Mudanças entre as edições de "Shiori"

De MochilaWiki
Ir para navegaçãoIr para pesquisar
(Criou página com '<source lang="bash"> wget https://github.com/go-shiori/shiori/releases/download/v1.5.0/shiori-linux-amd64 sudo mkdir /var/lib/shiori sudo mv shiori-linux-amd64 /usr/bin/shiori...')
 
Linha 3: Linha 3:
 
sudo mkdir /var/lib/shiori
 
sudo mkdir /var/lib/shiori
 
sudo mv shiori-linux-amd64 /usr/bin/shiori
 
sudo mv shiori-linux-amd64 /usr/bin/shiori
sudo systemctl enable --now shiori
 
 
sudo chmod +x /usr/bin/shiori
 
sudo chmod +x /usr/bin/shiori
 
</source>
 
</source>
  
/etc/systemd/system/shiori.service
+
em /etc/systemd/system/shiori.service
 
  [Unit]
 
  [Unit]
 
  Description=shiori service
 
  Description=shiori service
Linha 70: Linha 69:
  
 
<source lang="bash">
 
<source lang="bash">
 +
sudo systemctl enable --now shiori
 
sudo service shiori start
 
sudo service shiori start
 
</source>
 
</source>

Edição das 01h47min de 4 de agosto de 2021

wget https://github.com/go-shiori/shiori/releases/download/v1.5.0/shiori-linux-amd64
sudo mkdir /var/lib/shiori
sudo mv shiori-linux-amd64 /usr/bin/shiori
sudo chmod +x /usr/bin/shiori

em /etc/systemd/system/shiori.service

[Unit]
Description=shiori service
Requires=network-online.target
After=network-online.target

[Service]
Type=simple
ExecStart=/usr/bin/shiori serve
Restart=always
User=shiori
Group=shiori

Environment="SHIORI_DIR=/var/lib/shiori"
DynamicUser=true
PrivateUsers=true
ProtectHome=true
ProtectKernelLogs=true
RestrictAddressFamilies=AF_INET AF_INET6
StateDirectory=shiori
SystemCallErrorNumber=EPERM
SystemCallFilter=@system-service
SystemCallFilter=~@chown
SystemCallFilter=~@keyring
SystemCallFilter=~@memlock
SystemCallFilter=~@setuid
DeviceAllow=

CapabilityBoundingSet=
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectControlGroups=true
ProtectKernelTunables=true
ProtectSystem=full
ProtectClock=true
ProtectKernelModules=true
ProtectProc=noaccess
ProtectHostname=true
ProcSubset=pid
RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=~@clock
SystemCallFilter=~@debug
SystemCallFilter=~@module
SystemCallFilter=~@mount
SystemCallFilter=~@raw-io
SystemCallFilter=~@reboot
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
SystemCallFilter=~@cpu-emulation
SystemCallFilter=~@obsolete
UMask=0077

[Install]
WantedBy=multi-user.target


sudo systemctl enable --now shiori
sudo service shiori start