serviceinfo_api_server.yml.template

---
service_info:
  initial_user: 
    username: ${EDGE_USER}
    sshkeys:
    - "${EDGE_USER_PUB_KEY}"
  files:
  - path: /etc/rpm-ostreed.conf
    permissions: 644
    source_path: /etc/device0/cfg/etc/rpm-ostreed.conf 
  - path: /etc/systemd/system/applyupdate.service
    permissions: 644
    source_path: /etc/device0/cfg/etc/systemd/system/applyupdate.service
  - path: /etc/systemd/system/applyupdate.timer
    permissions: 644
    source_path: /etc/device0/cfg/etc/systemd/system/applyupdate.timer
  - path: /etc/systemd/system/container-httpd.service
    permissions: 644
    source_path: /etc/device0/cfg/etc/systemd/system/container-httpd.service
  - path: /tmp/override.conf
    permissions: 644
    source_path: /etc/device0/cfg/etc/systemd/system/podman-auto-update.timer.d/override.conf
  - path: /etc/containers/registries.conf.d/999-insecure-registry.conf
    permissions: 644
    source_path: /etc/device0/cfg/etc/containers/registries.conf.d/999-insecure-registry.conf
  commands:
  - command: mkdir
    args:
    - -p
    - /etc/systemd/system/podman-auto-update.timer.d
  - command: cp
    args:
    - /tmp/override.conf
    - /etc/systemd/system/podman-auto-update.timer.d
  - command: restorecon
    args:
    - -vFr
    - /etc
  - command: firewall-cmd
    args:
    - --permanent
    - --add-port=8080/tcp
  - command: firewall-cmd
    args:
    - --reload
  - command: systemctl
    args:
    - daemon-reload
  - command: systemctl
    args:
    - enable 
    - --now
    - rpm-ostreed-automatic.timer 
    - applyupdate.timer 
    - podman-auto-update.timer 
    - container-httpd.service
  diskencryption_clevis: ~
  additional_serviceinfo: ~
bind: "0.0.0.0:8083"
service_info_auth_token: ${SERVICE_AUTH_TOKEN}
admin_auth_token: ${ADMIN_AUTH_TOKEN}
device_specific_store_driver:
  Directory:
    path: /etc/fdo/aio/stores/serviceinfo_api_devices