3 commits

Author	SHA1	Message	Date
CroneKorkN	e842e7caa6	left4me: wire LEFT4ME_PORT_RANGE_{START,END} into web.env ... Bundle metadata declares port_range_start/end in defaults, but the running app (l4d2web/config.py:34-35) reads them from LEFT4ME_PORT_RANGE_START/END env vars. Without these in web.env, the bundle's metadata values were dead code and the app fell back to its own hardcoded defaults. Wiring them through closes the loop.	2026-05-10 17:19:02 +02:00
CroneKorkN	3afd4d60cc	left4me: add Mako templates for host.env and web.env ... SECRET_KEY pulled from node metadata (set via !32_random_bytes_as_base64_for: in the node file). SESSION_COOKIE_SECURE flips to true since nginx fronts gunicorn with TLS.	2026-05-10 17:14:36 +02:00
CroneKorkN	6db792ce6a	left4me: vendor privileged helpers + sudoers/sysctl/sandbox-resolv ... Copied verbatim from left4me/deploy/files/. Helpers are the trust unit the sudoers rules grant access to; left as static files (not generated) so the audit trail stays grep-able. Modes/owners are set via items.py in the next commit.	2026-05-10 17:10:17 +02:00