Scarriffle/Calendarr-Android
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: F-Droid serving via existing reverse proxy (no nginx/TLS on the LXC)

Browse Source
This commit is contained in:
Guido Schmit
2026-07-16 19:13:15 +02:00
parent 42187b8254
commit 52dd6e7ff0
1 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
FDROID.md
View File

@@ -26,21 +26,26 @@ Mac (where the keystore lives).
### One-time: set up the LXC ### One-time: set up the LXC
```bash ```bash
# Debian/Ubuntu LXC — fdroidserver + the Android build-tools it reads APKs with, # Debian/Ubuntu LXC — fdroidserver + the Android build-tools it reads APKs with.
# plus a webserver.
apt update apt update
apt install -y fdroidserver android-sdk-build-tools default-jdk nginx apt install -y fdroidserver android-sdk-build-tools default-jdk
# (if the distro has no android-sdk-build-tools pkg, install Android command-line # (if the distro has no android-sdk-build-tools pkg, install Android command-line
# tools and `sdkmanager "build-tools;34.0.0"`, then point $ANDROID_HOME at it) # tools and `sdkmanager "build-tools;34.0.0"`, then point $ANDROID_HOME at it)
# Create the repo once (generates config.yml + an index-signing key) # Create the repo once (generates config.yml + an index-signing key)
mkdir -p /srv/fdroid && cd /srv/fdroid mkdir -p /srv/fdroid && cd /srv/fdroid
fdroid init fdroid init
# Serve /srv/fdroid via nginx/caddy at https://fdroid.scarriffle.com/fdroid
# (document root = /srv/fdroid; TLS via your existing reverse proxy / certbot)
``` ```
**Serving:** you already run a reverse proxy, so it terminates TLS for
`fdroid.scarriffle.com`. Either point the reverse proxy straight at the
`/srv/fdroid` directory (no webserver on the LXC needed — just `fdroidserver` to
generate), or run a tiny static server on the LXC over plain HTTP and forward to
it, e.g. `darkhttpd /srv/fdroid --port 8080` (or `caddy file-server` /
`python3 -m http.server`). Only requirement: the public URL is reachable over
**HTTPS** (the reverse proxy does that); it's plain static file serving, no
directory listing needed.
### Each release ### Each release
```bash ```bash