From 467f49bc9336856114d177f9f023f8ecc7914658 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 18 Feb 2022 22:15:40 +0100 Subject: Update mastodon-sidekiq.service --- conf/mastodon-sidekiq.service | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/conf/mastodon-sidekiq.service b/conf/mastodon-sidekiq.service index 83c11e6..24554c1 100644 --- a/conf/mastodon-sidekiq.service +++ b/conf/mastodon-sidekiq.service @@ -19,15 +19,15 @@ StandardError=syslog # Depending on specificities of your service/app, you may need to tweak these # .. but this should be a good baseline # Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html -#NoNewPrivileges=yes -#PrivateTmp=yes +NoNewPrivileges=no +PrivateTmp=yes #PrivateDevices=yes #RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK #RestrictNamespaces=yes #RestrictRealtime=yes -#DevicePolicy=closed -#ProtectSystem=full -#ProtectControlGroups=yes +DevicePolicy=closed +ProtectSystem=full +ProtectControlGroups=yes #ProtectKernelModules=yes #ProtectKernelTunables=yes #LockPersonality=yes @@ -35,15 +35,15 @@ StandardError=syslog # Denying access to capabilities that should not be relevant for webapps # Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html -#CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD -#CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE -#CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT -#CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK -#CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM -#CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG -#CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE -#CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW -#CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG +CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD +CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE +CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT +CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK +CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM +CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG +CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE +CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW +CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG [Install] WantedBy=multi-user.target -- cgit v1.2.3-70-g09d2 From a2ccdfde9d4be4b753ba5ccacab7efd8919fd774 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 18 Feb 2022 22:16:24 +0100 Subject: Upgrade to 3.4.6~ynh3 --- check_process | 4 ++-- manifest.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/check_process b/check_process index 61a81b8..3945bdc 100644 --- a/check_process +++ b/check_process @@ -13,9 +13,9 @@ setup_public=1 upgrade=1 # 3.4.1~ynh1 - upgrade=1 from_commit=efbdbb05350b820c6e59a7bbbf70f57cf679fff8 + #upgrade=1 from_commit=efbdbb05350b820c6e59a7bbbf70f57cf679fff8 # 3.4.1~ynh4 - upgrade=1 from_commit=adec07db890dec787416e1b7c4493d24391d3500 + #upgrade=1 from_commit=adec07db890dec787416e1b7c4493d24391d3500 # 3.4.4~ynh1 upgrade=1 from_commit=4d413848bf444586e28f3658de0ebe36d6ebf059 backup_restore=1 diff --git a/manifest.json b/manifest.json index 03f1997..cce2547 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Libre and federated social network", "fr": "Réseau social libre et fédéré" }, - "version": "3.4.6~ynh2", + "version": "3.4.6~ynh3", "url": "https://github.com/mastodon/mastodon", "upstream": { "license": "AGPL-3.0-or-later", -- cgit v1.2.3-70-g09d2 From ab638806758756ead67c96cf6deca470b16e7c56 Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Fri, 18 Feb 2022 21:16:29 +0000 Subject: Auto-update README --- README.md | 2 +- README_fr.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 5503cbb..2645a0c 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in Mastodon is a free, open-source microblogging social network. It is a decentralized alternative to commercial platforms like Twitter and avoids the risks of a single company monopolizing your communication for commercial purposes. -**Shipped version:** 3.4.6~ynh2 +**Shipped version:** 3.4.6~ynh3 **Demo:** https://joinmastodon.org/ diff --git a/README_fr.md b/README_fr.md index bf67819..75f369b 100644 --- a/README_fr.md +++ b/README_fr.md @@ -14,7 +14,7 @@ Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour Mastodon est un réseau social de microblog auto-hébergé et open source. C'est une alternative décentralisée aux plates-formes commerciales comme Twitter. Mastodon évite ainsi les risques qu'une seule société monopolise votre communication à des fins commerciales. -**Version incluse :** 3.4.6~ynh2 +**Version incluse :** 3.4.6~ynh3 **Démo :** https://joinmastodon.org/ -- cgit v1.2.3-70-g09d2