LeafWiki: Difference between revisions
Created page with "== LeafWiki on Uberspace == === Sec hardening === uberspace web header set /leafwiki Referrer-Policy strict-origin-when-cross-origin uberspace web header set /leafwiki X-Frame-Options DENY uberspace web header list leafwiki file access: chmod 700 on dirs ; chmod 600 on files" |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
LeafWiki on Uberspace | |||
see https://u8lab.uberspace.de/guide_leafwiki/ | |||
=== Run manually === | |||
set -a && source .env && set +a && exec ./leafwiki | |||
=== Setup === | |||
.env | |||
LEAFWIKI_HOST=0.0.0.0 | |||
LEAFWIKI_PORT=8081 | |||
LEAFWIKI_DATA_DIR=./data | |||
LEAFWIKI_ADMIN_PASSWORD="xxx" | |||
LEAFWIKI_JWT_SECRET="xxx" | |||
LEAFWIKI_ENABLE_REVISION=true | |||
LEAFWIKI_LOG_LEVEL=warn | |||
LEAFWIKI_BASE_PATH=leafwiki | |||
LEAFWIKI_PUBLIC_ACCESS=true | |||
LEAFWIKI_TOTP_ENCRYPTION_KEY="xxx" | |||
services.d/leafwiki.ini | |||
[program:leafwiki] | |||
directory=%(ENV_HOME)s/be/leafwiki | |||
command=/bin/bash -c "set -a && source .env && set +a && exec ./leafwiki" | |||
loglevel=info | |||
startsecs=30 | |||
umask=077 | |||
=== Sec hardening === | === Sec hardening === | ||
leafwiki file access: chmod 700 on dirs ; chmod 600 on files | |||
chmod -R go-rwx ~/be/leafwiki | |||
header | |||
uberspace web header set /leafwiki Referrer-Policy strict-origin-when-cross-origin | uberspace web header set /leafwiki Referrer-Policy strict-origin-when-cross-origin | ||
uberspace web header set /leafwiki X-Frame-Options DENY | uberspace web header set /leafwiki X-Frame-Options DENY | ||
uberspace web header list | uberspace web header list | ||
Latest revision as of 05:17, 26 October 2026
LeafWiki on Uberspace see https://u8lab.uberspace.de/guide_leafwiki/
Run manually
set -a && source .env && set +a && exec ./leafwiki
Setup
.env
LEAFWIKI_HOST=0.0.0.0 LEAFWIKI_PORT=8081 LEAFWIKI_DATA_DIR=./data LEAFWIKI_ADMIN_PASSWORD="xxx" LEAFWIKI_JWT_SECRET="xxx" LEAFWIKI_ENABLE_REVISION=true LEAFWIKI_LOG_LEVEL=warn LEAFWIKI_BASE_PATH=leafwiki LEAFWIKI_PUBLIC_ACCESS=true LEAFWIKI_TOTP_ENCRYPTION_KEY="xxx"
services.d/leafwiki.ini
[program:leafwiki] directory=%(ENV_HOME)s/be/leafwiki command=/bin/bash -c "set -a && source .env && set +a && exec ./leafwiki" loglevel=info startsecs=30 umask=077
Sec hardening
leafwiki file access: chmod 700 on dirs ; chmod 600 on files
chmod -R go-rwx ~/be/leafwiki
header
uberspace web header set /leafwiki Referrer-Policy strict-origin-when-cross-origin uberspace web header set /leafwiki X-Frame-Options DENY uberspace web header list