96b04392dc
- CFG_HOTFIX_AUTO (security-breakage|all|off, default security-breakage) seeded in general_terminal; reaches existing installs via the add-only config reconciler. - webui_artifact_scan.sh (webuiArtifactScan): fetch+verify the signed index, write artifacts_available.json ATOMICALLY (build in temp → jq-validate → one write; keep the prior file on any failure — never emits broken JSON). Annotates each artifact with applied (a per-id record exists) + applicable (target installed). - artifactApplyAuto + `libreportal artifact apply-auto`: enqueue apply tasks for the eligible signed hotfixes — only when the index is VERIFIED-signed, only auto==true + in the severity policy + applicable + not already applied. Each apply is its own task (visible in the log + History), never applied inline. - `updater check` now also refreshes the index (webuiArtifactScan) and runs artifactApplyAuto — one front door, no second phone-home. Unit-tested 13/13: policy filtering (security-breakage / off / all), auto:false exclusion, already-applied skip, non-installed-app skip, unsigned-index fail-closed, and the scan transform's signed/applied/applicable fields. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: librelad <librelad@digitalangels.vip>
20 lines
2.4 KiB
Plaintext
Executable File
20 lines
2.4 KiB
Plaintext
Executable File
# ================================================================================
|
|
# Terminal - System utilities and advanced settings **ADVANCED**
|
|
# ================================================================================
|
|
CFG_UPDATER_CHECK=60 # Update Check Interval - Hours between system update checks
|
|
CFG_HOTFIX_AUTO=security-breakage # Hotfix Auto-Apply - Which signed hotfix severities apply automatically on the update check [security-breakage|all|off]
|
|
CFG_SWAPFILE_SIZE=2G # Swap File Size - Size of swap file for memory management
|
|
CFG_GENERATED_PASS_LENGTH=14 # Password Length - Length for auto generated passwords
|
|
CFG_GENERATED_USER_LENGTH=8 # Username Length - Length for auto generated usernames
|
|
CFG_UFW_LOGGING=off # Firewall Logging - UFW firewall logging level [off|low|medium|high|full]
|
|
CFG_TEXT_EDITOR=nano # Text Editor - Default text editor for system operations [nano|vim]
|
|
CFG_REQUIREMENT_CRONTAB=true # Scheduled Tasks - Install scheduled tasks and automated maintenance jobs
|
|
CFG_REQUIREMENT_CONFIGS_CHECK=true # Config Validation - Validate configuration files on startup for errors and consistency
|
|
CFG_REQUIREMENT_CONFIGS_AUTO_UPDATE=true # Auto Config Updates - Add new config options from the template (non-interactive)
|
|
CFG_REQUIREMENT_CONFIGS_AUTO_DELETE=true # Auto Config Deletes - Remove config options no longer present in the template
|
|
CFG_REQUIREMENT_MISSING_IPS=false # IP Configuration Check - Check for and alert about missing IP configurations
|
|
CFG_REQUIREMENT_CONTINUE_PROMPT=false # Continue Prompts - Show continue prompts during installation for user confirmation
|
|
CFG_REQUIREMENT_CONTINUE_ON_ERROR=true # Continue On Error - Log failures to error_report.log and continue instead of aborting (on by default to surface issues; turn off for strict abort once clean)
|
|
CFG_REQUIREMENT_SUGGEST_INSTALLS=false # Install Suggestions - Enable application suggestions and recommendations during installation
|
|
CFG_REQUIREMENT_SUGGEST_METRICS=true # Metrics Suggestions - Offer Prometheus and Grafana during first install (requires Install Suggestions enabled)
|