LeafWiki

LeafWiki on Uberspace see https://u8lab.uberspace.de/guide_leafwiki/

Run manually

set -a && source .env && set +a && exec ./leafwiki

Setup

.env

LEAFWIKI_HOST=0.0.0.0
LEAFWIKI_PORT=8081
LEAFWIKI_DATA_DIR=./data
LEAFWIKI_ADMIN_PASSWORD="xxx"
LEAFWIKI_JWT_SECRET="xxx"
LEAFWIKI_ENABLE_REVISION=true
LEAFWIKI_LOG_LEVEL=warn
 
LEAFWIKI_BASE_PATH=leafwiki
LEAFWIKI_PUBLIC_ACCESS=true
LEAFWIKI_TOTP_ENCRYPTION_KEY="xxx"

services.d/leafwiki.ini

[program:leafwiki]
directory=%(ENV_HOME)s/be/leafwiki
command=/bin/bash -c "set -a && source .env && set +a && exec ./leafwiki"
loglevel=info
startsecs=30
umask=077

Sec hardening

leafwiki file access: chmod 700 on dirs ; chmod 600 on files

chmod -R go-rwx ~/be/leafwiki

header

uberspace web header set /leafwiki Referrer-Policy strict-origin-when-cross-origin
uberspace web header set /leafwiki X-Frame-Options DENY
uberspace web header list