mf-hosting 2.0.8 → 2.1.0

package/.releaserc.json

@@ -0,0 +1,48 @@
+{
+    "plugins": [
+        "@semantic-release/commit-analyzer",
+        "@semantic-release/release-notes-generator",
+        "@semantic-release/npm",
+        [
+          "@semantic-release/exec",
+          {
+            "publishCmd": "npx npm-pkgbuild --publish dist"
+          }
+        ],
+        [
+          "@semantic-release/github",
+          {
+            "assets": [
+              {
+                "path": "dist/*.deb",
+                "label": "any Debian Package"
+              },
+              {
+                "path": "dist/*any.pkg.*",
+                "label": "any Arch Linux Package"
+              },
+              {
+                "path": "dist/*x86_64.pkg.*",
+                "label": "x86_64 Arch Linux Package"
+              },
+              {
+                "path": "dist/*aarch64.pkg.*",
+                "label": "arm64 Arch Linux Package"
+              },
+              {
+                "path": "dist/*noarch.rpm",
+                "label": "noarch RPM"
+              },
+              {
+                "path": "dist/*x86_64.rpm",
+                "label": "x86_64 RPM"
+              },
+              {
+                "path": "dist/*aarch64.rpm",
+                "label": "arm64 RPM"
+              }
+            ]
+          }
+        ]
+      ]
+  }

package/package.json

@@ -1,12 +1,21 @@
 {
   "name": "mf-hosting",
-  "version": "2.0.8",
+  "version": "2.1.0",
   "description": "hosting definitions @MF",
   "keywords": [
-    "npm-pkgbuild"
+    "npm-pkgbuild",
+    "semantic-release-config"
   ],
+  "files": [
+    ".releaserc.json"
+  ],
+  "main": ".releaserc.json",
   "devDependencies": {
-    "semantic-release": "^23.1.1"
+    "semantic-release": "^23.1.1",
+    "@semantic-release/commit-analyzer": "^12.0.0",
+    "@semantic-release/exec": "^6.0.3",
+    "@semantic-release/github": "^10.0.4",
+    "@semantic-release/release-notes-generator": "^13.0.0"
   },
   "repository": {
     "type": "git",

package/pkg/hooks.sh

@@ -1,23 +0,0 @@
-
-post_install() {
-	systemctl daemon-reload
-	systemctl enable {{name}}
-	systemctl enable {{name}}.socket
-	systemctl start {{name}}.socket
-}
-
-pre_upgrade() {
-	systemctl stop {{name}}
-}
-
-post_upgrade() {
-	systemctl daemon-reload
-	systemctl restart {{name}}.socket
-}
-
-pre_remove() {
-	systemctl stop {{name}}.socket
-	systemctl disable {{name}}.socket
-	systemctl stop {{name}}
-	systemctl disable {{name}}
-}

package/pkg/nginx.conf

@@ -1,15 +0,0 @@
-location {{http.path}} {
-  rewrite {{http.path}}(.*) $1 break;
-  proxy_set_header X-Real-IP $remote_addr;
-  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-  proxy_set_header Host $http_host;
-  proxy_set_header X-NginX-Proxy true;
-  proxy_set_header Upgrade $http_upgrade;
-  proxy_set_header Connection "upgrade";
-  proxy_pass http://unix:{{socket.http}};
-
-  add_header X-Content-Type-Options nosniff;
-  add_header Content-Security-Policy "{{csp.header}}" always;
-  add_header Cache-Control "private,no-store";
-  add_header alt-svc 'h3=":443";ma=7776000;persist=1';
-{{nginx.location.trailer}}}

package/pkg/service.backup

@@ -1,17 +0,0 @@
-backup()
-{
-    mkdir -p $1/{{name}}
-    cp -ra /etc/{{name}}/* $1/{{name}}
-}
-
-restore()
-{
-    mkdir -p /etc/{{name}}
-    cp -ra $1/{{name}}/* /etc/{{name}}
-}
-
-sync()
-{
-    mkdir -p /etc/{{name}}
-    rsync -e "ssh -i /root/.ssh/rsync" -ra -X -A -S --stats root@$SOURCE_HOST:/etc/{{name}} /etc/|grep -E -v '(data|time):'
-}

package/pkg/systemd.service

@@ -1,55 +0,0 @@
-[Unit]
-Description={{description}}
-Wants=network-online.target
-After=network-online.target
-StopWhenUnneeded=true
-
-[Service]
-Type=notify
-ExecStart={{node.exe}} --unhandled-rejections=strict --trace-uncaught --trace-warnings --title {{name}} {{install.dir}}src/{{name}}-cli.mjs
-ExecReload=/bin/kill -HUP $MAINPID
-ExecStop=sleep 20
-RestartSec=40
-TimeoutStartSec=25
-TimeoutStopSec=30
-Restart=on-failure
-NotifyAccess=all
-FileDescriptorStoreMax=5
-OOMPolicy=stop
-User={{os.user}}
-Group={{os.user}}
-DynamicUser=false
-SupplementaryGroups=http
-CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_ADMIN CAP_NET_ADMIN CAP_SYS_NICE CAP_SYS_RESOURCE CAP_KILLC AP_IPC_LOCK CAP_CHOWN CAP_FSETID CAP_SETFCAP CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_WAKE_ALARM CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_KILL
-NoNewPrivileges=true
-UMask=0077
-ProtectSystem=full
-ProtectHome=true
-RuntimeDirectory={{name}}
-StateDirectory={{name}}
-CacheDirectory={{name}}
-ConfigurationDirectory={{name}}
-RuntimeDirectoryMode=755
-RuntimeDirectoryPreserve=yes
-PrivateTmp=true
-PrivateDevices=true
-PrivateUsers=true
-ProtectHostname=true
-ProtectClock=true
-ProtectKernelTunables=true
-ProtectKernelModules=true
-ProtectKernelLogs=true
-ProtectControlGroups=true
-LockPersonality=true
-RestrictRealtime=true
-RestrictSUIDSGID=true
-CPUWeight=10
-IOWeight=10
-MemoryAccounting=true
-MemoryHigh=30M
-MemoryMax=60M
-ProtectProc=noaccess
-SystemCallErrorNumber=EPERM
-
-[Install]
-WantedBy=multi-user.target

package/pkg/systemd.socket

@@ -1,9 +0,0 @@
-[Socket]
-ListenStream={{socket.http}}
-SocketUser={{socket.http.user}}
-SocketGroup={{socket.http.group}}
-MaxConnections=4
-FileDescriptorName=http.listen.socket
-
-[Install]
-RequiredBy={{name}}.service

package/pkg/sysusers.conf

@@ -1 +0,0 @@
-u {{os.user}} - "{{description}}" {{var.dir}} /usr/bin/nologin

package/pkg/tmpfiles.conf

@@ -1,3 +0,0 @@
-D {{run.dir}} 0755 {{os.user}} {{os.group}} -
-d {{var.dir}} 0755 {{os.user}} {{os.group}} -
-D {{run.dir}}http 2775 {{os.user}} {{socket.http.user}} -