29 lines
1.4 KiB
Markdown
29 lines
1.4 KiB
Markdown
# Publishing the source on netdesk.space
|
|
|
|
The full source is downloadable + git-cloneable straight from the website:
|
|
- Page: https://netdesk.space/source
|
|
- Download: https://netdesk.space/downloads/netdesk-src-latest.tar.gz (+ .zip)
|
|
- Clone: git clone https://netdesk.space/git/netdesk.git
|
|
|
|
## How it's built (secret-safe)
|
|
|
|
1. **Export tracked files only** (never DBs/artifacts/secrets):
|
|
`git archive HEAD` from this repo + the sibling `netdesk-native` repo
|
|
(extracted into `netdesk/native/`).
|
|
2. **Strip internal + sensitive** files: planning/roadmap/queue docs,
|
|
`native/certs/`, `native/docs/implementation-specs.md`, dev screenshots.
|
|
3. **Secret scan** the export (known secrets + an adversarial multi-scanner
|
|
sweep for keys/tokens/PII/stray binaries) and scrub any hit. The real
|
|
account password, owner email, account token and live host ID have been
|
|
removed from source — keep it that way (they must never be committed).
|
|
4. **Package**: `.tar.gz` + `.zip` (top-level `netdesk/`) and a bare repo
|
|
(`git clone --bare` + `git update-server-info`) for dumb-HTTP clone.
|
|
|
|
## How it's served
|
|
|
|
Static nginx locations in `/etc/nginx/conf.d/netdesk.space.conf` (see
|
|
`nginx-source.snippet`) serving `/opt/netdesk/public/{source,downloads,git}`.
|
|
Zero app-server changes; `nginx -t` + `systemctl reload nginx` (no downtime).
|
|
|
|
`source-page.html` is the download/clone landing page (served at /source/).
|