entitlement-provider 2.9.86 → 2.9.90

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "entitlement-provider",
-  "version": "2.9.86",
+  "version": "2.9.90",
   "publishConfig": {
     "access": "public"
   },
@@ -23,17 +23,18 @@
   "scripts": {
     "test": "npm run test:ava",
     "test:ava": "ava --timeout 2m tests/*.mjs",
-    "cover": "c8 -x 'tests/**/*' --temp-directory build/tmp ava --timeout 2m && c8 report -r lcov -o build/coverage --temp-directory build/tmp"
+    "cover": "c8 -x 'tests/**/*' --temp-directory build/tmp ava --timeout 2m && c8 report -r lcov -o build/coverage --temp-directory build/tmp",
+    "pkg": "npm-pkgbuild --verbose -D version=0.0.0 --publish dist"
   },
   "dependencies": {
-    "@kronos-integration/interceptor-decode-json": "^2.1.56",
-    "@kronos-integration/service": "^10.4.15",
-    "@kronos-integration/service-admin": "^3.4.45",
-    "@kronos-integration/service-authenticator": "^1.6.8",
-    "@kronos-integration/service-health": "^5.0.134",
-    "@kronos-integration/service-http": "^10.6.91",
-    "@kronos-integration/service-ldap": "^4.0.70",
-    "@kronos-integration/service-smtp": "^1.0.58",
+    "@kronos-integration/interceptor-decode-json": "^2.1.58",
+    "@kronos-integration/service": "^10.4.17",
+    "@kronos-integration/service-admin": "^3.4.46",
+    "@kronos-integration/service-authenticator": "^1.6.10",
+    "@kronos-integration/service-health": "^5.0.136",
+    "@kronos-integration/service-http": "^10.6.93",
+    "@kronos-integration/service-ldap": "^4.0.72",
+    "@kronos-integration/service-smtp": "^1.0.61",
     "model-attributes": "^4.1.13"
   },
   "devDependencies": {
@@ -43,7 +44,7 @@
     "ava": "^4.0.1",
     "c8": "^7.1.0",
     "got": "12.0.1",
-    "npm-pkgbuild": "^7.23.5",
+    "npm-pkgbuild": "^7.23.8",
     "semantic-release": "^19.0.2"
   },
   "optionalDependencies": {
@@ -75,7 +76,7 @@
   "pkg": {
     "backup": "etc/${name}/config.json",
     "content": {
-      "/usr/lib/systemd/system": {
+      "/usr/lib/systemd/system/": {
         "base": "systemd"
       },
       "/usr/lib/tmpfiles.d/${name}.conf": "pkg/tmpfiles.conf",
@@ -92,6 +93,9 @@
         }
       ]
     },
+    "output": {
+      "arch": {}
+    },
     "depends": {
       "systemd": ">=250.3",
       "nginx-mainline": ">=1.21.4"

package/pkg/hooks.sh

@@ -1,27 +0,0 @@
-
-post_install() {
-	systemctl daemon-reload
-	systemctl enable {{name}}
-	systemctl enable {{name}}.socket
-	systemctl start {{name}}.socket
-}
-
-pre_upgrade() {
-	systemctl stop {{name}}
-}
-
-post_upgrade() {
-	systemctl daemon-reload
-	systemctl restart {{name}}.socket
-}
-
-pre_remove() {
-	systemctl stop {{name}}.socket
-	systemctl disable {{name}}.socket
-	systemctl stop {{name}}
-	systemctl disable {{name}}
-}
-
-post_remove() {
-	systemctl daemon-reload
-}

package/pkg/nginx.conf

@@ -1,10 +0,0 @@
-location {{base}} {
-    rewrite {{base}}/(.*) /$1 break;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header Host $http_host;
-    proxy_set_header X-NginX-Proxy true;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection "upgrade";
-    proxy_pass http://unix:{{socket}};
-}

package/pkg/sysusers.conf

@@ -1,2 +0,0 @@
-u {{name}} - "{{description}}" /var/lib/{{name}} /usr/bin/nologin
-

package/pkg/tmpfiles.conf

@@ -1,3 +0,0 @@
-D /run/{{name}} 0755 {{name}} {{name}} -
-D /run/{{name}}/http 2775 {{name}} http -
-d /var/lib/{{name}} 0755 {{name}} {{name}} -

package/systemd/entitlement-provider.service

@@ -1,54 +0,0 @@
-[Unit]
-Description={{description}}
-Wants=network-online.target
-After=network-online.target
-StopWhenUnneeded=true
-
-[Service]
-Type=notify
-ExecStart=/usr/bin/node --unhandled-rejections=strict --trace-uncaught --trace-warnings --title {{name}} {{installdir}}/src/{{name}}-cli.mjs
-ExecReload=/bin/kill -HUP $MAINPID
-ExecStop=sleep 20
-RestartSec=40
-TimeoutStartSec=25
-TimeoutStopSec=30
-Restart=on-failure
-NotifyAccess=all
-FileDescriptorStoreMax=5
-OOMPolicy=stop
-User={{name}}
-Group={{name}}
-SupplementaryGroups=http
-CapabilityBoundingSet=~CAP_SYS_BOOT
-NoNewPrivileges=true
-UMask=0077
-ProtectSystem=full
-ProtectHome=true
-RuntimeDirectory={{name}}/http
-StateDirectory={{name}}
-CacheDirectory={{name}}
-ConfigurationDirectory={{name}}
-RuntimeDirectoryMode=755
-RuntimeDirectoryPreserve=yes
-PrivateTmp=true
-PrivateDevices=true
-PrivateUsers=true
-ProtectHostname=true
-ProtectClock=true
-ProtectKernelTunables=true
-ProtectKernelModules=true
-ProtectKernelLogs=true
-ProtectControlGroups=true
-LockPersonality=true
-RestrictRealtime=true
-RestrictSUIDSGID=true
-CPUWeight=10
-IOWeight=10
-MemoryAccounting=true
-MemoryHigh=30M
-MemoryMax=60M
-ProtectProc=noaccess
-SystemCallErrorNumber=EPERM
-
-[Install]
-WantedBy=multi-user.target

package/systemd/entitlement-provider.socket

@@ -1,9 +0,0 @@
-[Socket]
-ListenStream={{socket}}
-SocketUser=http
-SocketGroup=http
-MaxConnections=4
-FileDescriptorName=http.listen.socket
-
-[Install]
-RequiredBy={{name}}.service