SETUP, or: what hannah did
hannah
The wiki is set up as two separate processes: a dynamic webserver, and a git repo holding content. The webserver runs as a systemctl service running as an unprivileged user called wiki. The git repo is read-only and pulls from a repo on hannah's sourcehut every minute as a cronjob, also running as the wiki user.
/home/wiki/ - sc-rt (server source and built binary)
|
- wiki.transncr.gay (read-only git repo)
A couple of points:
- The systemctl service is a system service set to run as a user, NOT a user service
- The cronjob calls a script called update.sh which lives in the root of wiki.transncr.gay, but isn't on git (read-only!)
The sc-rt server runs on localhost:8040 and is set up behind an nginx reverse proxy (we love nginx!).