diff --git a/src/urbackup/constants-service.conf b/src/urbackup/constants-service.conf index 9222b47..5a49863 100644 --- a/src/urbackup/constants-service.conf +++ b/src/urbackup/constants-service.conf @@ -8,7 +8,7 @@ # This file contains the project constants on service level # Debian Version, which will be installed -LXC_TEMPLATE_VERSION="debian-12-standard" +LXC_TEMPLATE_VERSION="debian-13-standard" # Create sharefs mountpoint LXC_MP=1 @@ -30,7 +30,7 @@ LXC_KEYCTL="0" URBACKUP_DATA="urbackup" # OS codename for opensuse / urbackup repo -REPO_CODENAME="Debian_12" +REPO_CODENAME="Debian_13" # Sets the minimum amount of RAM the service needs for operation LXC_MEM_MIN=1024 diff --git a/src/urbackup/install-service.sh b/src/urbackup/install-service.sh index 64e0f34..39fcc4f 100644 --- a/src/urbackup/install-service.sh +++ b/src/urbackup/install-service.sh @@ -18,10 +18,11 @@ echo "deb http://download.opensuse.org/repositories/home:/uroni/$REPO_CODENAME/ curl -fsSL https://download.opensuse.org/repositories/home:uroni/$REPO_CODENAME/Release.key | gpg --dearmor | tee /etc/apt/trusted.gpg.d/home_uroni.gpg > /dev/null apt update -DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt install -y --no-install-recommends -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" urbackup-server nginx +DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt install -y --no-install-recommends -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" ssl-cert urbackup-server nginx -mkdir -p /etc/nginx/ssl -openssl req -x509 -nodes -days 3650 -newkey rsa:4096 -keyout /etc/nginx/ssl/urbackup.key -out /etc/nginx/ssl/urbackup.crt -subj "/CN=$LXC_HOSTNAME.$LXC_DOMAIN" -addext "subjectAltName=DNS:$LXC_HOSTNAME.$LXC_DOMAIN" +install -d -m 0750 -o root -g root /etc/nginx/ssl +ln -s /etc/ssl/certs/ssl-cert-snakeoil.pem /etc/nginx/ssl/fullchain.pem +ln -s /etc/ssl/private/ssl-cert-snakeoil.key /etc/nginx/ssl/privkey.pem ln -s /usr/share/urbackup/www /var/www/urbackup @@ -45,8 +46,8 @@ server { index index.htm; ssl on; - ssl_certificate /etc/nginx/ssl/urbackup.crt; - ssl_certificate_key /etc/nginx/ssl/urbackup.key; + ssl_certificate /etc/nginx/ssl/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/privkey.pem; location /x { include /etc/nginx/fastcgi_params;