grenade/blekin
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

chore: deployment todos

Browse Source
This commit is contained in:
rob thijssen
2026-05-07 09:23:39 +03:00
parent c31508f138
commit e39555196d
3 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
asset/sudoers.d/ui_gitea_ci Normal file
View File

@@ -0,0 +1,5 @@
gitea_ci ALL=(root) NOPASSWD: /usr/bin/ln -sf /etc/nginx/sites-available/blekin.kosherinata.internal.conf /etc/nginx/sites-enabled/blekin.kosherinata.internal.conf
gitea_ci ALL=(root) NOPASSWD: /usr/bin/nginx -t
gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl reload nginx.service
gitea_ci ALL=(root) NOPASSWD: /usr/bin/rsync * /var/www/blekin.kosherinata.internal/
gitea_ci ALL=(root) NOPASSWD: /usr/bin/rsync * /etc/nginx/sites-available/blekin.kosherinata.internal.conf

5
asset/sudoers.d/ws_gitea_ci Normal file
View File

@@ -0,0 +1,5 @@
gitea_ci ALL=(root) NOPASSWD: /usr/bin/rsync * /usr/local/bin/ericrfb-proxy
gitea_ci ALL=(root) NOPASSWD: /usr/bin/rsync * /etc/systemd/system/blekin.service
gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl start blekin.service
gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl stop blekin.service
gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl enable blekin.service

8
script/setup.sh
View File

@@ -134,3 +134,11 @@ fi
# sudo semanage fcontext -a -t httpd_sys_content_t "/var/www/blekin.kosherinata.internal(/.*)?" # sudo semanage fcontext -a -t httpd_sys_content_t "/var/www/blekin.kosherinata.internal(/.*)?"
# sudo restorecon -Rv /var/www/blekin.kosherinata.internal/ # sudo restorecon -Rv /var/www/blekin.kosherinata.internal/
# sync asset/sudoers.d/ui_gitea_ci to /etc/sudoers.d/gitea_ci # sync asset/sudoers.d/ui_gitea_ci to /etc/sudoers.d/gitea_ci
# # Create the service definition
#sudo firewall-cmd --permanent --new-service=blekin
#sudo firewall-cmd --permanent --service=blekin --set-description="blekin e-RIC RFB proxy"
#sudo firewall-cmd --permanent --service=blekin --add-port=3000/tcp
# Enable it in the active zone
#sudo firewall-cmd --permanent --add-service=blekin
#sudo firewall-cmd --reload