mirror of
https://github.com/YunoHost-Apps/bookstack_ynh.git
synced 2024-09-03 18:16:02 +02:00
Testing (#90)
* 22.06
* Auto-update README
* Update manifest.json
* Fix
* 22.06.1
* Auto-update README
* Update upgrade
* 22.06.2
* Auto-update README
* Update app.src
* Update DESCRIPTION.md
* Auto-update README
* Update nginx.conf
* Update .env.example.complete
* Update .env.example.complete
* Update install
* Revert "Update install"
This reverts commit e43db7a0de
.
* 22.07.1 (#80)
* 22.07.1
* Auto-update README
Co-authored-by: yunohost-bot <yunohost@yunohost.org>
* Auto-update README
* Auto-update README
* 22.07.2 (#82)
* 22.07.2
* Auto-update README
Co-authored-by: yunohost-bot <yunohost@yunohost.org>
* 22.07.3 (#84)
* 22.07.3
* Auto-update README
* Update manifest.json
Co-authored-by: yunohost-bot <yunohost@yunohost.org>
* Update upgrade
* 22.09 (#88)
* 22.09
* Auto-update README
* Update app.src
Co-authored-by: yunohost-bot <yunohost@yunohost.org>
* 22.09.1
* Auto-update README
* upgrade composer
Co-authored-by: yunohost-bot <yunohost@yunohost.org>
This commit is contained in:
parent
63d3a1b3f8
commit
d3bd496714
6 changed files with 36 additions and 6 deletions
|
@ -28,7 +28,7 @@ BookStack is an opinionated wiki system that provides a pleasant and simple out
|
||||||
- Diagrams.net Integration
|
- Diagrams.net Integration
|
||||||
|
|
||||||
|
|
||||||
**Shipped version:** 22.09~ynh1
|
**Shipped version:** 22.09.1~ynh1
|
||||||
|
|
||||||
|
|
||||||
**Demo:** https://demo.bookstackapp.com
|
**Demo:** https://demo.bookstackapp.com
|
||||||
|
|
|
@ -26,7 +26,7 @@ BookStack is an opinionated wiki system that provides a pleasant and simple out
|
||||||
- Multi-Lingual
|
- Multi-Lingual
|
||||||
|
|
||||||
|
|
||||||
**Version incluse :** 22.09~ynh1
|
**Version incluse :** 22.09.1~ynh1
|
||||||
|
|
||||||
|
|
||||||
**Démo :** https://demo.bookstackapp.com
|
**Démo :** https://demo.bookstackapp.com
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
SOURCE_URL=https://github.com/BookStackApp/BookStack/archive/refs/tags/v22.09.tar.gz
|
SOURCE_URL=https://github.com/BookStackApp/BookStack/archive/refs/tags/v22.09.1.tar.gz
|
||||||
SOURCE_SUM=4807d646c2327f26d19df398e1f2ecc54d47a967eefbd80127c611fb1b1a9dbb
|
SOURCE_SUM=f66e8f0dad102997bb441bfcb8dcb8ab634ed4970623a6fbee4047399b21116a
|
||||||
SOURCE_SUM_PRG=sha256sum
|
SOURCE_SUM_PRG=sha256sum
|
||||||
SOURCE_FORMAT=tar.gz
|
SOURCE_FORMAT=tar.gz
|
||||||
SOURCE_IN_SUBDIR=true
|
SOURCE_IN_SUBDIR=true
|
||||||
|
|
|
@ -7,5 +7,35 @@ Group=__APP__
|
||||||
Restart=always
|
Restart=always
|
||||||
ExecStart=/usr/bin/php__PHPVERSION__ __FINALPATH__/artisan queue:work --sleep=3 --tries=1 --max-time=3600
|
ExecStart=/usr/bin/php__PHPVERSION__ __FINALPATH__/artisan queue:work --sleep=3 --tries=1 --max-time=3600
|
||||||
|
|
||||||
|
# Sandboxing options to harden security
|
||||||
|
# Depending on specificities of your service/app, you may need to tweak these
|
||||||
|
# .. but this should be a good baseline
|
||||||
|
# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
|
||||||
|
NoNewPrivileges=yes
|
||||||
|
PrivateTmp=yes
|
||||||
|
PrivateDevices=yes
|
||||||
|
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
|
||||||
|
RestrictNamespaces=yes
|
||||||
|
RestrictRealtime=yes
|
||||||
|
DevicePolicy=closed
|
||||||
|
ProtectSystem=full
|
||||||
|
ProtectControlGroups=yes
|
||||||
|
ProtectKernelModules=yes
|
||||||
|
ProtectKernelTunables=yes
|
||||||
|
LockPersonality=yes
|
||||||
|
SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap
|
||||||
|
|
||||||
|
# Denying access to capabilities that should not be relevant for webapps
|
||||||
|
# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html
|
||||||
|
CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
|
||||||
|
CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
|
||||||
|
CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT
|
||||||
|
CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK
|
||||||
|
CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM
|
||||||
|
CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
|
||||||
|
CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
|
||||||
|
CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
|
||||||
|
CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
|
@ -6,7 +6,7 @@
|
||||||
"en": "Platform to create documentation/wiki content",
|
"en": "Platform to create documentation/wiki content",
|
||||||
"fr": "Plateforme pour créer du contenu de documentation/wiki"
|
"fr": "Plateforme pour créer du contenu de documentation/wiki"
|
||||||
},
|
},
|
||||||
"version": "22.09~ynh1",
|
"version": "22.09.1~ynh1",
|
||||||
"url": "https://www.bookstackapp.com/",
|
"url": "https://www.bookstackapp.com/",
|
||||||
"upstream": {
|
"upstream": {
|
||||||
"license": "MIT",
|
"license": "MIT",
|
||||||
|
|
|
@ -8,7 +8,7 @@ YNH_PHP_VERSION="8.0"
|
||||||
|
|
||||||
pkg_dependencies="php${YNH_PHP_VERSION}-curl php${YNH_PHP_VERSION}-mysql php${YNH_PHP_VERSION}-ldap php${YNH_PHP_VERSION}-mbstring php${YNH_PHP_VERSION}-tidy php${YNH_PHP_VERSION}-xml php${YNH_PHP_VERSION}-zip php${YNH_PHP_VERSION}-gd"
|
pkg_dependencies="php${YNH_PHP_VERSION}-curl php${YNH_PHP_VERSION}-mysql php${YNH_PHP_VERSION}-ldap php${YNH_PHP_VERSION}-mbstring php${YNH_PHP_VERSION}-tidy php${YNH_PHP_VERSION}-xml php${YNH_PHP_VERSION}-zip php${YNH_PHP_VERSION}-gd"
|
||||||
|
|
||||||
YNH_COMPOSER_VERSION=2.3.5
|
YNH_COMPOSER_VERSION=2.4.2
|
||||||
|
|
||||||
#=================================================
|
#=================================================
|
||||||
# PERSONAL HELPERS
|
# PERSONAL HELPERS
|
||||||
|
|
Loading…
Reference in a new issue