Change ownership and ToS and fix some stuff around

2020-06-13 22:17:44 +02:00 · 2020-06-13 22:17:44 +02:00 · 89d67eed8c
parent 935c7c3c1c
commit 89d67eed8c
4 changed files with 22 additions and 8 deletions
--- a/files/priv/static/static/terms-of-service.html
+++ b/files/priv/static/static/terms-of-service.html
@ -2,10 +2,10 @@
 	<body>
 		<h4>Terms of Service</h4>
 		<ol>
-			<li>Anything against German law is disallowed.</li>
-			<li>No child porn.</li>
-			<li>No taking advantage of exploits.</li>
-			<li>Have common sense.</li>
+			<li>All sensitive or pornographic content should be tagged as such</li>
+			<li>Spambots or advertisement bots are not allowed</li>
+			<li>No private information or targeted harassment (aka doxxing)</li>
+			<li>Exploiting security weaknesses to gain information or cause harm is stricly forbidden</li>
 		</ol>
 	</body>
 </html>
--- a/tasks/main.yml
+++ b/tasks/main.yml
@ -37,14 +37,20 @@
        dest: '/home/repositories/pleroma/{{ item }}'
  tags:
        - pleroma
-        - build
 - name: Build pleroma
  shell:
        chdir: "/home/repositories/pleroma/"
-        cmd: "MIX_ENV=prod mix release --path {{ pleroma.root }}"
+        cmd: "MIX_ENV=prod mix release --path {{ pleroma.root }} --force"
  tags:
        - pleroma
        - build
+- name: Change ownership of build output
+  shell:
+        chdir: "/etc/pleroma"
+        cmd: "chown -R nobody:root ."
+        warn: false
+  tags:
+        - pleroma
 - name: Copy configuration files
  loop:
        - "config.exs"
@ -53,6 +59,9 @@
        src: "{{ item }}.j2"
        dest: "/etc/pleroma/{{ item }}"
        follow: yes
+        owner: "nobody"
+        group: "root"
+        mode: "700"
  tags:
        - pleroma
 - name: Copy secrets
--- a/templates/config.exs.j2
+++ b/templates/config.exs.j2
@ -20,7 +20,8 @@ config :pleroma, :frontend_configurations,
    theme: "{{ pleroma.instance.frontend.theme }}",
    logo: "{{ pleroma.instance.frontend.logo }}",
    logoMask: {{ pleroma.instance.frontend.logomask }},
-    background: "{{ pleroma.instance.frontend.bg }}"
+    background: "{{ pleroma.instance.frontend.bg }}",
+    showFeaturesPanel: false
  }

 config :pleroma, :media_proxy, enabled: {{ pleroma.instance.media_proxy }}
--- a/templates/mrf.exs.j2
+++ b/templates/mrf.exs.j2
@ -1,7 +1,11 @@
 import Config

 config :pleroma, :instance,
-  rewrite_policy: "Pleroma.Web.ActivityPub.MRF.NoOpPolicy"
+  rewrite_policy: [
+    Pleroma.Web.ActivityPub.MRF.NoOpPolicy,
+    Pleroma.Web.ActivityPub.MRF.AntiLinkSpamPolicy,
+    Pleroma.Web.ActivityPub.MRF.TagPolicy
+  ]

 config :pleroma, :mrf_simple,
  media_nsfw: ["stereophonic.space"]