benvin
a3b51018a9
- Makefile: add make patch|minor|major (tag + push), dist-build, completions, and rpm/rpm-package targets. - packaging/nfpm.yaml + scripts/build-rpm.sh: package the tomswall binary with bash/zsh completions, the example config, and a systemd agent unit into an RPM. - packaging/tomswall-agent.service + agent.env: run `tomswall agent` as a systemd service (CAP_NET_ADMIN/CAP_NET_RAW), configured via /etc/tomswall/agent.env. - .woodpecker/release.yaml: on v* tag, test -> build -> package RPM -> PUT to the artifactapi rpm-internal repo. Matches node-lookup conventions.
13 lines
538 B
Bash
13 lines
538 B
Bash
# Environment for the tomswall control-plane agent (tomswall-agent.service).
|
|
# The agent reads these; flags may also be passed via ExecStart.
|
|
|
|
# Base URL of the tomswallapi control plane.
|
|
TOMSWALL_API_URL=https://tomswallapi.k8s.syd1.au.unkin.net
|
|
|
|
# Agent bearer token (issued by the control plane / Vault). Keep this file 0640.
|
|
TOMSWALL_AGENT_TOKEN=
|
|
|
|
# The device name defaults to the system hostname. To override it, add
|
|
# `--device <name>` to ExecStart in the unit (drop-in), e.g.:
|
|
# ExecStart=/usr/sbin/tomswall agent --device fw-a
|