Compare commits

..

1 Commits

Author SHA1 Message Date
3wordchant ac485e963f fix: $* instead of $@, seems to fix #49?
Closes #49
2025-12-15 15:28:01 -05:00
8 changed files with 14 additions and 63 deletions
+2 -4
View File
@@ -1,5 +1,5 @@
TYPE=wordpress TYPE=wordpress
#TIMEOUT=300 TIMEOUT=300
ENABLE_AUTO_UPDATE=true ENABLE_AUTO_UPDATE=true
COMPOSE_FILE="compose.yml" COMPOSE_FILE="compose.yml"
ENABLE_BACKUPS=true ENABLE_BACKUPS=true
@@ -28,9 +28,6 @@ LETS_ENCRYPT_ENV=production
# PHP composer for plugin installation # PHP composer for plugin installation
#COMPOSE_FILE="$COMPOSE_FILE:compose.composer.yml" #COMPOSE_FILE="$COMPOSE_FILE:compose.composer.yml"
# Self managed Wordpress for automatic updates
#COMPOSE_FILE="$COMPOSE_FILE:compose.selfmanaged.yml"
#WORDPRESS_DEBUG=true #WORDPRESS_DEBUG=true
## Additional extensions ## Additional extensions
@@ -84,6 +81,7 @@ SECRET_DB_PASSWORD_VERSION=v1
# 🚩🚩 dangerous, use only for development sites! # 🚩🚩 dangerous, use only for development sites!
#CORS_ALLOW_ALL=1 #CORS_ALLOW_ALL=1
# FTP # FTP
#COMPOSE_FILE="$COMPOSE_FILE:compose.ftp.yml" #COMPOSE_FILE="$COMPOSE_FILE:compose.ftp.yml"
#SECRET_FTP_PASS_VERSION=v1 #SECRET_FTP_PASS_VERSION=v1
+5 -18
View File
@@ -2,11 +2,11 @@ export PHP_UPLOADS_CONF_VERSION=v4
export ENTRYPOINT_CONF_VERSION=v7 export ENTRYPOINT_CONF_VERSION=v7
export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2 export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2
export MSMTP_CONF_VERSION=v4 export MSMTP_CONF_VERSION=v4
export HTACCESS_CONF_VERSION=v3 export HTACCESS_CONF_VERSION=v2
export USERS_CONF_VERSION=v1 export USERS_CONF_VERSION=v1
wp() { wp() {
su -p www-data -s /bin/bash -c "/usr/local/bin/wp $@" su -p www-data -s /bin/bash -c "/usr/local/bin/wp $*"
} }
update() { update() {
@@ -31,6 +31,8 @@ core_install(){
wp "language core install $LOCALE" wp "language core install $LOCALE"
wp "site switch-language $LOCALE" wp "site switch-language $LOCALE"
wp "rewrite structure '/%year%/%monthnum%/%day%/%postname%/'" wp "rewrite structure '/%year%/%monthnum%/%day%/%postname%/'"
wp "plugin install --activate disable-update-notifications"
wp "option update disable_notification_setting --format=json '{\"dpun_setting\":false,\"dwtu_setting\":false,\"dwcun_setting\":true}'"
if [ -n "$DEFAULT_USER_ROLE" ] if [ -n "$DEFAULT_USER_ROLE" ]
then then
wp "option set default_role $DEFAULT_USER_ROLE" wp "option set default_role $DEFAULT_USER_ROLE"
@@ -38,20 +40,7 @@ core_install(){
wp "option set default_role subscriber" wp "option set default_role subscriber"
fi fi
wp "theme auto-updates enable --all" wp "theme auto-updates enable --all"
wp 'plugin auto-updates enable --all' || true wp 'plugin auto-updates enable --all' || exit 0
}
enable_auto_updates(){
wp plugin deactivate disable-update-notifications --allow-root
wp plugin uninstall disable-update-notifications --allow-root
wp option delete disable_notification_setting --allow-root
wp plugin auto-updates enable --all --allow-root
wp theme auto-updates enable --all --allow-root
}
disable_auto_updates(){
wp "plugin install --activate disable-update-notifications"
wp "option update disable_notification_setting --format=json '{\"dpun_setting\":false,\"dwtu_setting\":false,\"dwcun_setting\":true}'"
} }
set_authentik(){ set_authentik(){
@@ -74,8 +63,6 @@ set_authentik(){
\"endpoint_userinfo\":\"https://$AUTHENTIK_DOMAIN/application/o/userinfo/\", \"endpoint_userinfo\":\"https://$AUTHENTIK_DOMAIN/application/o/userinfo/\",
\"endpoint_token\":\"https://$AUTHENTIK_DOMAIN/application/o/token/\", \"endpoint_token\":\"https://$AUTHENTIK_DOMAIN/application/o/token/\",
\"endpoint_end_session\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/end-session/\", \"endpoint_end_session\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/end-session/\",
\"endpoint_jwks\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/jwks/\",
\"issuer\":\"https://$AUTHENTIK_DOMAIN/application/o/wordpress/\",
\"acr_values\":\"\", \"acr_values\":\"\",
\"identity_key\":\"preferred_username\", \"identity_key\":\"preferred_username\",
\"no_sslverify\":\"0\", \"no_sslverify\":\"0\",
+1 -1
View File
@@ -3,7 +3,7 @@ version: "3.8"
services: services:
ftp: ftp:
image: atmoz/sftp:alpine image: atmoz/sftp
secrets: secrets:
- ftp_pass - ftp_pass
volumes: volumes:
-21
View File
@@ -1,21 +0,0 @@
---
version: "3.8"
services:
app:
image: "wordpress:latest"
volumes:
- "wordpress:/var/www/html/"
environment:
WORDPRESS_CONFIG_EXTRA: |
define( 'AUTOMATIC_UPDATER_DISABLED', false );
define( 'WP_AUTO_UPDATE_CORE', true );
define( 'FS_METHOD', 'direct' );
${WORDPRESS_CONFIG_EXTRA}
ftp:
volumes:
- "wordpress:/home/ftp_user/"
volumes:
wordpress:
+5 -5
View File
@@ -3,7 +3,7 @@ version: "3.8"
services: services:
app: app:
image: "wordpress:6.9.4" image: "wordpress:6.9.0"
volumes: volumes:
- "wordpress_content:/var/www/html/wp-content/" - "wordpress_content:/var/www/html/wp-content/"
networks: networks:
@@ -48,7 +48,7 @@ services:
order: start-first order: start-first
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.swarm.network=proxy" - "traefik.docker.network=proxy"
- "traefik.http.routers.${STACK_NAME}.tls=true" - "traefik.http.routers.${STACK_NAME}.tls=true"
- "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80" - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80"
- "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})" - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
@@ -61,11 +61,11 @@ services:
- "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.regex=^https://(${REDIRECTS})/(.*)" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.regex=^https://(${REDIRECTS})/(.*)"
- "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
- "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true" - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
- "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}" - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
- "coop-cloud.${STACK_NAME}.version=2.19.1+6.9.4" - "coop-cloud.${STACK_NAME}.version=2.17.0+6.9.0"
db: db:
image: "mariadb:12.2" image: "mariadb:12.1"
volumes: volumes:
- "mariadb:/var/lib/mysql" - "mariadb:/var/lib/mysql"
networks: networks:
-12
View File
@@ -1,15 +1,3 @@
# Protect sensitive files from direct access
<FilesMatch "^(wp-config\.php|\.htaccess|\.htpasswd|readme\.html|license\.txt)$">
Require all denied
</FilesMatch>
# Prevent PHP execution in uploads directory
<Directory /var/www/html/wp-content/uploads>
<FilesMatch "\.(?i:php|phtml|phar)$">
Require all denied
</FilesMatch>
</Directory>
{{ if eq (env "MULTISITE") "" -}} {{ if eq (env "MULTISITE") "" -}}
# BEGIN WordPress # BEGIN WordPress
-1
View File
@@ -1 +0,0 @@
Breaking change for openid plugin: The issuer must be provided, thus the set_authentik function now includes issuer and endpoint_jwks.
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"$schema": "https://docs.renovatebot.com/renovate-schema.json", "$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [ "extends": [
"config:recommended" "config:base"
] ]
} }