Created attachment 206267 [details]
miniflux conf as file
miniflux has supported passing the configuration as a file instead of environment for a while now. A poisoned file passed as environment could present an attack surface, so passing as a conf file is definitely a safer way to go.
This patch also fixes a few Makefile nits.
Created attachment 206268 [details]
miniflux conf as file + contrib
Updating to patch to depend on postgresql-contrib to bring in hstore, which miniflux requires.
Created attachment 206273 [details]
Also included: update to 2.0.17.
Created attachment 206275 [details]
2.0.17 + fixes
contrib should be installed with server, not client.
It installs databases/postgresql95-client as well, is it intended, I'm wonder why we need client in this case.
Good question. Check out https://miniflux.app/docs/installation.html#database
New installations (and migrations from older versions) require the hstore extension, which is only available from the -contrib package.
It only installs it if the server option is enabled, because the client end doesn't need the hstore lib.
A commit references this bug:
Date: Mon Aug 12 14:04:08 UTC 2019
New revision: 508736
Upgrade to 2.0.17
Submitted by: adamw