diff --git a/fleetspeak/build.sh b/fleetspeak/build.sh index d3934447..0cc70313 100755 --- a/fleetspeak/build.sh +++ b/fleetspeak/build.sh @@ -94,17 +94,11 @@ time ( chmod 755 pkg/* - chmod o-r pkg/etc/fleetspeak-server/https.config - chmod g-r pkg/etc/fleetspeak-server/https.config - sed -i "s//$(cat ../VERSION)/" pkg/DEBIAN/control mkdir -p pkg/usr/bin install -o root -g root src/server/server/server pkg/usr/bin/fleetspeak-server - mkdir -p pkg/usr/lib/fleetspeak-server - install -o root -g root src/server/plugins/*/*.so pkg/usr/lib/fleetspeak-server - dpkg-deb -b pkg out.deb ' fi diff --git a/fleetspeak/pkg-tmpl/DEBIAN/conffiles b/fleetspeak/pkg-tmpl/DEBIAN/conffiles index 503f750b..9b580185 100644 --- a/fleetspeak/pkg-tmpl/DEBIAN/conffiles +++ b/fleetspeak/pkg-tmpl/DEBIAN/conffiles @@ -1,3 +1 @@ -/etc/fleetspeak-server/https.config -/etc/fleetspeak-server/plugins.config /etc/fleetspeak-server/server.config diff --git a/fleetspeak/pkg-tmpl/etc/fleetspeak-server/https.config b/fleetspeak/pkg-tmpl/etc/fleetspeak-server/https.config deleted file mode 100644 index 904d90eb..00000000 --- a/fleetspeak/pkg-tmpl/etc/fleetspeak-server/https.config +++ /dev/null @@ -1,18 +0,0 @@ -# Fleetspeak https configuration file. This is a text format -# fleetspeak.plugins.HttpsConfig protocol buffer. - -# The address to bind to. -listen_address: "localhost:4321" - -# A PEM encoded x509 certificate chain that the server should present as its -# identity. -certificate: "" - -# A PEM encoded private key matching the start of the certificate chain in -# certificate. -key: "" - -# Whether to activate experimental streaming connection support on the server, -# meaning that the server will include support for both legacy and streaming -# clients. -streaming: false diff --git a/fleetspeak/pkg-tmpl/etc/fleetspeak-server/plugins.config b/fleetspeak/pkg-tmpl/etc/fleetspeak-server/plugins.config deleted file mode 100644 index ecdfd685..00000000 --- a/fleetspeak/pkg-tmpl/etc/fleetspeak-server/plugins.config +++ /dev/null @@ -1,83 +0,0 @@ -# Fleetspeak server plugin configuration file. This is a text format -# fleetspeak.plugins.Config protocol buffer. - -#### -#### Datastore, exactly one is required: -#### - -# This chooses where Fleetspeak's persistent state is stored. The sqlite -# datastore is meant for integration testing and other small, single-server -# deployments. Most production deployments should use the mysql option. - -#datastore { -# path: "/usr/lib/fleetspeak-server/sqlite.so" -# factory_name: "Factory" -# -# # For the sqlite datastore, the config string is the path to the database -# config: "/var/lib/fleetspeak-server/database.sqlite3" -#} - -#datastore { -# path: "/usr/lib/fleetspeak-server/mysql.so" -# factory_name: "Factory" -# -# # For the sqlite datastore, the config string described the database connection, -# # e.g.: ":@tcp()/". -# # -# # See https://github.com/go-sql-driver/mysql#usage for more details. -# config: "/var/lib/fleetspeak-server/database.sqlite3" -#} - -#### -#### Communicator, at least one is required: -#### - -communicator { - path: "/usr/lib/fleetspeak-server/https.so" - - # The HTTPSFactory expects clients to connect directly to this server over - # https. If you will be running behind a loadbalancer/reverse proxy supporting - # the haproxy 'Proxy' protocol you should enable this protocol in your - # loadbalancer and change factory_name to 'ProxyHTTPSFactory. - # - # Note that while ProxyHTTPSFactory will accept connections directly from - # endpoints, it effectively allows them to spoof their ip. Therefore, when - # using the ProxyHTTPSFactory, it is recommended to keep the server itself - # firewalled to be accessible only through a loadbalancer. - factory_name: "HTTPSFactory" - - # This config string is the path of a network configuration file containing the - # server key and certificate. - config: "/etc/fleetspeak-server/https.config -} - -#### -#### ServiceFactories, at least one is required. -#### - -# The loaded ServiceFactories determine what types of services are possible, for -# example the GRPCServiceFactory contains the code needed to install a service -# which passes messages to another process through a specific GRPC -# protocol. Services are configured in the server configuration file. - -# GRPC -service_factory { - path: "/usr/lib/fleetspeak-server/grpc.so" - factory_name: "GRPCServiceFactoryFactory" -} - -#### -#### Authorizer, optional. -#### - -# This LabelFilter is a simple authorizer which only alows in clients -# with a specific label. It can be replaced with a more complex authorizer to -# provide more nuanced filtering, DOS protection, etc. -#authorizer { -# path: "/usr/lib/fleetspeak-server/authorizer.so" -# factory_name: "LabelFilter" -# -# # The label filter authorizer will only allow connection from clients -# # reporting with this label. -# config: "