Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- dienste:bytecluster0002:pad [07.03.2025 21:50] – Update etherpad mape2k
+++ dienste:bytecluster0002:pad [04.11.2026 14:20] (aktuell) – Fix borgmatic mape2k
@@ Zeile 28: / Zeile 28: @@
     * **sudo useradd -m -c "Etherpad" etherpad -s /bin/bash**
   - NodeJS und npm installieren
-    * **curl -sL https://deb.nodesource.com/setup_18.x | sudo -E bash -**
+    * **curl -sL https://deb.nodesource.com/setup_24.x | sudo -E bash -**
     * **sudo apt-get install nodejs npm**
   - pnpm installieren
@@ Zeile 35: / Zeile 35: @@
     * **sudo mkdir /opt/etherpad-lite**
     * **sudo chown etherpad:etherpad /opt/etherpad-lite**
-    * **sudo -u etherpad git clone --branch master https://github.com/ether/etherpad-lite.git /opt/etherpad-lite**
+    * **sudo -u etherpad git clone --branch master https://github.com/ether/etherpad.git /opt/etherpad-lite**
   - Etherpad-Standard-Konfiguration kopieren
     * **sudo -u etherpad cp /opt/etherpad-lite/settings.json.template /opt/etherpad-lite/settings.json**
@@ Zeile 76: / Zeile 76: @@
     * **pnpm run plugins i ep_pad-lister**
     * **exit**
-  - systemd Unit einrichten<file|/etc/systemd/system/etherpad-lite.service>
+  - systemd Unit einrichten<file|/etc/systemd/system/etherpad.service>
 [Unit]
-Description=Etherpad-lite, the collaborative editor.
+Description=Etherpad - real-time collaborative editor
-After=syslog.target network.target
+Documentation=https://etherpad.org https://github.com/ether/etherpad
+After=network-online.target
+Wants=network-online.target
 [Service]
@@ Zeile 88: / Zeile 91: @@
 Environment=NODE_ENV=production
 ExecStart=pnpm run prod
-# use mysql plus a complete settings.json to avoid Service hold-off time over, scheduling restart.
+Restart=on-failure
-Restart=always
+RestartSec=5s
+TimeoutStopSec=20s
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=etherpad
+# --- Sandboxing ---------------------------------------------------------
+NoNewPrivileges=true
+ProtectSystem=strict
+PrivateTmp=true
+PrivateDevices=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+ProtectHostname=true
+ProtectClock=true
+RestrictRealtime=true
+RestrictSUIDSGID=true
+RestrictNamespaces=true
+LockPersonality=true
+# Node's JIT needs W+X mappings
+MemoryDenyWriteExecute=false
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+UMask=0027
+ReadWritePaths=/opt/etherpad-lite
+LimitNOFILE=65536
 [Install]
@@ Zeile 96: / Zeile 128: @@
   - systemd unit einlesen, aktivieren und starten
     * **sudo systemctl daemon-reload**
-    * **<nowiki>sudo systemctl enable --now etherpad-lite.service</nowiki>**
+    * **<nowiki>sudo systemctl enable --now etherpad.service</nowiki>**
 ==== Backup mit Borgmatic ====
@@ Zeile 103: / Zeile 135: @@
   - Konfiguration <file|/etc/borgmatic/config.yaml>
 ...
-location:
+source_directories:
-    # List of source directories to backup (required). Globs and
+  - /etc
-    # tildes are expanded.
+  - /home
-    source_directories:
+  - /opt
-        - /etc
+  - /root
-        - /home
+  - /var/log
-        - /opt
-        - /root
-        - /var/log
 ...
 </file>