fix(install): grant www-data sudo rights for update.sh & create nexus-update symlink (v1.3.3)
This commit is contained in:
1 parent
e6540c866b
commit
e8c25309e3
4 files changed
+18
-7
No files matched your search
@@ -95,6 +95,16 @@ echo -e "${C_GRAY}[2/6] Déploiement des nouveaux fichiers de code...${C_RESET}"
|
||||
git reset --hard "${GIT_REMOTE}/${GIT_BRANCH}"
|
||||
chown -R www-data:asterisk "$APP_DIR"
|
||||
chmod 2775 "$APP_DIR/storage" "$APP_DIR/storage/backups" "$APP_DIR/storage/sounds" 2>/dev/null || true
|
||||
chmod +x "$APP_DIR/scripts/update.sh" "$APP_DIR/scripts/nexus-firewall" "$APP_DIR/scripts/nexus-banner.sh" 2>/dev/null || true
|
||||
ln -sf "$APP_DIR/scripts/update.sh" /usr/local/bin/nexus-update
|
||||
ln -sf "$APP_DIR/scripts/nexus-firewall" /usr/local/bin/nexus-firewall
|
||||
ln -sf "$APP_DIR/scripts/nexus-banner.sh" /usr/local/bin/nexus-banner
|
||||
|
||||
# Mise à jour des privilèges sudoers (www-data)
|
||||
cat << 'EOF_SUDO' > /etc/sudoers.d/nexus-pbx
|
||||
www-data ALL=(ALL) NOPASSWD: /usr/sbin/asterisk, /usr/sbin/nginx, /usr/bin/systemctl, /usr/bin/fail2ban-client, /bin/fail2ban-client, /var/www/nexus-pbx/scripts/nexus-firewall, /usr/bin/certbot, /usr/sbin/nft, /usr/sbin/iptables, /var/www/nexus-pbx/scripts/update.sh, /usr/local/bin/nexus-update
|
||||
EOF_SUDO
|
||||
chmod 0440 /etc/sudoers.d/nexus-pbx
|
||||
|
||||
# 3. Vérification des dépendances Debian
|
||||
echo -e "${C_GRAY}[3/6] Vérification des composants et outils système...${C_RESET}"
|
||||
|
||||
Reference in new issue
Block a user