]> cat aescling's git repositories - httpd-execline.git/commit
Add example advanced deployments
authorcat æscling <11325618-aescling@users.noreply.gitlab.com>
Wed, 2 Aug 2023 10:03:41 +0000 (06:03 -0400)
committercat æscling <11325618-aescling@users.noreply.gitlab.com>
Thu, 3 Aug 2023 01:11:19 +0000 (21:11 -0400)
commita23ae79561dcc17f96678619ccb2844259b3f3bf
treef28f16f5ab581d49e33370e06c70cf1b34abcef3
parent37091406369fd9dd1f8d0e66b583739115bc29b7
Add example advanced deployments

I say "advanced", but the http-to-https redirect is so essential, an
example deployment needed to be provided

The dynamic service creation is certainly an eyebrow raiser.
s6-instance-maker was considered but it not seem to support enough of
the functionality the current run script has

The fact that both redirect deployments use the same run script is a
code smell

s6-ipcserver was not explicitly created for this purpose. it is actually
distributed with s6 instead of s6-networking. the privelege escalation
functionality of s6-ipcserver, while entirely reasonable for its
intended purpose, might raise an eyebrow, but you need to run it (and
httpd.execline) as root anyway, so it's not the obvious potential
exploit of this system

* Add hidden service--only deployment
* Implement suggestions from self-review
* /srv/httpd-execline -> /srv/httpd.execline
* Fix many mistakes
50 files changed:
examples/README.md [new file with mode: 0644]
examples/hidden-service-only/README.md [new file with mode: 0644]
examples/hidden-service-only/httpd.execline/data/env/httpd_execline_root [new file with mode: 0644]
examples/hidden-service-only/httpd.execline/data/env/httpd_execline_unix_domain_superserver_location [new file with mode: 0644]
examples/hidden-service-only/httpd.execline/log/data/env/httpd_execline_log_directory [new file with mode: 0644]
examples/hidden-service-only/httpd.execline/log/data/env/httpd_execline_log_user [new file with mode: 0644]
examples/hidden-service-only/httpd.execline/log/run [new file with mode: 0644]
examples/hidden-service-only/httpd.execline/run [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/README.md [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/CERTFILE [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/KEYFILE [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/TLS_GID [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/TLS_UID [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_ip4 [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_ip6 [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_port_https [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_port_redirect [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_root [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_unix_domain_superserver_location [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_unix_domain_superserver_user [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_user_https [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/data/env/httpd_execline_user_redirect [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/log/data/env/httpd_execline_log_directory [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/log/data/env/httpd_execline_log_user [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/log/run [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/run [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/service/httpd-ipc/run [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/templates/run-https.execline [new file with mode: 0644]
examples/https-with-redirect-and-with-hidden-service/httpd.execline/templates/run-redirect.execline [new file with mode: 0644]
examples/https-with-redirect/README.md [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/CERTFILE [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/KEYFILE [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/TLS_GID [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/TLS_UID [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_ip4 [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_ip6 [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_port_https [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_port_redirect [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_root [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_user_https [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/data/env/httpd_execline_user_redirect [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/log/data/env/httpd_execline_log_directory [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/log/data/env/httpd_execline_log_user [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/log/run [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/run [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/templates/run-https.execline [new file with mode: 0644]
examples/https-with-redirect/httpd.execline/templates/run-redirect.execline [new file with mode: 0644]
log/run.example [deleted file]
run.template [deleted file]
visible-to-httpd/binaries/httpd-redirect.execline [moved from visible-to-httpd/binaries/redirect.execline with 93% similarity]