major cleanup and refactor
Linux User
parent
e6cfb75749
commit
1c5528e5af
11
Makefile
11
Makefile
|
|
@ -1,9 +1,12 @@
|
|||
images=backup buku ddclient gitolite gitolite-pystagit git-daemon rss-bridge sassc syncthing tasks tor vdirsyncer xandikos
|
||||
images=ansible backup buku ddclient git-daemon gitolite gitolite-pystagit rss-bridge sassc syncthing tasks tor vdirsyncer xandikos
|
||||
.PHONY: all $(images)
|
||||
all: $(images)
|
||||
|
||||
BUILD = make -C $@
|
||||
|
||||
ansible:
|
||||
$(BUILD)
|
||||
|
||||
backup:
|
||||
$(BUILD)
|
||||
|
||||
|
|
@ -13,15 +16,15 @@ buku:
|
|||
ddclient:
|
||||
$(BUILD)
|
||||
|
||||
git-daemon:
|
||||
$(BUILD)
|
||||
|
||||
gitolite:
|
||||
$(BUILD)
|
||||
|
||||
gitolite-pystagit:
|
||||
$(BUILD)
|
||||
|
||||
git-daemon:
|
||||
$(BUILD)
|
||||
|
||||
rss-bridge:
|
||||
$(BUILD)
|
||||
|
||||
|
|
|
|||
|
|
@ -20,14 +20,14 @@ useful.
|
|||
* buku: buku and bukuserver
|
||||
* ddclient
|
||||
* git-daemon: for git-daemon and git-http-backend
|
||||
* gitolite-stagit: well, gitolite + stagit
|
||||
* gitolite-pystagit: well, gitolite + pystagit
|
||||
* gitolite: gitolite + docker, so that I can mount the docker socket inside of
|
||||
it and have it do useful things through docker in response to triggers
|
||||
* ledger-web
|
||||
* sassc
|
||||
* syncthing
|
||||
* tasks: intended to run a cron daemon to run arbitrary periodic tasks. I mount
|
||||
the docker socket inside of it to have it perform maintanance tasks outside
|
||||
of it's container.
|
||||
* tor
|
||||
* vdirsyncer
|
||||
* wallabag
|
||||
* xandikos
|
||||
|
|
|
|||
|
|
@ -12,9 +12,9 @@ mk_index () {
|
|||
-F'\t' \
|
||||
-v d="${GL_REPO_BASE}" \
|
||||
'{if ($3 !~ "DENIED") print d"/"$1".git"}' | \
|
||||
xargs -r /usr/bin/pystagit-index | \
|
||||
sed 's|\(<a href=".*\)/log.html\(">\)|\1\2|' > \
|
||||
"${1}/index.html"
|
||||
xargs -r /usr/bin/pystagit-index > \
|
||||
"${1}/index.html" && \
|
||||
chmod 644 "${1}/index.html"
|
||||
}
|
||||
|
||||
if [ -n "${SITES}" ]; then
|
||||
|
|
|
|||
|
|
@ -18,6 +18,7 @@ run_pystagit () {
|
|||
out_dir="${PYSTAGIT_BASE}/${1}"
|
||||
fi
|
||||
mkdir -p "${out_dir}" && \
|
||||
chmod 755 "${out_dir}" && \
|
||||
cd "${out_dir}" && \
|
||||
/usr/bin/pystagit "${repo_dir}" && \
|
||||
if [ -f about.html ]; then
|
||||
|
|
|
|||
|
|
@ -1,39 +0,0 @@
|
|||
FROM alpine:3.12
|
||||
|
||||
RUN apk add --no-cache \
|
||||
gitolite \
|
||||
openssh-server \
|
||||
su-exec \
|
||||
libgit2 && \
|
||||
apk add --no-cache --virtual .build-deps \
|
||||
gcc \
|
||||
make \
|
||||
musl-dev \
|
||||
libgit2-dev && \
|
||||
git clone git://git.codemadness.org/stagit /tmp/stagit && \
|
||||
make -C /tmp/stagit && \
|
||||
make -C /tmp/stagit install && \
|
||||
rm -r /tmp/stagit && \
|
||||
apk del .build-deps && \
|
||||
passwd -u git && \
|
||||
mkdir -p /opt/gitolite-local/hooks/common
|
||||
|
||||
COPY sshd_config /etc/ssh/sshd_config
|
||||
COPY gitolite.rc /var/lib/git/.gitolite.rc
|
||||
|
||||
COPY bin/. /usr/local/bin/
|
||||
COPY local_code/. /opt/gitolite-local/
|
||||
|
||||
RUN chown -R git:git /var/lib/git && \
|
||||
chmod +x \
|
||||
/usr/local/bin/entrypoint \
|
||||
/usr/local/bin/build-stagit-index \
|
||||
/usr/local/bin/build-stagit-repo \
|
||||
/usr/local/bin/build-stagit-repos \
|
||||
/opt/gitolite-local/hooks/common/post-receive \
|
||||
/opt/gitolite-local/triggers/build-stagit-index \
|
||||
/opt/gitolite-local/triggers/build-stagit-repo \
|
||||
/opt/gitolite-local/triggers/build-stagit-repos
|
||||
|
||||
ENTRYPOINT ["/usr/local/bin/entrypoint"]
|
||||
CMD ["/usr/sbin/sshd", "-D", "-e"]
|
||||
|
|
@ -1,16 +0,0 @@
|
|||
USERNAME = rilla
|
||||
IMG_NAME = gitolite-stagit
|
||||
|
||||
.PHONY: build build-nc
|
||||
|
||||
BIN=$(wildcard bin/*)
|
||||
HOOKS=$(wildcard local_code/hooks/*)
|
||||
TRIGGERS=$(wildcard local_code/triggers/*)
|
||||
|
||||
DEPS=Dockerfile $(BIN) $(HOOKS) $(TRIGGERS) gitolite.rc sshd_config
|
||||
|
||||
build: $(DEPS)
|
||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
||||
|
||||
build-nc: $(DEPS)
|
||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
||||
|
|
@ -1,27 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
STAGIT_BASE="${STAGIT_BASE:-/var/lib/git/stagit}"
|
||||
GL_REPO_BASE="${GL_REPO_BASE:-/var/lib/git/repositories}"
|
||||
|
||||
mk_index () {
|
||||
gitolite list-phy-repos | \
|
||||
gitolite access % stagit R any | \
|
||||
awk \
|
||||
-F'\t' \
|
||||
-v d="${GL_REPO_BASE}" \
|
||||
'{if ($3 !~ "DENIED") print d"/"$1".git"}' | \
|
||||
xargs -r /usr/local/bin/stagit-index | \
|
||||
sed 's|\(<a href=".*\)/log.html\(">\)|\1\2|' > \
|
||||
"${1}/index.html"
|
||||
}
|
||||
|
||||
if [ -n "${SITES}" ]; then
|
||||
_i=1
|
||||
for site in ${SITES}; do
|
||||
mk_index "${STAGIT_BASE}-${site}"
|
||||
done
|
||||
else
|
||||
mk_index "${STAGIT_BASE}"
|
||||
fi
|
||||
|
|
@ -1,70 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
[ -z "${1}" ] && exit
|
||||
|
||||
STAGIT_BASE="${STAGIT_BASE:-/var/lib/git/stagit}"
|
||||
GL_REPO_BASE="${GL_REPO_BASE:-/var/lib/git/repositories}"
|
||||
|
||||
# shellcheck disable=SC1091
|
||||
[ -f /etc/env ] && . /etc/env
|
||||
|
||||
run_stagit () {
|
||||
repo_dir="${GL_REPO_BASE}/${1}.git"
|
||||
if [ -n "${2}" ]; then
|
||||
out_dir="${STAGIT_BASE}-${2}/${1}"
|
||||
else
|
||||
out_dir="${STAGIT_BASE}/${1}"
|
||||
fi
|
||||
mkdir -p "${out_dir}" && \
|
||||
cd "${out_dir}" && \
|
||||
/usr/local/bin/stagit "${repo_dir}" && \
|
||||
ln -sf files.html index.html
|
||||
}
|
||||
|
||||
set_url () {
|
||||
url_file="${GL_REPO_BASE}/${1}.git/url"
|
||||
if [ -n "${2}" ]; then
|
||||
echo "${2}/${1}" > "${url_file}"
|
||||
else
|
||||
echo "url not set"
|
||||
rm -f "${url_file}"
|
||||
fi
|
||||
}
|
||||
|
||||
set_owner () {
|
||||
owner_file="${GL_REPO_BASE}/${1}.git/owner"
|
||||
if owner=$(gitolite git-config "${1}" gitweb.owner); then
|
||||
echo "setting owner for '${1}'"
|
||||
echo "${owner}" > "${owner_file}"
|
||||
else
|
||||
echo "usetting owner for '${1}'"
|
||||
rm -f "${owner_file}"
|
||||
fi
|
||||
}
|
||||
|
||||
echo "running stagit for '${1}'"
|
||||
|
||||
if gitolite access "${1}" stagit R any; then
|
||||
|
||||
set_owner "${1}"
|
||||
|
||||
if [ -n "${SITES}" ]; then
|
||||
_i=1
|
||||
for site in ${SITES}; do
|
||||
url=$(printf "%s" "${URLS}" | cut -d " " -f "$_i")
|
||||
set_url "${1}" "${url}"
|
||||
run_stagit "${1}" "${site}"
|
||||
_i=$((_i+1))
|
||||
done
|
||||
|
||||
else
|
||||
url=$(printf "%s" "${URLS}" | cut -d " " -f 1)
|
||||
set_url "${1}" "${url}"
|
||||
run_stagit "${1}" ""
|
||||
fi
|
||||
|
||||
else
|
||||
rm -rf "${STAGIT_BASE}"*"/${1}.git"
|
||||
fi
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
for repo in $(gitolite list-phy-repos); do
|
||||
/usr/local/bin/build-stagit-repo "${repo}"
|
||||
done
|
||||
|
|
@ -1,49 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
su-exec git env | awk -F"=" '{ print $1"=\""$2"\"" }' > /etc/env
|
||||
|
||||
for algorithm in rsa dsa ecdsa ed25519; do
|
||||
keyfile="/etc/ssh/keys/ssh_host_${algorithm}_key"
|
||||
[ -f "$keyfile" ] || \
|
||||
ssh-keygen -q -N '' -f "$keyfile" -t "$algorithm"
|
||||
done
|
||||
|
||||
BASE_DIR=/var/lib/git
|
||||
|
||||
echo "fixing permissions..."
|
||||
|
||||
mkdir -p \
|
||||
"${BASE_DIR}/.gitolite/conf" \
|
||||
"${BASE_DIR}/.gitolite/hooks" \
|
||||
"${BASE_DIR}/.gitolite/keydir" \
|
||||
"${BASE_DIR}/.gitolite/logs"
|
||||
chown -R git:git \
|
||||
"${BASE_DIR}/.gitolite" \
|
||||
"${BASE_DIR}/.ssh" \
|
||||
"${BASE_DIR}/stagit"* \
|
||||
"${BASE_DIR}/repositories"
|
||||
|
||||
if [ ! -f "${BASE_DIR}/.ssh/authorized_keys" ]; then
|
||||
if [ -z "$SSH_KEY" ]; then
|
||||
echo "SSH_KEY needs to be set"
|
||||
exit 1
|
||||
fi
|
||||
SSH_KEY_NAME=${SSH_KEY_NAME:-admin}
|
||||
echo "$SSH_KEY" > "/tmp/${SSH_KEY_NAME}.pub"
|
||||
echo "gitolite's initial setup"
|
||||
su-exec git gitolite setup -pk "/tmp/${SSH_KEY_NAME}.pub"
|
||||
rm "/tmp/${SSH_KEY_NAME}.pub"
|
||||
else
|
||||
# stuff is already set up, but check the setup anyway
|
||||
echo "gitolite's sanity setup"
|
||||
su-exec git gitolite setup
|
||||
fi
|
||||
|
||||
echo "building static site"
|
||||
su-exec git build-stagit-repos
|
||||
su-exec git build-stagit-index
|
||||
|
||||
echo "gitolite is ready,starting sshd"
|
||||
exec "$@"
|
||||
|
|
@ -1,213 +0,0 @@
|
|||
# configuration variables for gitolite
|
||||
|
||||
# This file is in perl syntax. But you do NOT need to know perl to edit it --
|
||||
# just mind the commas, use single quotes unless you know what you're doing,
|
||||
# and make sure the brackets and braces stay matched up!
|
||||
|
||||
# (Tip: perl allows a comma after the last item in a list also!)
|
||||
|
||||
# HELP for commands can be had by running the command with "-h".
|
||||
|
||||
# HELP for all the other FEATURES can be found in the documentation (look for
|
||||
# "list of non-core programs shipped with gitolite" in the master index) or
|
||||
# directly in the corresponding source file.
|
||||
|
||||
%RC = (
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
|
||||
# default umask gives you perms of '0700'; see the rc file docs for
|
||||
# how/why you might change this
|
||||
UMASK => 0077,
|
||||
|
||||
# look for "git-config" in the documentation
|
||||
GIT_CONFIG_KEYS => 'gitweb.description gitweb.owner',
|
||||
|
||||
# comment out if you don't need all the extra detail in the logfile
|
||||
LOG_EXTRA => 1,
|
||||
# logging options
|
||||
# 1. leave this section as is for 'normal' gitolite logging (default)
|
||||
# 2. uncomment this line to log ONLY to syslog:
|
||||
# LOG_DEST => 'syslog',
|
||||
# 3. uncomment this line to log to syslog and the normal gitolite log:
|
||||
# LOG_DEST => 'syslog,normal',
|
||||
# 4. prefixing "repo-log," to any of the above will **also** log just the
|
||||
# update records to "gl-log" in the bare repo directory:
|
||||
# LOG_DEST => 'repo-log,normal',
|
||||
# LOG_DEST => 'repo-log,syslog',
|
||||
# LOG_DEST => 'repo-log,syslog,normal',
|
||||
# syslog 'facility': defaults to 'local0', uncomment if needed. For example:
|
||||
# LOG_FACILITY => 'local4',
|
||||
|
||||
# roles. add more roles (like MANAGER, TESTER, ...) here.
|
||||
# WARNING: if you make changes to this hash, you MUST run 'gitolite
|
||||
# compile' afterward, and possibly also 'gitolite trigger POST_COMPILE'
|
||||
ROLES => {
|
||||
READERS => 1,
|
||||
WRITERS => 1,
|
||||
},
|
||||
|
||||
# enable caching (currently only Redis). PLEASE RTFM BEFORE USING!!!
|
||||
# CACHE => 'Redis',
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
|
||||
# rc variables used by various features
|
||||
|
||||
# the 'info' command prints this as additional info, if it is set
|
||||
# SITE_INFO => 'Please see http://blahblah/gitolite for more help',
|
||||
|
||||
# the CpuTime feature uses these
|
||||
# display user, system, and elapsed times to user after each git operation
|
||||
# DISPLAY_CPU_TIME => 1,
|
||||
# display a warning if total CPU times (u, s, cu, cs) crosses this limit
|
||||
# CPU_TIME_WARN_LIMIT => 0.1,
|
||||
|
||||
# the Mirroring feature needs this
|
||||
# HOSTNAME => "foo",
|
||||
|
||||
# TTL for redis cache; PLEASE SEE DOCUMENTATION BEFORE UNCOMMENTING!
|
||||
# CACHE_TTL => 600,
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
|
||||
# suggested locations for site-local gitolite code (see cust.html)
|
||||
|
||||
# this one is managed directly on the server
|
||||
LOCAL_CODE => "/opt/gitolite-local",
|
||||
#LOCAL_CODE => "$ENV{HOME}/local",
|
||||
|
||||
# or you can use this, which lets you put everything in a subdirectory
|
||||
# called "local" in your gitolite-admin repo. For a SECURITY WARNING
|
||||
# on this, see http://gitolite.com/gitolite/non-core.html#pushcode
|
||||
# LOCAL_CODE => "$rc{GL_ADMIN_BASE}/local",
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
|
||||
#POST_COMPILE => [],
|
||||
POST_COMPILE => [
|
||||
'build-stagit-repos',
|
||||
'build-stagit-index'
|
||||
],
|
||||
|
||||
POST_CREATE => [
|
||||
'build-stagit-repo'
|
||||
],
|
||||
|
||||
# List of commands and features to enable
|
||||
ENABLE => [
|
||||
|
||||
# COMMANDS
|
||||
|
||||
# These are the commands enabled by default
|
||||
'help',
|
||||
'desc',
|
||||
'info',
|
||||
'perms',
|
||||
'writable',
|
||||
|
||||
# Uncomment or add new commands here.
|
||||
# 'create',
|
||||
# 'fork',
|
||||
# 'mirror',
|
||||
# 'readme',
|
||||
# 'sskm',
|
||||
# 'D',
|
||||
|
||||
# These FEATURES are enabled by default.
|
||||
|
||||
# essential (unless you're using smart-http mode)
|
||||
'ssh-authkeys',
|
||||
|
||||
# creates git-config entries from gitolite.conf file entries like 'config foo.bar = baz'
|
||||
'git-config',
|
||||
|
||||
# creates git-daemon-export-ok files; if you don't use git-daemon, comment this out
|
||||
'daemon',
|
||||
|
||||
# creates projects.list file; if you don't use gitweb, comment this out
|
||||
#'gitweb',
|
||||
|
||||
# These FEATURES are disabled by default; uncomment to enable. If you
|
||||
# need to add new ones, ask on the mailing list :-)
|
||||
|
||||
# user-visible behaviour
|
||||
|
||||
# prevent wild repos auto-create on fetch/clone
|
||||
# 'no-create-on-read',
|
||||
# no auto-create at all (don't forget to enable the 'create' command!)
|
||||
# 'no-auto-create',
|
||||
|
||||
# access a repo by another (possibly legacy) name
|
||||
# 'Alias',
|
||||
|
||||
# give some users direct shell access. See documentation in
|
||||
# sts.html for details on the following two choices.
|
||||
# "Shell $ENV{HOME}/.gitolite.shell-users",
|
||||
# 'Shell alice bob',
|
||||
|
||||
# set default roles from lines like 'option default.roles-1 = ...', etc.
|
||||
# 'set-default-roles',
|
||||
|
||||
# show more detailed messages on deny
|
||||
# 'expand-deny-messages',
|
||||
|
||||
# show a message of the day
|
||||
# 'Motd',
|
||||
|
||||
# system admin stuff
|
||||
|
||||
# enable mirroring (don't forget to set the HOSTNAME too!)
|
||||
# 'Mirroring',
|
||||
|
||||
# allow people to submit pub files with more than one key in them
|
||||
# 'ssh-authkeys-split',
|
||||
|
||||
# selective read control hack
|
||||
# 'partial-copy',
|
||||
|
||||
# manage local, gitolite-controlled, copies of read-only upstream repos
|
||||
# 'upstream',
|
||||
|
||||
# updates 'description' file instead of 'gitweb.description' config item
|
||||
'cgit',
|
||||
|
||||
# allow repo-specific hooks to be added
|
||||
#'repo-specific-hooks',
|
||||
|
||||
# performance, logging, monitoring...
|
||||
|
||||
# be nice
|
||||
# 'renice 10',
|
||||
|
||||
# log CPU times (user, system, cumulative user, cumulative system)
|
||||
# 'CpuTime',
|
||||
|
||||
|
||||
# syntactic_sugar for gitolite.conf and included files
|
||||
|
||||
# allow backslash-escaped continuation lines in gitolite.conf
|
||||
# 'continuation-lines',
|
||||
|
||||
# create implicit user groups from directory names in keydir/
|
||||
# 'keysubdirs-as-groups',
|
||||
|
||||
# allow simple line-oriented macros
|
||||
'macros',
|
||||
|
||||
# Kindergarten mode
|
||||
|
||||
# disallow various things that sensible people shouldn't be doing anyway
|
||||
# 'Kindergarten',
|
||||
],
|
||||
|
||||
);
|
||||
|
||||
# ------------------------------------------------------------------------------
|
||||
# per perl rules, this should be the last line in such a file:
|
||||
1;
|
||||
|
||||
# Local variables:
|
||||
# mode: perl
|
||||
# End:
|
||||
# vi: ft=perl
|
||||
|
|
@ -1,6 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
[ -n "${GL_REPO}" ] && \
|
||||
/usr/local/bin/build-stagit-repo "${GL_REPO}"
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
/usr/local/bin/build-stagit-index
|
||||
|
|
@ -1,5 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
[ -n "$2" ] && /usr/local/bin/build-stagit-repo "$2"
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
/usr/local/bin/build-stagit-repos
|
||||
|
|
@ -1,23 +0,0 @@
|
|||
Port 22
|
||||
Protocol 2
|
||||
|
||||
PermitRootLogin no
|
||||
AllowUsers git
|
||||
|
||||
PasswordAuthentication no
|
||||
PermitEmptyPasswords no
|
||||
PubkeyAuthentication yes
|
||||
|
||||
HostKey /etc/ssh/keys/ssh_host_rsa_key
|
||||
HostKey /etc/ssh/keys/ssh_host_dsa_key
|
||||
HostKey /etc/ssh/keys/ssh_host_ecdsa_key
|
||||
HostKey /etc/ssh/keys/ssh_host_ed25519_key
|
||||
|
||||
X11Forwarding no
|
||||
PrintMotd no
|
||||
|
||||
ClientAliveInterval 300
|
||||
ClientAliveCountMax 2
|
||||
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group18-sha512
|
||||
MACs umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
|
||||
HostKeyAlgorithms ssh-rsa,rsa-sha2-256,rsa-sha2-512
|
||||
|
|
@ -1,24 +0,0 @@
|
|||
# ledger-web
|
||||
|
||||
FROM python:3.8-slim-buster
|
||||
|
||||
RUN apt-get update && \
|
||||
apt-get install -y git g++ gosu && \
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
RUN useradd -m ledger
|
||||
|
||||
RUN git clone https://github.com/vifon/ledger-web /home/ledger/ledger-web
|
||||
|
||||
RUN pip install -r /home/ledger/ledger-web/requirements.txt
|
||||
|
||||
RUN mkdir -p /home/ledger/db
|
||||
VOLUME /home/ledger/db
|
||||
|
||||
COPY docker-entrypoint.sh /entrypoint
|
||||
|
||||
RUN chmod +x /entrypoint
|
||||
|
||||
WORKDIR /home/ledger/ledger-web
|
||||
|
||||
ENTRYPOINT ["/entrypoint"]
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
USERNAME = rilla
|
||||
IMG_NAME = ledger-web
|
||||
|
||||
.PHONY: build build-nc
|
||||
|
||||
build: Dockerfile
|
||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
||||
|
||||
build-nc: Dockerfile
|
||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
||||
Binary file not shown.
|
|
@ -1,6 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
gosu ledger /home/ledger/ledger-web/manage.py makemigrations && \
|
||||
gosu ledger /home/ledger/ledger-web/manage.py migrate
|
||||
|
||||
exec gosu ledger "$@"
|
||||
|
|
@ -1,136 +0,0 @@
|
|||
"""
|
||||
Django settings for ledger project.
|
||||
|
||||
Generated by 'django-admin startproject' using Django 2.1.7.
|
||||
|
||||
For more information on this file, see
|
||||
https://docs.djangoproject.com/en/2.1/topics/settings/
|
||||
|
||||
For the full list of settings and their values, see
|
||||
https://docs.djangoproject.com/en/2.1/ref/settings/
|
||||
"""
|
||||
|
||||
import os
|
||||
|
||||
# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
|
||||
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
||||
|
||||
|
||||
# Quick-start development settings - unsuitable for production
|
||||
# See https://docs.djangoproject.com/en/2.1/howto/deployment/checklist/
|
||||
|
||||
# SECURITY WARNING: keep the secret key used in production secret!
|
||||
SECRET_KEY = 'km&+&g_pcaj03g9dqhzg+qcg2)5bvu_rc*_n17!ol3571a8%u8'
|
||||
|
||||
# SECURITY WARNING: don't run with debug turned on in production!
|
||||
DEBUG = True
|
||||
|
||||
ALLOWED_HOSTS = []
|
||||
|
||||
|
||||
# Application definition
|
||||
|
||||
INSTALLED_APPS = [
|
||||
'ledger_ui.apps.LedgerUiConfig',
|
||||
'ledger_query.apps.LedgerQueryConfig',
|
||||
'ledger_submit.apps.LedgerSubmitConfig',
|
||||
'accounts.apps.AccountsConfig',
|
||||
'django.contrib.admin',
|
||||
'django.contrib.auth',
|
||||
'django.contrib.contenttypes',
|
||||
'django.contrib.sessions',
|
||||
'django.contrib.messages',
|
||||
'django.contrib.staticfiles',
|
||||
]
|
||||
|
||||
MIDDLEWARE = [
|
||||
'django.middleware.security.SecurityMiddleware',
|
||||
'django.contrib.sessions.middleware.SessionMiddleware',
|
||||
'django.middleware.common.CommonMiddleware',
|
||||
'django.middleware.csrf.CsrfViewMiddleware',
|
||||
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
||||
'django.contrib.messages.middleware.MessageMiddleware',
|
||||
'ledger_ui.middleware.HandleExceptionsMiddleware',
|
||||
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
||||
]
|
||||
|
||||
ROOT_URLCONF = 'ledger.urls'
|
||||
|
||||
TEMPLATES = [
|
||||
{
|
||||
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
||||
'DIRS': [],
|
||||
'APP_DIRS': True,
|
||||
'OPTIONS': {
|
||||
'context_processors': [
|
||||
'django.template.context_processors.debug',
|
||||
'django.template.context_processors.request',
|
||||
'django.contrib.auth.context_processors.auth',
|
||||
'django.contrib.messages.context_processors.messages',
|
||||
],
|
||||
},
|
||||
},
|
||||
]
|
||||
|
||||
WSGI_APPLICATION = 'ledger.wsgi.application'
|
||||
|
||||
|
||||
# Database
|
||||
# https://docs.djangoproject.com/en/2.1/ref/settings/#databases
|
||||
|
||||
DATABASES = {
|
||||
'default': {
|
||||
'ENGINE': 'django.db.backends.sqlite3',
|
||||
'NAME': '/home/ledger/db/db.sqlite3',
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
# Password validation
|
||||
# https://docs.djangoproject.com/en/2.1/ref/settings/#auth-password-validators
|
||||
|
||||
AUTH_PASSWORD_VALIDATORS = [
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
|
||||
},
|
||||
{
|
||||
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
|
||||
},
|
||||
]
|
||||
|
||||
|
||||
# Internationalization
|
||||
# https://docs.djangoproject.com/en/2.1/topics/i18n/
|
||||
|
||||
LANGUAGE_CODE = 'en-us'
|
||||
|
||||
TIME_ZONE = 'Europe/Warsaw'
|
||||
|
||||
USE_I18N = True
|
||||
|
||||
USE_L10N = True
|
||||
|
||||
USE_TZ = True
|
||||
|
||||
|
||||
# Static files (CSS, JavaScript, Images)
|
||||
# https://docs.djangoproject.com/en/2.1/howto/static-files/
|
||||
|
||||
STATIC_URL = '/static/'
|
||||
|
||||
STATICFILES_DIRS = [
|
||||
os.path.join(BASE_DIR, "static"),
|
||||
]
|
||||
|
||||
LOGIN_REDIRECT_URL = 'ledger_ui:index'
|
||||
|
||||
LEDGER_ENTRY_COUNT = 20
|
||||
LEDGER_DEFAULT_CURRENCY = '$'
|
||||
LEDGER_DEFAULT_FROM = 'Liabilities:Credit Card'
|
||||
LEDGER_DEFAULT_TO = 'Expenses:Uncategorized'
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
make && \
|
||||
docker run -it \
|
||||
-v $(pwd)/settings.py:/home/ledger/ledger-web/ledger/settings.py:ro \
|
||||
-v $(pwd)/db:/home/ledger/db \
|
||||
rilla/ledger-web \
|
||||
bash
|
||||
|
|
@ -1,43 +0,0 @@
|
|||
FROM alpine:3.12
|
||||
|
||||
ARG WALLABAG_VERSION=2.4.0
|
||||
|
||||
RUN apk --no-cache add \
|
||||
git su-exec make nginx curl php7 \
|
||||
php7-bcmath php7-ctype php7-curl php7-dom php7-fpm php7-gd \
|
||||
php7-gettext php7-iconv php7-intl php7-json php7-mbstring \
|
||||
php7-openssl php7-pdo_sqlite php7-phar php7-session php7-simplexml \
|
||||
php7-sockets php7-tidy php7-tokenizer php7-xml php7-xmlreader
|
||||
|
||||
RUN curl -s https://getcomposer.org/installer | php && \
|
||||
mv composer.phar /usr/local/bin/composer
|
||||
|
||||
RUN mkdir -p /etc/nginx /etc/php7
|
||||
COPY php-fpm.conf php.ini /etc/php7/
|
||||
|
||||
RUN mkdir -p /var/www && \
|
||||
git clone \
|
||||
--branch $WALLABAG_VERSION \
|
||||
--depth 1 \
|
||||
https://github.com/wallabag/wallabag.git \
|
||||
/var/www/wallabag
|
||||
|
||||
COPY parameters.yml /var/www/wallabag/app/config/parameters.yml
|
||||
|
||||
WORKDIR /var/www/wallabag
|
||||
|
||||
RUN SYMFONY_ENV=prod composer install \
|
||||
--no-dev \
|
||||
-o \
|
||||
--prefer-dist \
|
||||
--no-progress
|
||||
|
||||
RUN addgroup -g 1000 wallabag && \
|
||||
adduser -D -h /var/www -G wallabag -u 1000 wallabag && \
|
||||
chown -R wallabag:wallabag /var/www/wallabag
|
||||
|
||||
COPY entrypoint.sh /entrypoint
|
||||
RUN chmod +x /entrypoint
|
||||
|
||||
ENTRYPOINT ["/entrypoint"]
|
||||
CMD ["wallabag"]
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
USERNAME = rilla
|
||||
IMG_NAME = wallabag
|
||||
|
||||
.PHONY: build build-nc
|
||||
|
||||
build: Dockerfile
|
||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
||||
|
||||
build-nc: Dockerfile
|
||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
||||
|
|
@ -1,42 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -ex
|
||||
|
||||
INSTALL_DIR=/var/www/wallabag
|
||||
|
||||
set_permissions () {
|
||||
mkdir -p \
|
||||
"${INSTALL_DIR}/data/assets" \
|
||||
"${INSTALL_DIR}/data/db"
|
||||
chown -R wallabag:wallabag "${INSTALL_DIR}/data"
|
||||
}
|
||||
|
||||
db_install () {
|
||||
[ -f "${INSTALL_DIR}/data/db/wallabag.sqlite" ] || \
|
||||
su-exec wallabag php "${INSTALL_DIR}/bin/console" \
|
||||
wallabag:install --env=prod -n
|
||||
}
|
||||
|
||||
case $1 in
|
||||
wallabag)
|
||||
set_permissions
|
||||
db_install
|
||||
exec su-exec wallabag php-fpm7 -F
|
||||
;;
|
||||
nginx)
|
||||
exec nginx -c /etc/nginx/nginx.conf -g "daemon off;"
|
||||
;;
|
||||
import)
|
||||
set_permissions
|
||||
exec su-exec wallabag "${INSTALL_DIR}/bin/console" \
|
||||
wallabag:import:redis-worker -e=prod "$2" -vv
|
||||
;;
|
||||
migrate)
|
||||
set_permissions
|
||||
exec su-exec wallabag "${INSTALL_DIR}/bin/console" \
|
||||
doctrine:migrations:migrate --env=prod --no-interaction
|
||||
;;
|
||||
*)
|
||||
set_permissions
|
||||
exec su-exec wallabag "$@"
|
||||
esac
|
||||
|
|
@ -1,64 +0,0 @@
|
|||
parameters:
|
||||
database_driver: pdo_sqlite
|
||||
database_host: 127.0.0.1
|
||||
database_port: ~
|
||||
database_name: symfony
|
||||
database_user: root
|
||||
database_password: ~
|
||||
database_path: "%kernel.root_dir%/../data/db/wallabag.sqlite"
|
||||
database_table_prefix: wallabag_
|
||||
database_socket: null
|
||||
database_charset: utf8
|
||||
database_driver_class: null
|
||||
|
||||
domain_name: https://your-wallabag-url-instance.com
|
||||
|
||||
test_database_driver: pdo_sqlite
|
||||
test_database_host: 127.0.0.1
|
||||
test_database_port: ~
|
||||
test_database_name: ~
|
||||
test_database_user: ~
|
||||
test_database_password: ~
|
||||
test_database_path: "%kernel.root_dir%/../data/db/wallabag_test.sqlite"
|
||||
|
||||
mailer_transport: smtp
|
||||
mailer_user: ~
|
||||
mailer_password: ~
|
||||
mailer_host: 127.0.0.1
|
||||
mailer_port: false
|
||||
mailer_encryption: ~
|
||||
mailer_auth_mode: ~
|
||||
|
||||
locale: en
|
||||
|
||||
# A secret key that's used to generate certain security-related tokens
|
||||
secret: ovmpmAWXRCabNlMgzlzFXDYmCFfzGv
|
||||
|
||||
# two factor stuff
|
||||
twofactor_auth: true
|
||||
twofactor_sender: no-reply@wallabag.org
|
||||
|
||||
# fosuser stuff
|
||||
fosuser_registration: true
|
||||
fosuser_confirmation: true
|
||||
|
||||
from_email: no-reply@wallabag.org
|
||||
|
||||
rss_limit: 50
|
||||
|
||||
# RabbitMQ processing
|
||||
rabbitmq_host: localhost
|
||||
rabbitmq_port: 5672
|
||||
rabbitmq_user: guest
|
||||
rabbitmq_password: guest
|
||||
rabbitmq_prefetch_count: 10
|
||||
|
||||
# Redis processing
|
||||
redis_scheme: tcp
|
||||
redis_host: localhost
|
||||
redis_port: 6379
|
||||
redis_path: null
|
||||
redis_password: null
|
||||
|
||||
# Sentry
|
||||
sentry_dsn: ~
|
||||
|
|
@ -1,539 +0,0 @@
|
|||
;;;;;;;;;;;;;;;;;;;;;
|
||||
; FPM Configuration ;
|
||||
;;;;;;;;;;;;;;;;;;;;;
|
||||
|
||||
; All relative paths in this configuration file are relative to PHP's install
|
||||
; prefix (/usr). This prefix can be dynamically changed by using the
|
||||
; '-p' argument from the command line.
|
||||
|
||||
; Include one or more files. If glob(3) exists, it is used to include a bunch of
|
||||
; files from a glob(3) pattern. This directive can be used everywhere in the
|
||||
; file.
|
||||
; Relative path can also be used. They will be prefixed by:
|
||||
; - the global prefix if it's been set (-p argument)
|
||||
; - /usr otherwise
|
||||
;include=etc/fpm.d/*.conf
|
||||
|
||||
;;;;;;;;;;;;;;;;;;
|
||||
; Global Options ;
|
||||
;;;;;;;;;;;;;;;;;;
|
||||
|
||||
[global]
|
||||
; Pid file
|
||||
; Note: the default prefix is /var
|
||||
; Default Value: none
|
||||
;pid = run/php-fpm.pid
|
||||
|
||||
; Error log file
|
||||
; If it's set to "syslog", log is sent to syslogd instead of being written
|
||||
; in a local file.
|
||||
; Note: the default prefix is /var
|
||||
; Default Value: log/php-fpm.log
|
||||
error_log = /dev/stdout
|
||||
|
||||
; syslog_facility is used to specify what type of program is logging the
|
||||
; message. This lets syslogd specify that messages from different facilities
|
||||
; will be handled differently.
|
||||
; See syslog(3) for possible values (ex daemon equiv LOG_DAEMON)
|
||||
; Default Value: daemon
|
||||
;syslog.facility = daemon
|
||||
|
||||
; syslog_ident is prepended to every message. If you have multiple FPM
|
||||
; instances running on the same server, you can change the default value
|
||||
; which must suit common needs.
|
||||
; Default Value: php-fpm
|
||||
;syslog.ident = php-fpm
|
||||
|
||||
; Log level
|
||||
; Possible Values: alert, error, warning, notice, debug
|
||||
; Default Value: notice
|
||||
;log_level = notice
|
||||
|
||||
; If this number of child processes exit with SIGSEGV or SIGBUS within the time
|
||||
; interval set by emergency_restart_interval then FPM will restart. A value
|
||||
; of '0' means 'Off'.
|
||||
; Default Value: 0
|
||||
;emergency_restart_threshold = 0
|
||||
|
||||
; Interval of time used by emergency_restart_interval to determine when
|
||||
; a graceful restart will be initiated. This can be useful to work around
|
||||
; accidental corruptions in an accelerator's shared memory.
|
||||
; Available Units: s(econds), m(inutes), h(ours), or d(ays)
|
||||
; Default Unit: seconds
|
||||
; Default Value: 0
|
||||
;emergency_restart_interval = 0
|
||||
|
||||
; Time limit for child processes to wait for a reaction on signals from master.
|
||||
; Available units: s(econds), m(inutes), h(ours), or d(ays)
|
||||
; Default Unit: seconds
|
||||
; Default Value: 0
|
||||
;process_control_timeout = 0
|
||||
|
||||
; The maximum number of processes FPM will fork. This has been design to control
|
||||
; the global number of processes when using dynamic PM within a lot of pools.
|
||||
; Use it with caution.
|
||||
; Note: A value of 0 indicates no limit
|
||||
; Default Value: 0
|
||||
; process.max = 128
|
||||
|
||||
; Specify the nice(2) priority to apply to the master process (only if set)
|
||||
; The value can vary from -19 (highest priority) to 20 (lower priority)
|
||||
; Note: - It will only work if the FPM master process is launched as root
|
||||
; - The pool process will inherit the master process priority
|
||||
; unless it specified otherwise
|
||||
; Default Value: no set
|
||||
; process.priority = -19
|
||||
|
||||
; Send FPM to background. Set to 'no' to keep FPM in foreground for debugging.
|
||||
; Default Value: yes
|
||||
;daemonize = yes
|
||||
|
||||
; Set open file descriptor rlimit for the master process.
|
||||
; Default Value: system defined value
|
||||
;rlimit_files = 1024
|
||||
|
||||
; Set max core size rlimit for the master process.
|
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0
|
||||
; Default Value: system defined value
|
||||
;rlimit_core = 0
|
||||
|
||||
; Specify the event mechanism FPM will use. The following is available:
|
||||
; - select (any POSIX os)
|
||||
; - poll (any POSIX os)
|
||||
; - epoll (linux >= 2.5.44)
|
||||
; - kqueue (FreeBSD >= 4.1, OpenBSD >= 2.9, NetBSD >= 2.0)
|
||||
; - /dev/poll (Solaris >= 7)
|
||||
; - port (Solaris >= 10)
|
||||
; Default Value: not set (auto detection)
|
||||
;events.mechanism = epoll
|
||||
|
||||
; When FPM is build with systemd integration, specify the interval,
|
||||
; in second, between health report notification to systemd.
|
||||
; Set to 0 to disable.
|
||||
; Available Units: s(econds), m(inutes), h(ours)
|
||||
; Default Unit: seconds
|
||||
; Default value: 10
|
||||
;systemd_interval = 10
|
||||
|
||||
;;;;;;;;;;;;;;;;;;;;
|
||||
; Pool Definitions ;
|
||||
;;;;;;;;;;;;;;;;;;;;
|
||||
|
||||
; Multiple pools of child processes may be started with different listening
|
||||
; ports and different management options. The name of the pool will be
|
||||
; used in logs and stats. There is no limitation on the number of pools which
|
||||
; FPM can handle. Your system will tell you anyway :)
|
||||
|
||||
; Start a new pool named 'www'.
|
||||
; the variable $pool can we used in any directive and will be replaced by the
|
||||
; pool name ('www' here)
|
||||
[www]
|
||||
|
||||
; Per pool prefix
|
||||
; It only applies on the following directives:
|
||||
; - 'access.log'
|
||||
; - 'slowlog'
|
||||
; - 'listen' (unixsocket)
|
||||
; - 'chroot'
|
||||
; - 'chdir'
|
||||
; - 'php_values'
|
||||
; - 'php_admin_values'
|
||||
; When not set, the global prefix (or /usr) applies instead.
|
||||
; Note: This directive can also be relative to the global prefix.
|
||||
; Default Value: none
|
||||
;prefix = /path/to/pools/$pool
|
||||
|
||||
; Unix user/group of processes
|
||||
; Note: The user is mandatory. If the group is not set, the default user's group
|
||||
; will be used.
|
||||
user = nobody
|
||||
group = nobody
|
||||
|
||||
; The address on which to accept FastCGI requests.
|
||||
; Valid syntaxes are:
|
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on
|
||||
; a specific port;
|
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
|
||||
; a specific port;
|
||||
; 'port' - to listen on a TCP socket to all IPv4 addresses on a
|
||||
; specific port;
|
||||
; '[::]:port' - to listen on a TCP socket to all addresses
|
||||
; (IPv6 and IPv4-mapped) on a specific port;
|
||||
; '/path/to/unix/socket' - to listen on a unix socket.
|
||||
; Note: This value is mandatory.
|
||||
;listen = 127.0.0.1:9000
|
||||
listen = 0.0.0.0:9000
|
||||
|
||||
; Set listen(2) backlog.
|
||||
; Default Value: 65535 (-1 on FreeBSD and OpenBSD)
|
||||
;listen.backlog = 65535
|
||||
|
||||
; Set permissions for unix socket, if one is used. In Linux, read/write
|
||||
; permissions must be set in order to allow connections from a web server. Many
|
||||
; BSD-derived systems allow connections regardless of permissions.
|
||||
; Default Values: user and group are set as the running user
|
||||
; mode is set to 0660
|
||||
;listen.owner = nobody
|
||||
;listen.group = nobody
|
||||
;listen.mode = 0660
|
||||
; When POSIX Access Control Lists are supported you can set them using
|
||||
; these options, value is a comma separated list of user/group names.
|
||||
; When set, listen.owner and listen.group are ignored
|
||||
;listen.acl_users =
|
||||
;listen.acl_groups =
|
||||
|
||||
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
|
||||
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
|
||||
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
|
||||
; must be separated by a comma. If this value is left blank, connections will be
|
||||
; accepted from any ip address.
|
||||
; Default Value: any
|
||||
;listen.allowed_clients = 127.0.0.1
|
||||
|
||||
; Specify the nice(2) priority to apply to the pool processes (only if set)
|
||||
; The value can vary from -19 (highest priority) to 20 (lower priority)
|
||||
; Note: - It will only work if the FPM master process is launched as root
|
||||
; - The pool processes will inherit the master process priority
|
||||
; unless it specified otherwise
|
||||
; Default Value: no set
|
||||
; process.priority = -19
|
||||
|
||||
; Choose how the process manager will control the number of child processes.
|
||||
; Possible Values:
|
||||
; static - a fixed number (pm.max_children) of child processes;
|
||||
; dynamic - the number of child processes are set dynamically based on the
|
||||
; following directives. With this process management, there will be
|
||||
; always at least 1 children.
|
||||
; pm.max_children - the maximum number of children that can
|
||||
; be alive at the same time.
|
||||
; pm.start_servers - the number of children created on startup.
|
||||
; pm.min_spare_servers - the minimum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is less than this
|
||||
; number then some children will be created.
|
||||
; pm.max_spare_servers - the maximum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is greater than this
|
||||
; number then some children will be killed.
|
||||
; ondemand - no children are created at startup. Children will be forked when
|
||||
; new requests will connect. The following parameter are used:
|
||||
; pm.max_children - the maximum number of children that
|
||||
; can be alive at the same time.
|
||||
; pm.process_idle_timeout - The number of seconds after which
|
||||
; an idle process will be killed.
|
||||
; Note: This value is mandatory.
|
||||
pm = dynamic
|
||||
|
||||
; The number of child processes to be created when pm is set to 'static' and the
|
||||
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
|
||||
; This value sets the limit on the number of simultaneous requests that will be
|
||||
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
|
||||
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
|
||||
; CGI. The below defaults are based on a server without much resources. Don't
|
||||
; forget to tweak pm.* to fit your needs.
|
||||
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
|
||||
; Note: This value is mandatory.
|
||||
pm.max_children = 5
|
||||
|
||||
; The number of child processes created on startup.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
|
||||
pm.start_servers = 2
|
||||
|
||||
; The desired minimum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.min_spare_servers = 1
|
||||
|
||||
; The desired maximum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.max_spare_servers = 3
|
||||
|
||||
; The number of seconds after which an idle process will be killed.
|
||||
; Note: Used only when pm is set to 'ondemand'
|
||||
; Default Value: 10s
|
||||
;pm.process_idle_timeout = 10s;
|
||||
|
||||
; The number of requests each child process should execute before respawning.
|
||||
; This can be useful to work around memory leaks in 3rd party libraries. For
|
||||
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
|
||||
; Default Value: 0
|
||||
;pm.max_requests = 500
|
||||
|
||||
; The URI to view the FPM status page. If this value is not set, no URI will be
|
||||
; recognized as a status page. It shows the following informations:
|
||||
; pool - the name of the pool;
|
||||
; process manager - static, dynamic or ondemand;
|
||||
; start time - the date and time FPM has started;
|
||||
; start since - number of seconds since FPM has started;
|
||||
; accepted conn - the number of request accepted by the pool;
|
||||
; listen queue - the number of request in the queue of pending
|
||||
; connections (see backlog in listen(2));
|
||||
; max listen queue - the maximum number of requests in the queue
|
||||
; of pending connections since FPM has started;
|
||||
; listen queue len - the size of the socket queue of pending connections;
|
||||
; idle processes - the number of idle processes;
|
||||
; active processes - the number of active processes;
|
||||
; total processes - the number of idle + active processes;
|
||||
; max active processes - the maximum number of active processes since FPM
|
||||
; has started;
|
||||
; max children reached - number of times, the process limit has been reached,
|
||||
; when pm tries to start more children (works only for
|
||||
; pm 'dynamic' and 'ondemand');
|
||||
; Value are updated in real time.
|
||||
; Example output:
|
||||
; pool: www
|
||||
; process manager: static
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 62636
|
||||
; accepted conn: 190460
|
||||
; listen queue: 0
|
||||
; max listen queue: 1
|
||||
; listen queue len: 42
|
||||
; idle processes: 4
|
||||
; active processes: 11
|
||||
; total processes: 15
|
||||
; max active processes: 12
|
||||
; max children reached: 0
|
||||
;
|
||||
; By default the status page output is formatted as text/plain. Passing either
|
||||
; 'html', 'xml' or 'json' in the query string will return the corresponding
|
||||
; output syntax. Example:
|
||||
; http://www.foo.bar/status
|
||||
; http://www.foo.bar/status?json
|
||||
; http://www.foo.bar/status?html
|
||||
; http://www.foo.bar/status?xml
|
||||
;
|
||||
; By default the status page only outputs short status. Passing 'full' in the
|
||||
; query string will also return status for each pool process.
|
||||
; Example:
|
||||
; http://www.foo.bar/status?full
|
||||
; http://www.foo.bar/status?json&full
|
||||
; http://www.foo.bar/status?html&full
|
||||
; http://www.foo.bar/status?xml&full
|
||||
; The Full status returns for each process:
|
||||
; pid - the PID of the process;
|
||||
; state - the state of the process (Idle, Running, ...);
|
||||
; start time - the date and time the process has started;
|
||||
; start since - the number of seconds since the process has started;
|
||||
; requests - the number of requests the process has served;
|
||||
; request duration - the duration in µs of the requests;
|
||||
; request method - the request method (GET, POST, ...);
|
||||
; request URI - the request URI with the query string;
|
||||
; content length - the content length of the request (only with POST);
|
||||
; user - the user (PHP_AUTH_USER) (or '-' if not set);
|
||||
; script - the main script called (or '-' if not set);
|
||||
; last request cpu - the %cpu the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because CPU calculation is done when the request
|
||||
; processing has terminated;
|
||||
; last request memory - the max amount of memory the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because memory calculation is done when the request
|
||||
; processing has terminated;
|
||||
; If the process is in Idle state, then informations are related to the
|
||||
; last request the process has served. Otherwise informations are related to
|
||||
; the current request being served.
|
||||
; Example output:
|
||||
; ************************
|
||||
; pid: 31330
|
||||
; state: Running
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 63087
|
||||
; requests: 12808
|
||||
; request duration: 1250261
|
||||
; request method: GET
|
||||
; request URI: /test_mem.php?N=10000
|
||||
; content length: 0
|
||||
; user: -
|
||||
; script: /home/fat/web/docs/php/test_mem.php
|
||||
; last request cpu: 0.00
|
||||
; last request memory: 0
|
||||
;
|
||||
; Note: There is a real-time FPM status monitoring sample web page available
|
||||
; It's available in: /usr/share/php/fpm/status.html
|
||||
;
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
;pm.status_path = /status
|
||||
|
||||
; The ping URI to call the monitoring page of FPM. If this value is not set, no
|
||||
; URI will be recognized as a ping page. This could be used to test from outside
|
||||
; that FPM is alive and responding, or to
|
||||
; - create a graph of FPM availability (rrd or such);
|
||||
; - remove a server from a group if it is not responding (load balancing);
|
||||
; - trigger alerts for the operating team (24/7).
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
;ping.path = /ping
|
||||
|
||||
; This directive may be used to customize the response of a ping request. The
|
||||
; response is formatted as text/plain with a 200 response code.
|
||||
; Default Value: pong
|
||||
;ping.response = pong
|
||||
|
||||
; The access log file
|
||||
; Default: not set
|
||||
;access.log = log/$pool.access.log
|
||||
access.log = /dev/stdout
|
||||
|
||||
; The access log format.
|
||||
; The following syntax is allowed
|
||||
; %%: the '%' character
|
||||
; %C: %CPU used by the request
|
||||
; it can accept the following format:
|
||||
; - %{user}C for user CPU only
|
||||
; - %{system}C for system CPU only
|
||||
; - %{total}C for user + system CPU (default)
|
||||
; %d: time taken to serve the request
|
||||
; it can accept the following format:
|
||||
; - %{seconds}d (default)
|
||||
; - %{miliseconds}d
|
||||
; - %{mili}d
|
||||
; - %{microseconds}d
|
||||
; - %{micro}d
|
||||
; %e: an environment variable (same as $_ENV or $_SERVER)
|
||||
; it must be associated with embraces to specify the name of the env
|
||||
; variable. Some exemples:
|
||||
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
|
||||
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
|
||||
; %f: script filename
|
||||
; %l: content-length of the request (for POST request only)
|
||||
; %m: request method
|
||||
; %M: peak of memory allocated by PHP
|
||||
; it can accept the following format:
|
||||
; - %{bytes}M (default)
|
||||
; - %{kilobytes}M
|
||||
; - %{kilo}M
|
||||
; - %{megabytes}M
|
||||
; - %{mega}M
|
||||
; %n: pool name
|
||||
; %o: output header
|
||||
; it must be associated with embraces to specify the name of the header:
|
||||
; - %{Content-Type}o
|
||||
; - %{X-Powered-By}o
|
||||
; - %{Transfert-Encoding}o
|
||||
; - ....
|
||||
; %p: PID of the child that serviced the request
|
||||
; %P: PID of the parent of the child that serviced the request
|
||||
; %q: the query string
|
||||
; %Q: the '?' character if query string exists
|
||||
; %r: the request URI (without the query string, see %q and %Q)
|
||||
; %R: remote IP address
|
||||
; %s: status (response code)
|
||||
; %t: server time the request was received
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; %T: time the log has been written (the request has finished)
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; %u: remote user
|
||||
;
|
||||
; Default: "%R - %u %t \"%m %r\" %s"
|
||||
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
|
||||
|
||||
; The log file for slow requests
|
||||
; Default Value: not set
|
||||
; Note: slowlog is mandatory if request_slowlog_timeout is set
|
||||
;slowlog = log/$pool.log.slow
|
||||
|
||||
; The timeout for serving a single request after which a PHP backtrace will be
|
||||
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
;request_slowlog_timeout = 0
|
||||
|
||||
; The timeout for serving a single request after which the worker process will
|
||||
; be killed. This option should be used when the 'max_execution_time' ini option
|
||||
; does not stop script execution for some reason. A value of '0' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
;request_terminate_timeout = 0
|
||||
|
||||
; Set open file descriptor rlimit.
|
||||
; Default Value: system defined value
|
||||
;rlimit_files = 1024
|
||||
|
||||
; Set max core size rlimit.
|
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0
|
||||
; Default Value: system defined value
|
||||
;rlimit_core = 0
|
||||
|
||||
; Chroot to this directory at the start. This value must be defined as an
|
||||
; absolute path. When this value is not set, chroot is not used.
|
||||
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
|
||||
; of its subdirectories. If the pool prefix is not set, the global prefix
|
||||
; will be used instead.
|
||||
; Note: chrooting is a great security feature and should be used whenever
|
||||
; possible. However, all PHP paths will be relative to the chroot
|
||||
; (error_log, sessions.save_path, ...).
|
||||
; Default Value: not set
|
||||
;chroot =
|
||||
|
||||
; Chdir to this directory at the start.
|
||||
; Note: relative path can be used.
|
||||
; Default Value: current directory or / when chroot
|
||||
;chdir = /var/www
|
||||
|
||||
; Redirect worker stdout and stderr into main error log. If not set, stdout and
|
||||
; stderr will be redirected to /dev/null according to FastCGI specs.
|
||||
; Note: on highloaded environement, this can cause some delay in the page
|
||||
; process time (several ms).
|
||||
; Default Value: no
|
||||
;catch_workers_output = yes
|
||||
|
||||
; Clear environment in FPM workers
|
||||
; Prevents arbitrary environment variables from reaching FPM worker processes
|
||||
; by clearing the environment in workers before env vars specified in this
|
||||
; pool configuration are added.
|
||||
; Setting to "no" will make all environment variables available to PHP code
|
||||
; via getenv(), $_ENV and $_SERVER.
|
||||
; Default Value: yes
|
||||
;clear_env = no
|
||||
|
||||
; Limits the extensions of the main script FPM will allow to parse. This can
|
||||
; prevent configuration mistakes on the web server side. You should only limit
|
||||
; FPM to .php extensions to prevent malicious users to use other extensions to
|
||||
; exectute php code.
|
||||
; Note: set an empty value to allow all extensions.
|
||||
; Default Value: .php
|
||||
;security.limit_extensions = .php .php3 .php4 .php5
|
||||
|
||||
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
|
||||
; the current environment.
|
||||
; Default Value: clean env
|
||||
;env[HOSTNAME] = $HOSTNAME
|
||||
env[PATH] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
||||
;env[TMP] = /tmp
|
||||
;env[TMPDIR] = /tmp
|
||||
;env[TEMP] = /tmp
|
||||
|
||||
; Additional php.ini defines, specific to this pool of workers. These settings
|
||||
; overwrite the values previously defined in the php.ini. The directives are the
|
||||
; same as the PHP SAPI:
|
||||
; php_value/php_flag - you can set classic ini defines which can
|
||||
; be overwritten from PHP call 'ini_set'.
|
||||
; php_admin_value/php_admin_flag - these directives won't be overwritten by
|
||||
; PHP call 'ini_set'
|
||||
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
|
||||
|
||||
; Defining 'extension' will load the corresponding shared extension from
|
||||
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
|
||||
; overwrite previously defined php.ini values, but will append the new value
|
||||
; instead.
|
||||
|
||||
; Note: path INI options can be relative and will be expanded with the prefix
|
||||
; (pool, global or /usr)
|
||||
|
||||
; Default Value: nothing is defined by default except the values in php.ini and
|
||||
; specified at startup with the -d argument
|
||||
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
|
||||
;php_flag[display_errors] = off
|
||||
;php_admin_value[error_log] = /var/log/fpm-php.www.log
|
||||
;php_admin_flag[log_errors] = on
|
||||
;php_admin_value[memory_limit] = 32M
|
||||
1930
wallabag/php.ini
1930
wallabag/php.ini
File diff suppressed because it is too large
Load Diff
Loading…
Reference in New Issue