WIP: hedgedoc

hedgedoc/defaults/main.yml

@@ -11,6 +11,7 @@ hedgedoc_db:
 hedgedoc_domain: hedgedoc.example.org
 hedgedoc_urlPath: null
 hedgedoc_allowGravatar: false
+hedgedoc_protocolUseSSL: true
 # hedgedoc_csp
 # hedgedoc_cookiePolicy
 # hedgedoc_extra_config

hedgedoc/templates/config.json.j2

@@ -6,6 +6,7 @@
         "loglevel": "info",
         "uploadsPath": "{{ hedgedoc_data_root }}/uploads",
         "allowGravatar": {{ hedgedoc_allowGravatar|to_json }},
+        "protocolUseSSL": {{ hedgedoc_protocolUseSSL|to_json }},
 {% if hedgedoc_csp is defined %}
         "csp": {{ hedgedoc_csp|to_json }},
 {% endif %}

hedgedoc/templates/hedgedoc.service.j2

@@ -14,6 +14,7 @@ Environment=NODE_ENV=production
 Restart=always
 RestartSec=2s
 ExecStart=/usr/bin/yarnpkg start --production
+ExecStartPost=/bin/sh -c "while ! test -e ${RUNTIME_DIRECTORY}/hedgedoc.sock; do sleep 2; done; chmod 666 ${RUNTIME_DIRECTORY}/hedgedoc.sock"
 CapabilityBoundingSet=
 NoNewPrivileges=true
 PrivateDevices=true