secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 16:37:04 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix(billets): deploy hotfixes — disable markdown-it linkify (optional dep), drop failing ExecStartPre, remove debian/compat

Browse Source 
Found during live deploy to billets.gk2.secubox.in:
- markdown-it linkify=True needs linkify-it-py (not in requirements) -> 500 on any
  body with a URL; spec only needs markdown [links], so linkify is off (bare-URL
  autolink stays for comments via linkify_plain).
- systemd ExecStartPre tried to chown the shared /run/secubox as the secubox user
  -> service failed to start; removed (tmpfiles already provides 1777 /run/secubox).
- debian/compat conflicted with debhelper-compat in control; removed.

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
This commit is contained in:
CyberMind-FR 2026-07-11 16:04:24 +02:00
parent 68608a3857
commit 084120c858
4 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packages/secubox-billets/api/services/render.py
View File

@ -12,8 +12,10 @@ from __future__ import annotations
import nh3
from markdown_it import MarkdownIt
_MD = MarkdownIt("commonmark", {"html": False, "linkify": True, "typographer": False})
_MD.enable("linkify")
# linkify (bare-URL autolinking) is intentionally OFF: it needs the optional
# linkify-it-py package, and the spec only requires markdown links [text](url).
# Bare URLs in *comments* are autolinked separately in `linkify_plain`.
_MD = MarkdownIt("commonmark", {"html": False, "linkify": False, "typographer": False})
_ALLOWED_TAGS = {
"p", "br", "strong", "em", "b", "i", "a",

1
packages/secubox-billets/debian/compat
View File

@ -1 +0,0 @@
13

1
packages/secubox-billets/debian/secubox-billets.service
View File

@ -15,7 +15,6 @@ Environment=BILLETS_REVISIONS_DIR=/var/lib/secubox/billets/revisions
Environment=BILLETS_SECRET_FILE=/etc/secubox/secrets/billets
# Set BILLETS_SITE_URL to the public https origin so feeds/oEmbed emit absolute URLs.
# Environment=BILLETS_SITE_URL=https://billets.example.com
ExecStartPre=/usr/bin/install -d -o secubox -g secubox -m 1777 /run/secubox
ExecStart=/usr/lib/secubox/billets/venv/bin/uvicorn api.asgi:app \
--uds /run/secubox/billets.sock --no-access-log --workers 1
Restart=on-failure

1
packages/secubox-billets/deploy/billets.service
View File

@ -15,7 +15,6 @@ Environment=BILLETS_REVISIONS_DIR=/var/lib/secubox/billets/revisions
Environment=BILLETS_SECRET_FILE=/etc/secubox/secrets/billets
# Set BILLETS_SITE_URL to the public https origin so feeds/oEmbed emit absolute URLs.
# Environment=BILLETS_SITE_URL=https://billets.example.com
ExecStartPre=/usr/bin/install -d -o secubox -g secubox -m 1777 /run/secubox
ExecStart=/usr/lib/secubox/billets/venv/bin/uvicorn api.asgi:app \
--uds /run/secubox/billets.sock --no-access-log --workers 1
Restart=on-failure