a39406c12b
Add production deployment configs for the collab relay and locator: region-split compose (CN/global), direct nginx gateways and location maps, the CN docker-user firewall install/verify/validate tooling and systemd unit, and an SoftHSM-backed locator variant. Extend the collab security/deployment boundary checks to cover the new artifacts. The CN application host address is a placeholder (10.0.0.10); substitute the real private address at deploy time.
18 lines
473 B
Bash
Executable file
18 lines
473 B
Bash
Executable file
#!/bin/sh
|
|
set -eu
|
|
LC_ALL=C
|
|
export LC_ALL
|
|
|
|
if [ "$#" -ne 1 ]; then
|
|
echo "usage: $0 INVENTORY_FILE" >&2
|
|
exit 2
|
|
fi
|
|
|
|
script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
|
|
# This helper performs syntax checks only for release validation. The installed
|
|
# mutating and kernel-verification paths independently require root ownership.
|
|
. "$script_dir/cn-docker-user-firewall-common.sh"
|
|
cn_firewall_load_config "$1" syntax-only
|
|
|
|
echo "CN firewall inventory syntax is valid"
|