diff options
| author | Jesse Luehrs <doy@tozt.net> | 2019-10-23 04:49:50 -0400 |
|---|---|---|
| committer | Jesse Luehrs <doy@tozt.net> | 2019-10-23 04:49:50 -0400 |
| commit | 52589932693c8ae7cea35e08e5e17d0ceaa8a931 (patch) | |
| tree | 27117b7ff8bbb6f9fa78ef6d0d5c4a0114117e61 /modules/tozt | |
| parent | 40eb37353ad6ef0b61dddcf92da1cba12a1f8b94 (diff) | |
| download | puppet-tozt-52589932693c8ae7cea35e08e5e17d0ceaa8a931.tar.gz puppet-tozt-52589932693c8ae7cea35e08e5e17d0ceaa8a931.zip | |
run as the teleterm user
also unset HOME so that we fall back to /var/lib/teleterm
Diffstat (limited to 'modules/tozt')
| -rw-r--r-- | modules/tozt/manifests/teleterm.pp | 10 | ||||
| -rw-r--r-- | modules/tozt/templates/teleterm.toml | 4 |
2 files changed, 12 insertions, 2 deletions
diff --git a/modules/tozt/manifests/teleterm.pp b/modules/tozt/manifests/teleterm.pp index 71cf3e6..17e15b8 100644 --- a/modules/tozt/manifests/teleterm.pp +++ b/modules/tozt/manifests/teleterm.pp @@ -17,5 +17,15 @@ class tozt::teleterm { content => template("tozt/teleterm.toml"), require => File["/etc/teleterm"], notify => Service["teleterm"]; + "/var/lib/teleterm": + ensure => directory, + owner => "teleterm", + group => "teleterm", + mode => "0700", + require => [ + User["teleterm"], + Group["teleterm"], + ], + before => Service["teleterm"]; } } diff --git a/modules/tozt/templates/teleterm.toml b/modules/tozt/templates/teleterm.toml index 4524814..f651e52 100644 --- a/modules/tozt/templates/teleterm.toml +++ b/modules/tozt/templates/teleterm.toml @@ -2,8 +2,8 @@ listen_address = "0.0.0.0:4144" allowed_login_methods = ["recurse_center"] tls_identity_file = "/media/persistent/certbot/live/tozt.net/identity.pfx" -uid = "nobody" -gid = "nobody" +uid = "teleterm" +gid = "teleterm" [oauth.recurse_center] client_id = "<%= @client_id %>" |