You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
21 lines
1.0 KiB
21 lines
1.0 KiB
##
|
|
## Makefile for NetBird control plane quadlet
|
|
##
|
|
|
|
DEPENDENCIES = postgresql traefik
|
|
|
|
# NetBird runs as UID 10035 (netbird) / GID 10000 (itix-svc) on the host.
|
|
PROJECT_UID = 10035
|
|
PROJECT_GID = 10000
|
|
|
|
# Include common Makefile
|
|
include ../../scripts/common.mk
|
|
|
|
# The example management.json and turnserver.conf carry secrets (data-store encryption
|
|
# key, TURN password, relay secret) and are mounted read-only into the containers, which
|
|
# run as UID 10035. Install them 0640 owned by 10035:10000 instead of the default 0644,
|
|
# so they are readable by the container user but not world-readable. The *.env files are
|
|
# handled by common.mk (root:root 0600, read by systemd as EnvironmentFile).
|
|
TARGET_NETBIRD_SECRET_EXAMPLES = $(patsubst config/examples/%, $(TARGET_CHROOT)/etc/quadlets/netbird/%, $(wildcard config/examples/management.json config/examples/turnserver.conf))
|
|
$(TARGET_NETBIRD_SECRET_EXAMPLES): $(TARGET_CHROOT)/etc/quadlets/netbird/%: config/examples/% $(TARGET_CHROOT)/etc/quadlets/netbird
|
|
install -m 0640 -o $(PROJECT_UID) -g $(PROJECT_GID) $< $@
|
|
|