Skip to content

[Fix] Service Install Fixes#1120

Merged
RichardAnderson merged 1 commit into
vitodeploy:4.xfrom
RichardAnderson:fix/nginx-error
May 25, 2026
Merged

[Fix] Service Install Fixes#1120
RichardAnderson merged 1 commit into
vitodeploy:4.xfrom
RichardAnderson:fix/nginx-error

Conversation

@RichardAnderson

Copy link
Copy Markdown
Member
  • Resolves an issue with reinstalling services requiring gpg, which where override is needed falls back to an interactive shell causing the install the fail. Set the default to yes running in batch mode (override yes) to avoid interactive shell and therefore stopped the service install from failing.
  • Updated nginx default configuration from binding to SSL - as this was blocking reloads.
  • Updated the caddy default configuration from binding to SSL - as this was blocking reloads.
  • Updated caddy to have PrivateTmp=false - as having this as true was blocking reloads, forcing restarts each time SSL's changed for each site. While there is a small loss in isolation from not having a dedicated tmp, this is low risk due to caddys use of tmp, and any potential attacks would require the attacker to already have shell access to the server.

@RichardAnderson RichardAnderson merged commit d2a7b77 into vitodeploy:4.x May 25, 2026
3 checks passed
@RichardAnderson RichardAnderson deleted the fix/nginx-error branch May 25, 2026 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants