Moves config to private volume

The Qubes RPC file hardcodes the filepath to the YAML config file, which contains site-specific information such as the Onion URL for the Journalist Interface. As part of template consolidation [0], we're moving the config file out of the system/root partition and into the private (i.e. /home/) volume, so that the `sd-proxy` AppVM has the config information it needs while sharing a TemplateVM with other components. [0] freedomofpress/securedrop-workstation#471
freedomofpress · Oct 5, 2020 · fdbd2b5 · fdbd2b5
1 parent 683ba7b
commit fdbd2b5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/changelog.md b/changelog.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.3.1
+
+  * Moves config file into private volume (#77).
+
 ## 0.3.0
 
   * Use incoming timeout value from JSON (#69).

diff --git a/qubes/securedrop.Proxy b/qubes/securedrop.Proxy
@@ -1 +1 @@
-/usr/bin/sd-proxy /etc/sd-proxy.yaml
+/usr/bin/sd-proxy /home/user/.securedrop_proxy/sd-proxy.yaml
diff --git a/securedrop_proxy/VERSION b/securedrop_proxy/VERSION
@@ -1 +1 @@
-0.3.0
+0.3.1
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		/usr/bin/sd-proxy /etc/sd-proxy.yaml
		/usr/bin/sd-proxy /home/user/.securedrop_proxy/sd-proxy.yaml