1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/bookstack_ynh.git synced 2024-09-03 18:16:02 +02:00
* 22.06

* Auto-update README

* Update manifest.json

* Fix

* 22.06.1

* Auto-update README

* Update upgrade

* 22.06.2

* Auto-update README

* Update app.src

* Update DESCRIPTION.md

* Auto-update README

* Update nginx.conf

* Update .env.example.complete

* Update .env.example.complete

* Update install

* Revert "Update install"

This reverts commit e43db7a0de.

* 22.07.1 (#80)

* 22.07.1

* Auto-update README

Co-authored-by: yunohost-bot <yunohost@yunohost.org>

* Auto-update README

* Auto-update README

* 22.07.2 (#82)

* 22.07.2

* Auto-update README

Co-authored-by: yunohost-bot <yunohost@yunohost.org>

* 22.07.3 (#84)

* 22.07.3

* Auto-update README

* Update manifest.json

Co-authored-by: yunohost-bot <yunohost@yunohost.org>

* Update upgrade

* 22.09 (#88)

* 22.09

* Auto-update README

* Update app.src

Co-authored-by: yunohost-bot <yunohost@yunohost.org>

* 22.09.1

* Auto-update README

* upgrade composer

Co-authored-by: yunohost-bot <yunohost@yunohost.org>
This commit is contained in:
Éric Gaspar 2022-09-20 17:19:35 +02:00 committed by GitHub
parent 63d3a1b3f8
commit d3bd496714
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 36 additions and 6 deletions

View file

@ -28,7 +28,7 @@ BookStack is an opinionated wiki system that provides a pleasant and simple out
- Diagrams.net Integration - Diagrams.net Integration
**Shipped version:** 22.09~ynh1 **Shipped version:** 22.09.1~ynh1
**Demo:** https://demo.bookstackapp.com **Demo:** https://demo.bookstackapp.com

View file

@ -26,7 +26,7 @@ BookStack is an opinionated wiki system that provides a pleasant and simple out
- Multi-Lingual - Multi-Lingual
**Version incluse :** 22.09~ynh1 **Version incluse :** 22.09.1~ynh1
**Démo :** https://demo.bookstackapp.com **Démo :** https://demo.bookstackapp.com

View file

@ -1,5 +1,5 @@
SOURCE_URL=https://github.com/BookStackApp/BookStack/archive/refs/tags/v22.09.tar.gz SOURCE_URL=https://github.com/BookStackApp/BookStack/archive/refs/tags/v22.09.1.tar.gz
SOURCE_SUM=4807d646c2327f26d19df398e1f2ecc54d47a967eefbd80127c611fb1b1a9dbb SOURCE_SUM=f66e8f0dad102997bb441bfcb8dcb8ab634ed4970623a6fbee4047399b21116a
SOURCE_SUM_PRG=sha256sum SOURCE_SUM_PRG=sha256sum
SOURCE_FORMAT=tar.gz SOURCE_FORMAT=tar.gz
SOURCE_IN_SUBDIR=true SOURCE_IN_SUBDIR=true

View file

@ -7,5 +7,35 @@ Group=__APP__
Restart=always Restart=always
ExecStart=/usr/bin/php__PHPVERSION__ __FINALPATH__/artisan queue:work --sleep=3 --tries=1 --max-time=3600 ExecStart=/usr/bin/php__PHPVERSION__ __FINALPATH__/artisan queue:work --sleep=3 --tries=1 --max-time=3600
# Sandboxing options to harden security
# Depending on specificities of your service/app, you may need to tweak these
# .. but this should be a good baseline
# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
RestrictNamespaces=yes
RestrictRealtime=yes
DevicePolicy=closed
ProtectSystem=full
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
LockPersonality=yes
SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap
# Denying access to capabilities that should not be relevant for webapps
# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html
CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT
CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK
CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM
CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

View file

@ -6,7 +6,7 @@
"en": "Platform to create documentation/wiki content", "en": "Platform to create documentation/wiki content",
"fr": "Plateforme pour créer du contenu de documentation/wiki" "fr": "Plateforme pour créer du contenu de documentation/wiki"
}, },
"version": "22.09~ynh1", "version": "22.09.1~ynh1",
"url": "https://www.bookstackapp.com/", "url": "https://www.bookstackapp.com/",
"upstream": { "upstream": {
"license": "MIT", "license": "MIT",

View file

@ -8,7 +8,7 @@ YNH_PHP_VERSION="8.0"
pkg_dependencies="php${YNH_PHP_VERSION}-curl php${YNH_PHP_VERSION}-mysql php${YNH_PHP_VERSION}-ldap php${YNH_PHP_VERSION}-mbstring php${YNH_PHP_VERSION}-tidy php${YNH_PHP_VERSION}-xml php${YNH_PHP_VERSION}-zip php${YNH_PHP_VERSION}-gd" pkg_dependencies="php${YNH_PHP_VERSION}-curl php${YNH_PHP_VERSION}-mysql php${YNH_PHP_VERSION}-ldap php${YNH_PHP_VERSION}-mbstring php${YNH_PHP_VERSION}-tidy php${YNH_PHP_VERSION}-xml php${YNH_PHP_VERSION}-zip php${YNH_PHP_VERSION}-gd"
YNH_COMPOSER_VERSION=2.3.5 YNH_COMPOSER_VERSION=2.4.2
#================================================= #=================================================
# PERSONAL HELPERS # PERSONAL HELPERS