabled-login \
- --disabled-password \
- --group \
- --home "$home" \
- --shell /bin/false \
- --system
+#"$tool"/local/adduser fcgi-"$sv" \
+# --disabled-login \
+# --disabled-password \
+# --group \
+# --home "$home" \
+# --shell /bin/false \
+# --system

diff --git a/etc/sv/cyclo-wiki/run b/etc/sv/cyclo-wiki/run
index 7f8b35a..35bd800 100755 (executable)
--- a/etc/sv/cyclo-wiki/run
+++ b/etc/sv/cyclo-wiki/run
@@ -8,8 +8,8 @@ install -d -m 1771 -o root -g root \
  /run/spawn-fcgi
 
 exec /usr/bin/spawn-fcgi \
- -u fcgi-"$sv" \
- -g fcgi-"$sv" \
+ -u wiki-"$sv" \
+ -g www-"$sv" \
  -U www-data \
  -G www-data \
  -M 0660 \

diff --git a/var/pub/x509/3615.cyclocoop.org/ca b/var/pub/x509/3615.cyclocoop.org/ca
new file mode 120000 (symlink)
index 0000000..2ef2817
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/ca
@@ -0,0 +1 @@
+../cyclocoop.org
\ No newline at end of file

diff --git a/var/pub/x509/3615.cyclocoop.org/crl.num b/var/pub/x509/3615.cyclocoop.org/crl.num
new file mode 100644 (file)
index 0000000..8a0f05e
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crl.num
@@ -0,0 +1 @@
+01

diff --git a/var/pub/x509/3615.cyclocoop.org/crl.num.old b/var/pub/x509/3615.cyclocoop.org/crl.num.old
new file mode 100644 (file)
index 0000000..4daddb7
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crl.num.old
@@ -0,0 +1 @@
+00

diff --git a/var/pub/x509/3615.cyclocoop.org/crl.pem b/var/pub/x509/3615.cyclocoop.org/crl.pem
new file mode 100644 (file)
index 0000000..74dd5aa
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crl.pem
@@ -0,0 +1,22 @@
+-----BEGIN X509 CRL-----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=
+-----END X509 CRL-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crl.self-signed.num b/var/pub/x509/3615.cyclocoop.org/crl.self-signed.num
new file mode 100644 (file)
index 0000000..8a0f05e
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crl.self-signed.num
@@ -0,0 +1 @@
+01

diff --git a/var/pub/x509/3615.cyclocoop.org/crl.self-signed.num.old b/var/pub/x509/3615.cyclocoop.org/crl.self-signed.num.old
new file mode 100644 (file)
index 0000000..4daddb7
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crl.self-signed.num.old
@@ -0,0 +1 @@
+00

diff --git a/var/pub/x509/3615.cyclocoop.org/crl.self-signed.pem b/var/pub/x509/3615.cyclocoop.org/crl.self-signed.pem
new file mode 100644 (file)
index 0000000..f7ee9fa
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crl.self-signed.pem
@@ -0,0 +1,22 @@
+-----BEGIN X509 CRL-----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=
+-----END X509 CRL-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt+ca.pem b/var/pub/x509/3615.cyclocoop.org/crt+ca.pem
new file mode 100644 (file)
index 0000000..27f9d38
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt+ca.pem
@@ -0,0 +1,105 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt+crl.pem b/var/pub/x509/3615.cyclocoop.org/crt+crl.pem
new file mode 100644 (file)
index 0000000..0f83910
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt+crl.pem
@@ -0,0 +1,76 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN X509 CRL-----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=
+-----END X509 CRL-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt+crl.self-signed.pem b/var/pub/x509/3615.cyclocoop.org/crt+crl.self-signed.pem
new file mode 100644 (file)
index 0000000..730fd27
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt+crl.self-signed.pem
@@ -0,0 +1,78 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN X509 CRL-----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=
+-----END X509 CRL-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt.pem b/var/pub/x509/3615.cyclocoop.org/crt.pem
new file mode 100644 (file)
index 0000000..57406b1
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt.pem
@@ -0,0 +1,54 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt.pem.asc b/var/pub/x509/3615.cyclocoop.org/crt.pem.asc
new file mode 100644 (file)
index 0000000..f150c27
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt.pem.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP SIGNATURE-----
+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+=qvUU
+-----END PGP SIGNATURE-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt.self-signed.pem b/var/pub/x509/3615.cyclocoop.org/crt.self-signed.pem
new file mode 100644 (file)
index 0000000..04f8d5c
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt.self-signed.pem
@@ -0,0 +1,56 @@
+-----BEGIN CERTIFICATE-----
+MIIKFjCCB/6gAwIBAgIHIBQEIwUBRzANBgkqhkiG9w0BAQ0FADCCAVwxCzAJBgNV
+BAYTAkZSMSMwIQYDVQQIHhoAzgBsAGUALQBkAGUALQBGAHIAYQBuAGMAZTEjMCEG
+A1UEBx4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxFTATBgNVBAoTDEN5Y2xv
+ZmZpY2luZTETMBEGA1UECxMKMzYxNSBDWUNMTzEbMBkGA1UEAxMSMzYxNS5jeWNs
+b2Nvb3Aub3JnMUswSQYDVQQPHkIAVgAxAC4AMAAsACAAbgBpACAAZABpAGUAdQAg
+AG4AaQAgAG0AYQDuAHQAcgBlACAAbgBpACAAbQBvAHQAZQB1AHIxKzApBgsrBgEE
+AYI3PAIBAR4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxKzApBgsrBgEEAYI3
+PAIBAh4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxEzARBgsrBgEEAYI3PAIB
+AxMCRlIwHhcNMTQwNDIzMDMwMTQ3WhcNMjQwNDIzMDMwMTQ3WjCCAVwxCzAJBgNV
+BAYTAkZSMSMwIQYDVQQIHhoAzgBsAGUALQBkAGUALQBGAHIAYQBuAGMAZTEjMCEG
+A1UEBx4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxFTATBgNVBAoTDEN5Y2xv
+ZmZpY2luZTETMBEGA1UECxMKMzYxNSBDWUNMTzEbMBkGA1UEAxMSMzYxNS5jeWNs
+b2Nvb3Aub3JnMUswSQYDVQQPHkIAVgAxAC4AMAAsACAAbgBpACAAZABpAGUAdQAg
+AG4AaQAgAG0AYQDuAHQAcgBlACAAbgBpACAAbQBvAHQAZQB1AHIxKzApBgsrBgEE
+AYI3PAIBAR4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxKzApBgsrBgEEAYI3
+PAIBAh4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxEzARBgsrBgEEAYI3PAIB
+AxMCRlIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAKEHL9bolyn/+
+rQnR5qv0eKMkb2d9nhXfbqUTWD8krqmRqaNeIUw2R2y43X76Hwu4DTey3ojPVaYd
+l0XmzeEPyrTaRgJ9yiQKDsTRia3hYUIaMEQgp0RPQis7t6Fl/Ci1nJvWW3K5LHho
+LycoE09AfYI2gXVZcchK9Ud/L7ty1FuS1VVeVR4TTfwzGmzeDchYfDA6hmWPQCNv
+9olRFSWg5zBEqyMiJL0OT8CS9lTSPKXA5BOGgPcqPMQ/xDKGZpKKRKdBrduKAJXs
+z0Zj9AoV616JzJAB5K0m8PK4UBEMg/Z2dqMvzlqmHNP5OyASZHYgexLM2Nxm5rD4
+5vPkvgzud5JH0B17M3h+CHy2nVotd/t30aKfBjRDlfO4X/hriSFpfrvuxpKhNFB8
+0Fly6yIqhcV3HCD5DT4+7R1BN1yIR71F/M1gs5j1/hBAUS/cvflzMV2hIclfdxMV
+QNGuPb2KqjHQj77DRRxKjxWV1h3TcCBpuBL6zfnPC19v8m22GxUopUKCoHnqbAkg
+A8L/X8yysmA7ttBB2PTtozfxlf6RU/r9gxrdVuNcIKNqbuVbajrZ8oU1pJh757DU
+qFSHgkkXShB6JIJpxvVquJTvnYK7To9HxxkHdGnEZqNCBAgubRWu1WFF0FZcCtye
+RBV+pMhYgXGq689WMsq0rNG4V1RgyQIDAQABo4IC1zCCAtMwEgYDVR0TAQH/BAgw
+BgEB/wIBADALBgNVHQ8EBAMCAaYwOQYDVR0RBDIwMIEaY29udGFjdCszNjE1QGN5
+Y2xvY29vcC5vcmeCEjM2MTUuY3ljbG9jb29wLm9yZzAdBgNVHQ4EFgQUTkHjiLJ3
++cVwQ2uQSsthfzz25WcwOQYDVR0SBDIwMIEaY29udGFjdCszNjE1QGN5Y2xvY29v
+cC5vcmeCEjM2MTUuY3ljbG9jb29wLm9yZzCCAZQGA1UdIwSCAYswggGHgBROQeOI
+snf5xXBDa5BKy2F/PPblZ6GCAWSkggFgMIIBXDELMAkGA1UEBhMCRlIxIzAhBgNV
+BAgeGgDOAGwAZQAtAGQAZQAtAEYAcgBhAG4AYwBlMSMwIQYDVQQHHhoAzgBsAGUA
+LQBkAGUALQBGAHIAYQBuAGMAZTEVMBMGA1UEChMMQ3ljbG9mZmljaW5lMRMwEQYD
+VQQLEwozNjE1IENZQ0xPMRswGQYDVQQDExIzNjE1LmN5Y2xvY29vcC5vcmcxSzBJ
+BgNVBA8eQgBWADEALgAwACwAIABuAGkAIABkAGkAZQB1ACAAbgBpACAAbQBhAO4A
+dAByAGUAIABuAGkAIABtAG8AdABlAHUAcjErMCkGCysGAQQBgjc8AgEBHhoAzgBs
+AGUALQBkAGUALQBGAHIAYQBuAGMAZTErMCkGCysGAQQBgjc8AgECHhoAzgBsAGUA
+LQBkAGUALQBGAHIAYQBuAGMAZTETMBEGCysGAQQBgjc8AgEDEwJGUoIHIBQEIwUB
+RzBGBggrBgEFBQcBAQQ6MDgwNgYIKwYBBQUHMAKGKmh0dHA6Ly93d3cuY3ljbG9j
+b29wLm9yZy94NTA5LzM2MTUvY3J0LnBlbTA7BgNVHR8ENDAyMDCgLqAshipodHRw
+Oi8vd3d3LmN5Y2xvY29vcC5vcmcveDUwOS8zNjE1L2NybC5wZW0wDQYJKoZIhvcN
+AQENBQADggIBAJnPiYNp7yBBy4z1LVp8fZXhN53qLx/rGw7suon4Ha3cOjL9TfbU
+KVOigweSGNEi+6Z1qDRqwTUP+bdZ2VOIdUjTKLdUt2qNuZvwtPeQTZpJumqCuR+3
+KpoAdHccpQWOyj/FxC1PWNOpHf9/peijESTZ9rXhwPR82MitjPlI7EpqZd9kUYrl
+biaT1ivOWNM/JgQIVe555dPvAn1XVFLYxUboGlhSl41ahng1CYWgdRMTj1OaVKYD
+DycK4uxBp3zLDaCJeG/O/4EQwougeUjLXHEbDoPdvHYi+MwZnDFu1rLVRoOHqVTt
+Ar6clQO5zUlcrPI4pDE6jNvclRDRt2Q2uivVvPOi4DQfclyWEuJpxOcLRqheD55D
+R77/0n+e1D6/vKM8AhdL3Fbc2HG3XiGufrfFAUSm8AnK+ENRZAchM2naqFg1DRPD
+rSb68EIq3mOy7Gp5fhx3kXlss9wcxYHIBXWJOvaPlBa+KK3TpZIdgOjv6OUo6A7/
+I3jKnZSOlJMo35aKygPbmZMBTUK7hwu9hYKKdDHoaGc+H304wmgNIsskjUqmwFJa
+V6m2qCVrnH2j1Zp37Kx56gOdj7WKBMrS3mZI6kFldcZ6gG/t819xquPPwJq/sMqh
+U5nbhSEeHSkvPLrx96ALpdStvW8TI+b52A/Pz8sJv6hLUdDXhNG8Hk00
+-----END CERTIFICATE-----

diff --git a/var/pub/x509/3615.cyclocoop.org/crt.self-signed.pem.asc b/var/pub/x509/3615.cyclocoop.org/crt.self-signed.pem.asc
new file mode 100644 (file)
index 0000000..b42d53e
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/crt.self-signed.pem.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP SIGNATURE-----
+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+=RphT
+-----END PGP SIGNATURE-----

diff --git a/var/pub/x509/3615.cyclocoop.org/idx.self-signed.txt b/var/pub/x509/3615.cyclocoop.org/idx.self-signed.txt
new file mode 100644 (file)
index 0000000..e69de29

diff --git a/var/pub/x509/3615.cyclocoop.org/idx.txt b/var/pub/x509/3615.cyclocoop.org/idx.txt
new file mode 100644 (file)
index 0000000..e69de29

diff --git a/var/pub/x509/3615.cyclocoop.org/req.pem b/var/pub/x509/3615.cyclocoop.org/req.pem
new file mode 100644 (file)
index 0000000..c2ae7b5
--- /dev/null
+++ b/var/pub/x509/3615.cyclocoop.org/req.pem
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----