ops: seed env defaults in installer

This commit is contained in:
2025-12-28 14:03:09 +01:00
parent dffc0d79e4
commit a4f043ea96

View File

@ -56,6 +56,17 @@ if [[ ! -f "${ENV_FILE}" ]]; then
sudo chown root:"${SERVICE_GROUP}" "${ENV_FILE}" sudo chown root:"${SERVICE_GROUP}" "${ENV_FILE}"
fi fi
log "Ensuring minimal ENV defaults (PAM always on, allowed user)..."
DEFAULT_USER="${SUDO_USER:-}"
if [[ -n "${DEFAULT_USER}" ]]; then
if ! sudo grep -q "^SKD_AUTH_ALLOWED_USERS=" "${ENV_FILE}"; then
echo "SKD_AUTH_ALLOWED_USERS=${DEFAULT_USER}" | sudo tee -a "${ENV_FILE}" >/dev/null
fi
fi
if ! sudo grep -q "^SKD_AUTH_MODE=" "${ENV_FILE}"; then
echo "SKD_AUTH_MODE=pam" | sudo tee -a "${ENV_FILE}" >/dev/null
fi
log "Writing systemd unit to ${SYSTEMD_PATH}..." log "Writing systemd unit to ${SYSTEMD_PATH}..."
sudo tee "${SYSTEMD_PATH}" >/dev/null <<EOF sudo tee "${SYSTEMD_PATH}" >/dev/null <<EOF
[Unit] [Unit]