From 52dd6e7ff07bc16c1c5c131b82dff60ecb1b9779 Mon Sep 17 00:00:00 2001 From: Guido Schmit Date: Thu, 16 Jul 2026 19:13:15 +0200 Subject: [PATCH] docs: F-Droid serving via existing reverse proxy (no nginx/TLS on the LXC) --- FDROID.md | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/FDROID.md b/FDROID.md index 0169fae..b61d003 100644 --- a/FDROID.md +++ b/FDROID.md @@ -26,21 +26,26 @@ Mac (where the keystore lives). ### One-time: set up the LXC ```bash -# Debian/Ubuntu LXC — fdroidserver + the Android build-tools it reads APKs with, -# plus a webserver. +# Debian/Ubuntu LXC — fdroidserver + the Android build-tools it reads APKs with. apt update -apt install -y fdroidserver android-sdk-build-tools default-jdk nginx +apt install -y fdroidserver android-sdk-build-tools default-jdk # (if the distro has no android-sdk-build-tools pkg, install Android command-line # tools and `sdkmanager "build-tools;34.0.0"`, then point $ANDROID_HOME at it) # Create the repo once (generates config.yml + an index-signing key) mkdir -p /srv/fdroid && cd /srv/fdroid fdroid init - -# Serve /srv/fdroid via nginx/caddy at https://fdroid.scarriffle.com/fdroid -# (document root = /srv/fdroid; TLS via your existing reverse proxy / certbot) ``` +**Serving:** you already run a reverse proxy, so it terminates TLS for +`fdroid.scarriffle.com`. Either point the reverse proxy straight at the +`/srv/fdroid` directory (no webserver on the LXC needed — just `fdroidserver` to +generate), or run a tiny static server on the LXC over plain HTTP and forward to +it, e.g. `darkhttpd /srv/fdroid --port 8080` (or `caddy file-server` / +`python3 -m http.server`). Only requirement: the public URL is reachable over +**HTTPS** (the reverse proxy does that); it's plain static file serving, no +directory listing needed. + ### Each release ```bash