T-Gander/ProxmoxVEDHelperScripts
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

fix(slink): use lexik:jwt:generate-keypair instead of manual openssl, fix key permissions

Browse Source 
- Manual openssl keys were root:600, unreadable by PHP-FPM (www-data)
- lexik:jwt:generate-keypair sets correct ownership/permissions automatically
- chmod 644 private.pem as safety net
- Remove redundant duplicate call with --skip-if-exists
This commit is contained in:
CanbiZ (MickLesk)
2026-04-17 09:43:40 +02:00
parent 239dbd1d7d
commit 80c5d29466
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
install/slink-install.sh
View File

@@ -54,12 +54,11 @@ sed -i "s|sqlite:////app/var/data|sqlite:////opt/slink/services/api/var/data|g"
export APP_ENV=prod
mkdir -p /opt/slink/services/api/var/data
mkdir -p /opt/slink/services/api/config/jwt
openssl genpkey -algorithm RSA -out /opt/slink/services/api/config/jwt/private.pem -aes256 -pass "pass:${JWT_PASS}" 2>/dev/null
openssl pkey -in /opt/slink/services/api/config/jwt/private.pem -out /opt/slink/services/api/config/jwt/public.pem -pubout -passin "pass:${JWT_PASS}" 2>/dev/null
$STD composer install --no-dev --optimize-autoloader --no-interaction
mkdir -p /opt/slink/{data,images}
sed -i "s|'/services/api/|'/opt/slink/services/api/|" config/migrations/event_store.yaml
php bin/console lexik:jwt:generate-keypair --skip-if-exists >/dev/null 2>&1 || true
$STD php bin/console lexik:jwt:generate-keypair --overwrite --no-interaction
chmod 644 /opt/slink/services/api/config/jwt/private.pem
touch /opt/slink/services/api/var/data/slink_store.db
touch /opt/slink/services/api/var/data/slink.db
$STD php bin/console doctrine:migrations:migrate --no-interaction --em=read_model