Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
| dienste:bytecluster0002:pad [02.01.2021 14:44] – Plugin mape2k | dienste:bytecluster0002:pad [04.11.2026 14:20] (aktuell) – Fix borgmatic mape2k | ||
|---|---|---|---|
| Zeile 27: | Zeile 27: | ||
| - Benutzer anlegen | - Benutzer anlegen | ||
| * **sudo useradd -m -c " | * **sudo useradd -m -c " | ||
| - | - NodeJS installieren | + | - NodeJS |
| - | * **curl -sL https:// | + | * **curl -sL https:// |
| - | * **sudo apt-get install nodejs** | + | * **sudo apt-get install nodejs |
| + | - pnpm installieren | ||
| + | * **sudo npm install -g pnpm** | ||
| - Etherpad-Lite installieren | - Etherpad-Lite installieren | ||
| * **sudo mkdir / | * **sudo mkdir / | ||
| * **sudo chown etherpad: | * **sudo chown etherpad: | ||
| - | * **sudo -u etherpad git clone --branch master https:// | + | * **sudo -u etherpad git clone --branch master https:// |
| - Etherpad-Standard-Konfiguration kopieren | - Etherpad-Standard-Konfiguration kopieren | ||
| * **sudo -u etherpad cp / | * **sudo -u etherpad cp / | ||
| Zeile 64: | Zeile 66: | ||
| </ | </ | ||
| - Etherpad-Abhängigkeiten updaten | - Etherpad-Abhängigkeiten updaten | ||
| - | * **sudo -u etherpad / | + | * **sudo |
| + | * **cd / | ||
| + | * **pnpm i** | ||
| + | * **pnpm run build: | ||
| + | * **exit** | ||
| - Plugins installieren | - Plugins installieren | ||
| * **sudo su - etherpad** | * **sudo su - etherpad** | ||
| * **cd / | * **cd / | ||
| - | * **npm install | + | * **pnpm run plugins i ep_pad-lister** |
| * **exit** | * **exit** | ||
| - | - systemd Unit einrichten< | + | - systemd Unit einrichten< |
| [Unit] | [Unit] | ||
| - | Description=Etherpad-lite, the collaborative editor. | + | Description=Etherpad - real-time |
| - | After=syslog.target network.target | + | Documentation=https:// |
| + | After=network-online.target | ||
| + | Wants=network-online.target | ||
| [Service] | [Service] | ||
| Zeile 81: | Zeile 90: | ||
| WorkingDirectory=/ | WorkingDirectory=/ | ||
| Environment=NODE_ENV=production | Environment=NODE_ENV=production | ||
| - | ExecStart=/ | + | ExecStart=pnpm run prod |
| - | # use mysql plus a complete settings.json to avoid Service hold-off time over, scheduling restart. | + | Restart=on-failure |
| - | Restart=always | + | RestartSec=5s |
| + | TimeoutStopSec=20s | ||
| + | |||
| + | StandardOutput=journal | ||
| + | StandardError=journal | ||
| + | SyslogIdentifier=etherpad | ||
| + | |||
| + | # --- Sandboxing --------------------------------------------------------- | ||
| + | NoNewPrivileges=true | ||
| + | ProtectSystem=strict | ||
| + | PrivateTmp=true | ||
| + | PrivateDevices=true | ||
| + | ProtectKernelTunables=true | ||
| + | ProtectKernelModules=true | ||
| + | ProtectKernelLogs=true | ||
| + | ProtectControlGroups=true | ||
| + | ProtectHostname=true | ||
| + | ProtectClock=true | ||
| + | RestrictRealtime=true | ||
| + | RestrictSUIDSGID=true | ||
| + | RestrictNamespaces=true | ||
| + | LockPersonality=true | ||
| + | # Node's JIT needs W+X mappings | ||
| + | MemoryDenyWriteExecute=false | ||
| + | SystemCallArchitectures=native | ||
| + | RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK | ||
| + | UMask=0027 | ||
| + | ReadWritePaths=/ | ||
| + | |||
| + | LimitNOFILE=65536 | ||
| [Install] | [Install] | ||
| Zeile 90: | Zeile 128: | ||
| - systemd unit einlesen, aktivieren und starten | - systemd unit einlesen, aktivieren und starten | ||
| * **sudo systemctl daemon-reload** | * **sudo systemctl daemon-reload** | ||
| - | * **< | + | * **< |
| ==== Backup mit Borgmatic ==== | ==== Backup mit Borgmatic ==== | ||
| Zeile 97: | Zeile 135: | ||
| - Konfiguration < | - Konfiguration < | ||
| ... | ... | ||
| - | location: | + | source_directories: |
| - | # List of source directories to backup (required). Globs and | + | - /etc |
| - | # tildes are expanded. | + | - /home |
| - | | + | - /opt |
| - | - /etc | + | - /root |
| - | - /home | + | - /var/log |
| - | - /opt | + | |
| - | - /root | + | |
| - | - /var/log | + | |
| ... | ... | ||
| </ | </ | ||