docs: add missing groups, dirs, nginx snippets and TLS cert to Pi test install

2026-10-11 14:34:42 +01:00
parent 4cd6449b17
commit bdcf7015fa
1 changed files with 13 additions and 0 deletions
@@ -121,6 +121,19 @@ sudo cp archipelago.service /etc/systemd/system/archipelago.service
 # (ota-crash-guard.sh etc.) are tolerated; trim them if they aren't.
 sudo systemctl daemon-reload && sudo systemctl enable --now archipelago
 # Gaps found by the arm64 systemd-container test (2026-10-11) — the unit and
 # nginx config need these or they fail to start:
 sudo groupadd -f debian-tor && sudo groupadd -f fips
 sudo usermod -aG dialout,debian-tor,fips archipelago
 sudo mkdir -p /home/archipelago/.local/share/containers /home/archipelago/.config/containers \
  /var/lib/containers /etc/containers /opt/archipelago/scripts /var/lib/archipelago
 sudo chown -R archipelago:archipelago /home/archipelago /var/lib/archipelago
 # nginx config includes snippets and a TLS cert (self-signed is fine for a test)
 sudo cp -r image-recipe/configs/snippets /etc/nginx/
 sudo mkdir -p /etc/archipelago/ssl && sudo openssl req -x509 -newkey rsa:2048 -nodes -days 30 \
  -subj /CN=archy-test -keyout /etc/archipelago/ssl/archipelago.key -out /etc/archipelago/ssl/archipelago.crt
 sudo cp /etc/archipelago/ssl/archipelago.crt /etc/archipelago/ssl/ca-download.crt
 # frontend + nginx (serves static, proxies API to 127.0.0.1:5678)
 sudo mkdir -p /opt/archipelago/web-ui && sudo rsync -a dist/ /opt/archipelago/web-ui/
 sudo apt install -y nginx