base setup: www base folder must have www group set
This commit is contained in:
@@ -48,8 +48,9 @@ CLONE_BASE="clone-base/"
|
|||||||
LOG_FOLDER="log/"
|
LOG_FOLDER="log/"
|
||||||
SCRIPT_FOLDER="scripts/"
|
SCRIPT_FOLDER="scripts/"
|
||||||
CONFIG_FOLDER="config/"
|
CONFIG_FOLDER="config/"
|
||||||
WWW_WEBHOOK_INCOMING="/www/webhook-incoming";
|
WWW_BASE="www/"
|
||||||
WWW_ADMIN="/www/admin";
|
WWW_WEBHOOK_INCOMING="${WWW_BASE}webhook-incoming";
|
||||||
|
WWW_ADMIN="${WWW_BASE}admin";
|
||||||
|
|
||||||
# jump host PEM file
|
# jump host PEM file
|
||||||
PEM_BASE="${BASE_FOLDER}../pem/";
|
PEM_BASE="${BASE_FOLDER}../pem/";
|
||||||
@@ -126,8 +127,12 @@ EOF
|
|||||||
# setfacl -m u:"${SUDO_USER}":rwx -R "${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}"
|
# setfacl -m u:"${SUDO_USER}":rwx -R "${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}"
|
||||||
# setfacl -d -m u:"${SUDO_USER}":rwx -R "${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}"
|
# setfacl -d -m u:"${SUDO_USER}":rwx -R "${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}"
|
||||||
# web user must have access to the clone folder, RWX
|
# web user must have access to the clone folder, RWX
|
||||||
setfacl -m g:"${WWW_GROUP}":rwx -R "${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}"
|
setfacl -m g:"${WWW_GROUP}":rwx -R \
|
||||||
setfacl -d -m g:"${WWW_GROUP}":rwx -R "${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}"
|
"${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}" \
|
||||||
|
"${GIT_WEBHOOK_BASE_FOLDER}${WWW_BASE}";
|
||||||
|
setfacl -d -m g:"${WWW_GROUP}":rwx -R \
|
||||||
|
"${GIT_WEBHOOK_BASE_FOLDER}${CLONE_BASE}" \
|
||||||
|
"${GIT_WEBHOOK_BASE_FOLDER}${WWW_BASE}";
|
||||||
# Copy files
|
# Copy files
|
||||||
echo "+ Copy basic script and config files";
|
echo "+ Copy basic script and config files";
|
||||||
# git_pull.sh, init.sh, new_clone.sh, webhook.default.cfg
|
# git_pull.sh, init.sh, new_clone.sh, webhook.default.cfg
|
||||||
|
|||||||
Reference in New Issue
Block a user