selinux fix

This commit is contained in:
ION606
2025-08-25 18:07:05 -04:00
parent 6c0598a6a7
commit 27f1216434
3 changed files with 13 additions and 13 deletions
+11 -10
View File
@@ -8,41 +8,42 @@
@paste host {env.PASTE_DOMAIN} @paste host {env.PASTE_DOMAIN}
handle @paste { handle @paste {
# privatebin ui
reverse_proxy privatebin:8080 reverse_proxy privatebin:8080
} }
@files host {env.FILES_DOMAIN} @files host {env.FILES_DOMAIN}
handle @files { handle @files {
# lufi ui
reverse_proxy lufi:8081 reverse_proxy lufi:8081
} }
@short host {env.SHORT_DOMAIN} @short host {env.SHORT_DOMAIN}
handle @short { handle @short {
# shlink ui/api default
reverse_proxy shlink:8080 reverse_proxy shlink:8080
} }
# --- adapter endpoint so privatebin can call a simple ?link=... and get a plain-text short url --- # adapter endpoint on the short domain
# this lives on the same short domain; it just proxies to your tiny bun adapter service @shorten {
@shorten host {env.SHORT_DOMAIN} && path /shorten host {env.SHORT_DOMAIN}
path /shorten
}
handle @shorten { handle @shorten {
# allow browser calls from your privatebin origin
header { header {
Access-Control-Allow-Origin https://{env.PASTE_DOMAIN} Access-Control-Allow-Origin https://{env.PASTE_DOMAIN}
Access-Control-Allow-Methods GET, OPTIONS Access-Control-Allow-Methods GET, OPTIONS
Access-Control-Allow-Headers * Access-Control-Allow-Headers *
# do not cache shortened responses; they contain the full (keyed) url
Cache-Control no-store Cache-Control no-store
} }
# forward to the adapter (which turns GET ?link=... into a shlink POST and replies with text)
reverse_proxy shlink-adapter:3000 reverse_proxy shlink-adapter:3000
} }
# preflight for /shorten # preflight for /shorten
@shortenPre host {env.SHORT_DOMAIN} && method OPTIONS && path /shorten @shortenPre {
host {env.SHORT_DOMAIN}
method OPTIONS
path /shorten
}
respond @shortenPre 204 respond @shortenPre 204
respond "unauthorized domain" 404 respond "unauthorized domain" 404
} }
-1
View File
@@ -76,7 +76,6 @@ services:
environment: environment:
- DEFAULT_DOMAIN=${SHORT_DOMAIN} - DEFAULT_DOMAIN=${SHORT_DOMAIN}
- IS_HTTPS_ENABLED=true - IS_HTTPS_ENABLED=true
- GEOLITE_LICENSE_KEY=${SHLINK_GEOLITE_KEY}
- DB_DRIVER=postgres - DB_DRIVER=postgres
- DB_HOST=shlink-db - DB_HOST=shlink-db
- DB_NAME=shlink - DB_NAME=shlink
+2 -2
View File
@@ -5,11 +5,11 @@ PASTE_DOMAIN=bin.ion606.com
FILES_DOMAIN=tfiles.ion606.com FILES_DOMAIN=tfiles.ion606.com
SHORT_DOMAIN=s.ion606.com SHORT_DOMAIN=s.ion606.com
INITIAL_API_KEY=$(openssl rand -hex 32)
LUFI_SECRET=$(openssl rand -hex 32) LUFI_SECRET=$(openssl rand -hex 32)
SHLINK_DB_PASSWORD=$(openssl rand -hex 24) SHLINK_DB_PASSWORD=$(openssl rand -hex 24)
SHLINK_GEOLITE_KEY=YOUR_MAXMIND_KEY
SHLINK_API_KEY=$(openssl rand -hex 32) SHLINK_API_KEY=$(openssl rand -hex 32)
EOF EOF
sudo chmod 644 Caddyfile sudo chmod 644 Caddyfile