Add caddy-autogen app, tests, and agent policy updates

2026-03-18 16:19:01 +01:00
commit 9ea8ca421b
19 changed files with 1273 additions and 0 deletions
@@ -0,0 +1,30 @@
+# App Template
+
+Kopiera denna mapp till `Apps/<app-id>`.
+
+Minimikrav per appmapp:
+
+- `docker-compose.yaml`
+- `README.md` (vad appen gör, privilegier/mounts/portar)
+
+## Säkerhetsavvikelser
+
+Skriv denna sektion om appen kräver högrisk-inställningar, till exempel:
+
+- `privileged: true`
+- `network_mode: host`
+- mount av `/var/run/docker.sock`
+
+Beskriv:
+
+- varför det behövs,
+- vilka alternativ som utvärderats,
+- vilka risker det innebär.
+
+Vanliga extrafiler:
+
+- `icon.png`
+- `screenshot-1.png`
+- `screenshot-2.png`
+
+Notera: vissa publika appstores förväntar sig `docker-compose.yml`. Vi håller `.yaml` internt och hanterar eventuell anpassning i release-flödet.
@@ -0,0 +1,67 @@
+name: sample-app
+
+services:
+  app:
+    image: ghcr.io/example/sample-app:1.0.0
+    container_name: sample-app
+    restart: unless-stopped
+
+    environment:
+      TZ: ${TZ}
+      PUID: ${PUID}
+      PGID: ${PGID}
+      WEBUI_PORT: ${WEBUI_PORT:-8080}
+
+    ports:
+      - target: 8080
+        published: ${WEBUI_PORT:-8080}
+        protocol: tcp
+
+    volumes:
+      - type: bind
+        source: /DATA/AppData/$AppID/config
+        target: /config
+
+    # Secure-by-default baseline. Relax only if appen kräver det.
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+
+    x-casaos:
+      envs:
+        - container: TZ
+          description:
+            en_US: Timezone, for example Europe/Stockholm
+        - container: PUID
+          description:
+            en_US: User ID for filesystem permissions
+        - container: PGID
+          description:
+            en_US: Group ID for filesystem permissions
+      ports:
+        - container: "8080"
+          description:
+            en_US: Web UI port
+      volumes:
+        - container: /config
+          description:
+            en_US: Application configuration directory
+
+x-casaos:
+  architectures:
+    - amd64
+    - arm64
+  main: app
+  category: Utilities
+  author: Zima Apps Team
+  developer: example
+  icon: https://example.invalid/icon.png
+  tagline:
+    en_US: Replace with a short one-line value proposition
+  description:
+    en_US: Replace with a clear description of what the app does
+  title:
+    en_US: Sample App
+  index: /
+  port_map: ${WEBUI_PORT:-8080}