3 files changed, 5 insertions(+), 0 deletions(-)

M applications/sourcehut/deployment-meta.yaml
M applications/sourcehut/kustomization.yaml
M containers/metasrht.apko.yaml

@@ 19,6 19,9 @@ spec:
             - name: secrets
               mountPath: /etc/sr.ht/config.ini
               subPath: config.ini
+            # PAM from host via pam_unix
+            # XXX perhaps socket-interfaced PAM instead (sssd?)
+            # or consider remote auth (is NIS or LDAP worth it?)
             - name: passwd
               mountPath: /etc/passwd
               readOnly: true

@@ 8,6 8,7 @@ labels:
     includeSelectors: true
 resources:
   - namespace.yaml
+  # TODO untie python flask, go graphql, celery webhooks
   - deployment-pages.yaml
   - service-pages.yaml
   - deployment-paste.yaml

@@ 11,6 11,7 @@ contents:
   packages:
     - busybox
     - meta.sr.ht
+    # XXX testing mixture
     - py3-pam@testing
 
 accounts: