diff --git a/conf/ice-servers.json b/conf/ice-servers.json index a63da38..e283063 100644 --- a/conf/ice-servers.json +++ b/conf/ice-servers.json @@ -8,4 +8,4 @@ "credential": "secret", "credentialType": "hmac-sha1" } -] \ No newline at end of file +] diff --git a/conf/nginx.conf b/conf/nginx.conf index cfc3e41..6a3b9a8 100755 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,5 +1,5 @@ location / { - + # Force usage of https if ($scheme = http) { rewrite ^ https://$server_name$request_uri? permanent; diff --git a/conf/systemd.service b/conf/systemd.service index d804274..c98bb78 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -10,6 +10,8 @@ User=__APP__ Group=__APP__ ExecStart=__FINALPATH__/galene -turn __PUBLIC_IP4__:__TURN_PORT__ -udp-range 49152-65535 -groups /home/yunohost.app/__APP__/groups -recordings /home/yunohost.app/__APP__/recordings LimitNOFILE=65536 +StandardOutput=append:/var/log/__APP__/__APP__.log +StandardError=inherit [Install] WantedBy=multi-user.target diff --git a/scripts/install b/scripts/install index e2ab403..fe5d7f6 100755 --- a/scripts/install +++ b/scripts/install @@ -140,7 +140,7 @@ public_ip4="$(curl -s ip.yunohost.org)" || true ynh_add_systemd_config #================================================= -# MODIFY A CONFIG FILE +# MODIFY A CONFIG FILES #================================================= # Create a group name config diff --git a/scripts/upgrade b/scripts/upgrade index 2035586..509475f 100755 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -50,6 +50,12 @@ ynh_abort_if_errors #================================================= ynh_script_progression --message="Ensuring downward compatibility..." --weight=1 +# If open, close direct access to $port in firewall +if yunohost firewall list | grep -q "\- $port$" +then + ynh_exec_warn_less yunohost firewall disallow TCP $port +fi + # If final_path doesn't exist, create it if [ -z "$final_path" ]; then final_path=/opt/yunohost/$app