landfall 0.6.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -3
- package/dist/cli.mjs +155 -155
- package/dist/index.html +14 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -40,7 +40,7 @@ cd my-site && lf deploy -s vps # live at https://my-site.203-0-113-7.sslip.
|
|
|
40
40
|
|
|
41
41
|
## Install
|
|
42
42
|
|
|
43
|
-
You need Node.js 22.4+ plus `ssh`, `ssh-copy-id` and `tar` on your machine. The server must run Ubuntu or Debian
|
|
43
|
+
You need Node.js 22.4+ plus `ssh`, `ssh-copy-id` and `tar` on your machine (`rsync` makes redeploys faster). The server must run Ubuntu or Debian
|
|
44
44
|
and accept a login as root or as a user with passwordless sudo. landfall installs Docker itself.
|
|
45
45
|
|
|
46
46
|
```sh
|
|
@@ -74,7 +74,7 @@ lf setup vps --host 203.0.113.7
|
|
|
74
74
|
```
|
|
75
75
|
|
|
76
76
|
1. Creates `~/.ssh/landfall_vps` and installs it with `ssh-copy-id`. You type the root password once.
|
|
77
|
-
2. Installs Docker, ufw (allowing ssh, 80 and 443, plus 443/udp for HTTP/3), fail2ban and unattended-upgrades.
|
|
77
|
+
2. Installs Docker, rsync, ufw (allowing ssh, 80 and 443, plus 443/udp for HTTP/3), fail2ban and unattended-upgrades.
|
|
78
78
|
3. Creates the user `deploy` in the docker group and disables ssh password login. Root keeps key-only access.
|
|
79
79
|
4. Writes `Host vps` to `~/.ssh/config`, creating the file if needed. `ssh vps` now logs in as `deploy`.
|
|
80
80
|
5. Starts Traefik, which gets Let's Encrypt certificates for every site.
|
|
@@ -164,6 +164,9 @@ The first deploy writes `.landfall.json`. Commit it:
|
|
|
164
164
|
|
|
165
165
|
Local `.env*` files are never used on the server: each site has its own `.env` there. Pass variables with
|
|
166
166
|
`-e`/`--env-file`, or later with `lf env`. `--env-file -` reads the lines from stdin, so secrets stay out of `ps`.
|
|
167
|
+
Changed something locally? Run `lf deploy` again (or **Redeploy** in `lf ui`). When both sides have `rsync`, a redeploy sends
|
|
168
|
+
only the files that changed and copies the rest from the live release on the server (files you removed stay
|
|
169
|
+
removed); otherwise it uploads the whole folder. Either way it becomes a new release, so `lf rollback` still goes back.
|
|
167
170
|
`--keep 10` keeps more releases. A deploy is refused when another Compose project on the server already uses the
|
|
168
171
|
site's project name, since `docker compose` would otherwise take over its containers.
|
|
169
172
|
|
|
@@ -711,7 +714,7 @@ On the server:
|
|
|
711
714
|
/etc/ssh/sshd_config.d/00-landfall.conf ssh hardening from `lf setup`
|
|
712
715
|
```
|
|
713
716
|
|
|
714
|
-
`lf setup` also installs Docker with the compose plugin, ufw, fail2ban and unattended-upgrades, and creates the
|
|
717
|
+
`lf setup` also installs Docker with the compose plugin, rsync, ufw, fail2ban and unattended-upgrades, and creates the
|
|
715
718
|
`deploy` user (group docker). Before changing a file, landfall keeps a backup next to it as
|
|
716
719
|
`.<file>.landfall-<run>` (the newest 10). `lf config` and the web UI's *Overview* list all of these places.
|
|
717
720
|
|