1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/prowlarr_ynh.git synced 2024-09-03 20:16:07 +02:00

Merge pull request #1 from YunoHost-Apps/testing

Improve initial commit
This commit is contained in:
tituspijean 2021-09-30 14:46:07 +02:00 committed by GitHub
commit e0fcbf7413
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 40 additions and 9 deletions

View file

@ -15,7 +15,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in
## Overview
Integrates seamlessly with Lidarr, Mylar3, Radarr, Readarr, and Sonarr offering complete management of your indexers with no per app Indexer setup required.
Complete management of your indexers for Radarr, Sonarr, Lidarr, ...
**Shipped version:** 0.1.1.875~ynh1

View file

@ -11,7 +11,7 @@ Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour
## Vue d'ensemble
S'intègre directement avec Lidarr, Mylar3, Radarr, Readarr, et Sonarr pour offrir une gestion complète de vos indexeurs sans aucune manipulation nécessaire dans chaque app.
Gestion complète de vos indexeurs pour Radarr, Sonarr, Lidarr, ...
**Version incluse :** 0.1.1.875~ynh1

View file

@ -13,5 +13,35 @@ TimeoutStopSec=20
KillMode=process
Restart=always
# Sandboxing options to harden security
# Depending on specificities of your service/app, you may need to tweak these
# .. but this should be a good baseline
# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictNamespaces=yes
RestrictRealtime=yes
DevicePolicy=closed
ProtectSystem=full
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
LockPersonality=yes
SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap
# Denying access to capabilities that should not be relevant for webapps
# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html
CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT
CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK
CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM
CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
[Install]
WantedBy=multi-user.target

View file

@ -3,8 +3,8 @@
"id": "prowlarr",
"packaging_format": 1,
"description": {
"en": "Integrates seamlessly with Lidarr, Mylar3, Radarr, Readarr, and Sonarr offering complete management of your indexers with no per app Indexer setup required.",
"fr": "S'intègre directement avec Lidarr, Mylar3, Radarr, Readarr, et Sonarr pour offrir une gestion complète de vos indexeurs sans aucune manipulation nécessaire dans chaque app."
"en": "Complete management of your indexers for Radarr, Sonarr, Lidarr, ...",
"fr": "Gestion complète de vos indexeurs pour Radarr, Sonarr, Lidarr, ..."
},
"version": "0.1.1.875~ynh1",
"url": "https://prowlarr.com",
@ -40,8 +40,7 @@
},
{
"name": "admin",
"type": "user",
"example": "johndoe"
"type": "user"
}
]
}

View file

@ -88,8 +88,12 @@ then
# Set global variables for NGINX helper
domain="$old_domain"
path_url="$new_path"
path="$new_path"
# Create a dedicated NGINX config
ynh_add_nginx_config
else
path_url="$old_path"
path="$old_path"
fi
# Change the domain for NGINX
@ -121,7 +125,7 @@ chown $app "$final_path/.data/config.xml"
#=================================================
ynh_script_progression --message="Starting a systemd service..." --time --weight=1
ynh_systemd_action --service_name=$app --action="start" --log_path="systemd" --line_match="Starting Web Server"
ynh_systemd_action --service_name=$app --action="start" --log_path="systemd" --line_match="Application started"
#=================================================
# RELOAD NGINX

View file

@ -37,8 +37,6 @@ final_path=$(ynh_app_setting_get --app=$app --key=final_path)
#=================================================
ynh_script_progression --message="Validating restoration parameters..." --weight=1
ynh_webpath_available --domain=$domain --path_url=$path_url \
|| ynh_die --message="Path not available: ${domain}${path_url}"
test ! -d $final_path \
|| ynh_die --message="There is already a directory: $final_path "