Browse Source

Reflect changes made

pull/2/head
darksider3 2 years ago
parent
commit
e00e587fac
  1. 47
      Dockerfile
  2. 6
      config/applicationsconfig.ini
  3. 1
      config/environment
  4. 1
      config/etc/ssh/sshd_config
  5. 0
      public/userapplication.py

47
Dockerfile

@ -0,0 +1,47 @@
FROM python:3-slim
MAINTAINER n1trux
RUN apt-get update &&\
apt-get -y upgrade &&\
DEBIAN_FRONTEND=noninteractive apt-get -y install \
nano rsync openssh-server acl
# Clean up APT when done.
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
# private/{scripts, administrate.py}, public/{scripts, userapplications.py}, config/userapplicatonsconfig.ini
#configs, logs, db
COPY config/applicationsconfig.ini /app/data/applicationsconfig.ini
# admin scripts
COPY private/ /app/admin/
# user accessible scripts
# Make TILDE_ENV
COPY config/environment /app/user/.ssh/environment
COPY public/ /app/user/
#SSH config into /etc :)
COPY config/etc /etc
# create user for applications
RUN useradd -Md /app/user/ -s /app/user/userapplication.py tilde
# make tilde's password empty
RUN passwd -d tilde
RUN usermod -U tilde
# add admin user
RUN useradd -Md /app/admin -s /app/admin/administrate.py admin
# privilege separation directory
RUN mkdir -p /var/run/sshd
# expose SSH port
EXPOSE 22
ENV TILDE_CONF="/app/data/applicationsconfig.ini"
RUN touch /app/data/applications.sqlite
RUN touch /app/data/applications.log
# Doesnt work, @TODO why
#RUN setfacl -R -m u:tilde:rwx /app/data/
RUN chown -R tilde /app/data
CMD ["/usr/sbin/sshd", "-D"]

6
config/applicationsconfig.ini

@ -1,9 +1,9 @@
[DEFAULT]
base_path=/application/
base_path=/app/data/
applications_db=%(base_path)sapplications.sqlite
log_dir=/application/
log_dir=/app/data/
log_file=%(log_dir)sapplications.log
user_creationscript=%(base_path)smake-tilde-user.sh
user_creationscript=%(base_path)s/scripts/make-tilde-user.sh
[USERS]
UserGroup=tilde

1
config/environment

@ -0,0 +1 @@
TILDE_CONF=/app/data/applicationsconfig.ini

1
config/etc/ssh/sshd_config

@ -2,6 +2,7 @@ UseDNS no
Protocol 2
SyslogFacility AUTHPRIV
PermitRootLogin no
PermitUserEnvironment yes
PubkeyAuthentication yes
ChallengeResponseAuthentication no
Subsystem sftp /usr/lib/openssh/sftp-server

0
public/useerapplication.py → public/userapplication.py

Loading…
Cancel
Save