Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

flatpak-cache: switch to /tmp for containing the certificate cache

Browse source 
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
This commit is contained in:
Leo Puvilland 2024-01-11 11:17:19 -08:00
parent 5d727a0e05
commit 841ff283aa
No known key found for this signature in database
GPG key ID: 20EA96682F9368EB
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/openshift-apps/flatpak-cache/templates/squid.conf
View file

@ -26,7 +26,7 @@ http_access deny all
http_port 3128 tcpkeepalive=60,30,3 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=20MB tls-cert=/etc/pki/squid/ca/ca.crt tls-key=/etc/pki/squid/key/ca.key tls-dh=prime256v1:/etc/pki/squid/dhparam/dh.pem
sslcrtd_program /usr/lib64/squid/security_file_certgen -s /var/spool/squid/ssl_db -M 20MB
sslcrtd_program /usr/lib64/squid/security_file_certgen -s /tmp/ssl_db -M 20MB
sslcrtd_children 5
ssl_bump server-first all
ssl_bump stare all

3
roles/openshift-apps/flatpak-cache/templates/start.sh
View file

@ -1,3 +1,4 @@
exec /usr/lib64/squid/security_file_certgen -c -s /var/spool/squid/ssl_db -M 4096 && \
exec /bin/mkdir -p /tmp/ssl_db && \
/usr/lib64/squid/security_file_certgen -c -s /tmp/ssl_db -M 4096 && \
/sbin/squid -z && \
/sbin/squid --foreground -f /etc/squid/squid.conf