Start to clean that fucking mess

check_process

@@ -1,35 +1,22 @@
-;; Test complet sans multisite
-        auto_remove=1
-        ; Manifest
-                domain="domain.tld"     (DOMAIN)
-                path="/path"    (PATH)
-                ip4ranges="10.0.0.8/24"
-                dynamic_ip=0
-        ; Checks
-                pkg_linter=1
-                setup_sub_dir=1
-                setup_root=1
-                setup_nourl=0
-                setup_private=1
-                setup_public=0
-                upgrade=1
-                backup_restore=1
-                multi_instance=0
-                wrong_user=0
-                wrong_path=1
-                incorrect_path=1
-                corrupt_source=0
-                fail_download_source=0
-                port_already_use=0
-                final_path_already_use=0
+;; Test complet
+    ; Manifest
+        domain="domain.tld"     (DOMAIN)
+        path="/path"    (PATH)
+        ip4ranges="10.0.0.8/24"
+    ; Checks
+        pkg_linter=1
+        setup_sub_dir=1
+        setup_root=1
+        setup_nourl=0
+        setup_private=1
+        setup_public=0
+        upgrade=1
+        backup_restore=1
+        multi_instance=0
+        wrong_user=0
+        port_already_use=0
 ;;; Levels
-        Level 1=auto
-        Level 2=auto
-        Level 3=auto
-        Level 4=0
-        Level 5=auto
-        Level 6=auto
-        Level 7=auto
-        Level 8=0
-        Level 9=0
-        Level 10=0
+    Level 5=auto
+;;; Options
+Email=
+Notification=none

conf/config-cli.ovpn.j2 → conf/config-cli.ovpn

@@ -7,7 +7,7 @@ persist-key
 persist-tun
 comp-lzo
 verb 3
-remote {{ domain }} {{ port }}
+remote __DOMAIN__ __PORT__
 route-delay
 reneg-sec 0
 tls-version-min 1.2
@@ -18,11 +18,11 @@ redirect-gateway
 script-security 2
 --auth-user-pass
 <ca>
-{{ ca_yunohost }}
+__CA_YUNOHOST__
 </ca>
 #user openvpn
 #group openvpn
 key-direction 1
 <tls-auth>
-{{ ta_key }}
+__TA_KEY__
 </tls-auth>

conf/config.ovpn.j2 → conf/config.ovpn

@@ -10,7 +10,7 @@ tls-version-min 1.2
 cipher AES-256-CBC
 auth SHA512
 tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA
-remote {{ domain }} {{ port }}
+remote __DOMAIN__ __PORT__
 route-delay
 reneg-sec 0
 redirect-gateway
@@ -22,9 +22,9 @@ verb 3
 #user openvpn
 #group openvpn
 <ca>
-{{ ca_yunohost }}
+__CA_YUNOHOST__
 </ca>
 key-direction 1
 <tls-auth>
-{{ ta_key }}
+__TA_KEY__
 </tls-auth>

conf/f2b_jail.conf

@@ -0,0 +1,6 @@
+[__APP__]
+enabled = true
+protocol = udp
+port    = __PORT__
+filter    = __APP__
+logpath = /var/log/__APP__/server.log

conf/nginx.conf

@@ -0,0 +1,29 @@
+#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent;
+location __PATH__/ {
+
+  # Path to source
+  alias __FINALPATH__/ ;
+
+  # Force usage of https
+  if ($scheme = http) {
+    rewrite ^ https://$server_name$request_uri? permanent;
+  }
+
+  index index.php;
+
+  try_files $uri $uri/ index.php;
+  location ~ [^/]\.php(/|$) {
+    fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+    fastcgi_pass unix:/var/run/php/php7.0-fpm-__NAME__.sock;
+
+    fastcgi_index index.php;
+    include fastcgi_params;
+    fastcgi_param HTTPS on;
+    fastcgi_param REMOTE_USER $remote_user;
+    fastcgi_param PATH_INFO $fastcgi_path_info;
+    fastcgi_param SCRIPT_FILENAME $request_filename;
+  }
+
+  # Include SSOWAT user panel.
+  include conf.d/yunohost_panel.conf.inc;
+}