manus-admin/manus-dashboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sécuriser Gitea et alerter sur les échecs CI

Browse Source
This commit is contained in:
Manus Déploiement Santinova
2026-08-21 16:16:46 +00:00
parent 1f1d525ea1
commit a37e29e42a
27 changed files with 819 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
ops/install-gitea-token-rotation.sh Normal file
View File

@@ -0,0 +1,18 @@
#!/usr/bin/env bash
set -Eeuo pipefail
readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
install -D -m 0700 "${SCRIPT_DIR}/gitea-token-rotation.sh" /opt/manus-deploy/scripts/gitea-token-rotation.sh
install -D -m 0644 "${SCRIPT_DIR}/gitea-token-rotation.service" /etc/systemd/system/gitea-token-rotation.service
install -D -m 0644 "${SCRIPT_DIR}/gitea-token-rotation.timer" /etc/systemd/system/gitea-token-rotation.timer
install -D -m 0644 "${SCRIPT_DIR}/gitea-token-rotation-apply.service" /etc/systemd/system/gitea-token-rotation-apply.service
install -D -m 0644 "${SCRIPT_DIR}/gitea-token-rotation-apply.path" /etc/systemd/system/gitea-token-rotation-apply.path
install -d -m 0700 /opt/manus-deploy/secrets/gitea-token-rotation
install -d -m 0750 /var/log/manus-deploy
systemctl daemon-reload
systemctl enable --now gitea-token-rotation.timer
systemctl enable --now gitea-token-rotation-apply.path
systemctl is-enabled gitea-token-rotation.timer
systemctl is-enabled gitea-token-rotation-apply.path
systemctl list-timers gitea-token-rotation.timer --no-pager