♻️ Migrate ddns to /config/ source-of-truth architecture ♻️

Migrate ddns Docker image to the new build-time config architecture.
- rootfs/root/docker/setup/03-files.sh: rewrite to canonical form with /tmp/bin, /tmp/var, /tmp/etc, /tmp/usr handlers
- rootfs/usr/local/etc/docker/functions/entrypoint.sh: update to latest template
- rootfs/usr/local/etc/docker/init.d/*.sh: fix $(basename) UUOC; move inline comments above code lines
- rootfs/tmp/etc/: add named, dhcp, nginx, tor, named.conf, radvd.conf configs deployed to /etc/ at build time
- rootfs/tmp/usr/: add htdocs and named data files deployed to /usr/local/share/ at build time
- rootfs/usr/local/share/template-files/: delete; config now deployed via /tmp/etc/ and /tmp/usr/ at build time

rootfs/root/docker/setup/03-files.sh
rootfs/tmp/
rootfs/usr/local/etc/docker/functions/entrypoint.sh
rootfs/usr/local/share/template-files/config/dhcp/dhcpd4.conf
rootfs/usr/local/share/template-files/config/dhcp/dhcpd6.conf
rootfs/usr/local/share/template-files/config/env/default.sample
rootfs/usr/local/share/template-files/config/env/examples/00-directory.sh
rootfs/usr/local/share/template-files/config/env/examples/addresses.sh
rootfs/usr/local/share/template-files/config/env/examples/certbot.sh
rootfs/usr/local/share/template-files/config/env/examples/couchdb.sh
rootfs/usr/local/share/template-files/config/env/examples/dockerd.sh
rootfs/usr/local/share/template-files/config/env/examples/global.sh
rootfs/usr/local/share/template-files/config/env/examples/healthcheck.sh
rootfs/usr/local/share/template-files/config/env/examples/mariadb.sh
rootfs/usr/local/share/template-files/config/env/examples/mongodb.sh
rootfs/usr/local/share/template-files/config/env/examples/networking.sh
rootfs/usr/local/share/template-files/config/env/examples/other.sh
rootfs/usr/local/share/template-files/config/env/examples/php.sh
rootfs/usr/local/share/template-files/config/env/examples/postgres.sh
rootfs/usr/local/share/template-files/config/env/examples/redis.sh
rootfs/usr/local/share/template-files/config/env/examples/services.sh
rootfs/usr/local/share/template-files/config/env/examples/ssl.sh
rootfs/usr/local/share/template-files/config/env/examples/supabase.sh
rootfs/usr/local/share/template-files/config/env/examples/webservers.sh
rootfs/usr/local/share/template-files/config/env/examples/zz-entrypoint.sh
rootfs/usr/local/share/template-files/config/.gitkeep
rootfs/usr/local/share/template-files/config/named/certbot-update.conf
rootfs/usr/local/share/template-files/config/named/common/001-soa.inc
rootfs/usr/local/share/template-files/config/named/common/002-nameservers.inc
rootfs/usr/local/share/template-files/config/named/common/003-dns.inc
rootfs/usr/local/share/template-files/config/named.conf
rootfs/usr/local/share/template-files/config/named/config/0000-logging.conf
rootfs/usr/local/share/template-files/config/named/config/0001-rndc.conf
rootfs/usr/local/share/template-files/config/named/config/0001-rndc.key
rootfs/usr/local/share/template-files/config/named/config/0002-acl.conf
rootfs/usr/local/share/template-files/config/named/hosted/host.ddns.conf
rootfs/usr/local/share/template-files/config/named/hosted/ip.ddns.conf
rootfs/usr/local/share/template-files/config/named/keys/managed-keys.bind
rootfs/usr/local/share/template-files/config/named/zones/000-hint.conf
rootfs/usr/local/share/template-files/config/named/zones/000-localdomain.zone
rootfs/usr/local/share/template-files/config/named/zones/000-localhost.zone
rootfs/usr/local/share/template-files/config/named/zones/000-tor.zone
rootfs/usr/local/share/template-files/config/named/zones/001-ddns.zone
rootfs/usr/local/share/template-files/config/nginx/mime.types
rootfs/usr/local/share/template-files/config/nginx/nginx.conf
rootfs/usr/local/share/template-files/config/nginx/nginx.ssl.conf
rootfs/usr/local/share/template-files/config/radvd.conf
rootfs/usr/local/share/template-files/config/tor/torrc
rootfs/usr/local/share/template-files/data/.gitkeep
rootfs/usr/local/share/template-files/data/htdocs/www/css/.gitkeep
rootfs/usr/local/share/template-files/data/htdocs/www/images/.gitkeep
rootfs/usr/local/share/template-files/data/htdocs/www/index.php
rootfs/usr/local/share/template-files/data/htdocs/www/js/.gitkeep
rootfs/usr/local/share/template-files/data/named/data/hint
rootfs/usr/local/share/template-files/data/named/data/localdomain.conf
rootfs/usr/local/share/template-files/data/named/data/localhost4.rev
rootfs/usr/local/share/template-files/data/named/data/localhost6.rev
rootfs/usr/local/share/template-files/data/named/data/localhost.zone
rootfs/usr/local/share/template-files/data/named/dynamic/ddns.zone
rootfs/usr/local/share/template-files/data/named/dynamic/inc/cnames.ddns.zone
rootfs/usr/local/share/template-files/data/named/dynamic/inc/static.ipv4.arpa.rev
rootfs/usr/local/share/template-files/data/named/dynamic/inc/static.ipv4.ddns.zone
rootfs/usr/local/share/template-files/data/named/dynamic/inc/static.ipv6.arpa.rev
rootfs/usr/local/share/template-files/data/named/dynamic/inc/static.ipv6.ddns.zone
rootfs/usr/local/share/template-files/data/named/dynamic/inc/static.sso.ddns.zone
rootfs/usr/local/share/template-files/data/named/master/.gitkeep
rootfs/usr/local/share/template-files/data/named/reverse/in-addr.arpa.rev
rootfs/usr/local/share/template-files/data/named/reverse/ip6.arpa.rev
rootfs/usr/local/share/template-files/data/named/slaves/.gitkeep
rootfs/usr/local/share/template-files/defaults/.gitkeep
This commit is contained in:
2026-06-04 14:49:00 -04:00
parent ae22548092
commit 78926d224a
69 changed files with 166 additions and 622 deletions
+65
View File
@@ -0,0 +1,65 @@
# Default nginx configuration
user root;
worker_processes 1;
error_log /dev/stderr warn;
pid /tmp/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
keepalive_timeout 65;
gzip on;
map $http_upgrade $connection_upgrade { default upgrade; '' close; }
server {
listen SERVER_PORT;
root /data/htdocs/www;
index index.html index.php index.cgi index.pl index.aspx awstats.pl index.unknown.php index.default.php index.txt index.json;
proxy_intercept_errors off;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' *; object-src 'self'" always;
location = /favicon.ico {
log_not_found off;
access_log off;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location /nginx_status {
stub_status;
}
location /health {
default_type text/html;
allow all;
access_log off;
return 200 'OK';
}
location /health.json {
default_type application/json;
allow all;
access_log off;
return 200 '{"status":"OK"}';
}
}
}