f75191dbd4
The file in which our Etherpad settings reside is templated with sensitive data like an API key and DB password. Remove the world readable bit from it, and also drop user/group write perms while we're at it. Also switch the service's effective GID to match its UID and make sure the config's ownership is set accordingly. Change-Id: I65b70237b4bc8f4e63aa0b717702c124e01ed777
31 lines
895 B
YAML
31 lines
895 B
YAML
# Etherpad jobs
|
|
- job:
|
|
name: system-config-build-image-etherpad
|
|
description: Build a etherpad image.
|
|
provides: etherpad-container-image
|
|
parent: system-config-build-image
|
|
vars: ðerpad_vars
|
|
docker_images:
|
|
- context: docker/etherpad
|
|
target: production
|
|
repository: opendevorg/etherpad
|
|
build_args:
|
|
- EP_GID=5001
|
|
files: ðerpad_files
|
|
- docker/etherpad/
|
|
|
|
- job:
|
|
name: system-config-upload-image-etherpad
|
|
description: Build and upload a etherpad image.
|
|
provides: etherpad-container-image
|
|
parent: system-config-upload-image
|
|
vars: *etherpad_vars
|
|
files: *etherpad_files
|
|
|
|
- job:
|
|
name: system-config-promote-image-etherpad
|
|
description: Promote a previously published etherpad image to latest.
|
|
parent: system-config-promote-image
|
|
vars: *etherpad_vars
|
|
files: *etherpad_files
|