diff options
Diffstat (limited to 'mkosi.extra/etc')
| -rw-r--r-- | mkosi.extra/etc/apache2/mods-available/mpm_prefork.conf | 16 | ||||
| -rw-r--r-- | mkosi.extra/etc/apache2/ports.conf | 4 | ||||
| -rw-r--r-- | mkosi.extra/etc/apache2/sites-available/kanboard.conf | 24 | ||||
| -rw-r--r-- | mkosi.extra/etc/apt/apt.conf.d/20auto-upgrades | 9 | ||||
| -rw-r--r-- | mkosi.extra/etc/apt/apt.conf.d/50unattended-upgrades | 34 |
5 files changed, 87 insertions, 0 deletions
diff --git a/mkosi.extra/etc/apache2/mods-available/mpm_prefork.conf b/mkosi.extra/etc/apache2/mods-available/mpm_prefork.conf new file mode 100644 index 0000000..73ceafc --- /dev/null +++ b/mkosi.extra/etc/apache2/mods-available/mpm_prefork.conf @@ -0,0 +1,16 @@ +# prefork MPM +# StartServers: number of server processes to start +# MinSpareServers: minimum number of server processes which are kept spare +# MaxSpareServers: maximum number of server processes which are kept spare +# MaxRequestWorkers: maximum number of server processes allowed to start +# MaxConnectionsPerChild: maximum number of requests a server process serves + +<IfModule mpm_prefork_module> + StartServers 1 + MinSpareServers 1 + MaxSpareServers 10 + MaxRequestWorkers 75 + MaxConnectionsPerChild 0 +</IfModule> + +# vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/mkosi.extra/etc/apache2/ports.conf b/mkosi.extra/etc/apache2/ports.conf new file mode 100644 index 0000000..b750446 --- /dev/null +++ b/mkosi.extra/etc/apache2/ports.conf @@ -0,0 +1,4 @@ +Listen 127.0.0.1:8302 +Listen [::1]:8302 + +# vim: syntax=apache ts=4 sw=4 sr noet diff --git a/mkosi.extra/etc/apache2/sites-available/kanboard.conf b/mkosi.extra/etc/apache2/sites-available/kanboard.conf new file mode 100644 index 0000000..4f4c268 --- /dev/null +++ b/mkosi.extra/etc/apache2/sites-available/kanboard.conf @@ -0,0 +1,24 @@ +<VirtualHost *:8302> + + ServerName kanboard + UseCanonicalName on + + DocumentRoot /var/www/kanboard + DirectoryIndex index.php index.html + + # To cirkumvent phps $_SERVER['HTTPS']-check + SetEnv HTTPS "on" + + AcceptPathInfo On + + # Trust the remote user forwarded by nginx + SetEnvIf X-Forwarded-User (.*) REMOTE_USER=$1 + + <Directory /var/www/kanboard/> + AllowOverride FileInfo Options=All,MultiViews AuthConfig + </Directory> + +</VirtualHost> + + + diff --git a/mkosi.extra/etc/apt/apt.conf.d/20auto-upgrades b/mkosi.extra/etc/apt/apt.conf.d/20auto-upgrades new file mode 100644 index 0000000..4c725ab --- /dev/null +++ b/mkosi.extra/etc/apt/apt.conf.d/20auto-upgrades @@ -0,0 +1,9 @@ +APT::Periodic::Unattended-Upgrade "1"; + +APT::Periodic::Update-Package-Lists "1"; + + +APT::Periodic::AutocleanInterval "7"; + + + diff --git a/mkosi.extra/etc/apt/apt.conf.d/50unattended-upgrades b/mkosi.extra/etc/apt/apt.conf.d/50unattended-upgrades new file mode 100644 index 0000000..768347b --- /dev/null +++ b/mkosi.extra/etc/apt/apt.conf.d/50unattended-upgrades @@ -0,0 +1,34 @@ +// Unattended-Upgrade::Origins-Pattern controls which packages are +// upgraded. +Unattended-Upgrade::Origins-Pattern { + "origin=Ubuntu,archive=${distro_codename}-security"; + "o=Ubuntu,a=${distro_codename}"; + "o=Ubuntu,a=${distro_codename}-updates"; + "o=Ubuntu,a=${distro_codename}-proposed-updates"; + "o=Ubuntu,n=${distro_codename}-backports"; + }; + +// List of packages to not update (regexp are supported) +Unattended-Upgrade::Package-Blacklist { +}; + + +// Split the upgrade into the smallest possible chunks so that +// they can be interrupted with SIGUSR1. This makes the upgrade +// a bit slower but it has the benefit that shutdown while a upgrade +// is running is possible (with a small delay) +Unattended-Upgrade::MinimalSteps "true"; + + +// Do automatic removal of new unused dependencies after the upgrade +// (equivalent to apt-get autoremove) +Unattended-Upgrade::Remove-Unused-Dependencies "true"; + + +// Do upgrade application even if it requires restart after upgrade +// I.e. "XB-Upgrade-Requires: app-restart" is set in the debian/control file +Unattended-Upgrade::IgnoreAppsRequireRestart "true"; + +// Automatically run "dpkg --force-confold --configure -a". +Unattended-Upgrade::AutoFixInterruptedDpkg "true"; + |