deployment: Generate deb and rpm packages (#1458)

ospkg/conf/config.yaml

@@ -0,0 +1,22 @@
+# Required settings below.  See complete documentation at https://www.pomerium.com/reference/
+
+# To run on :443 set AmbientCapabilities=CAP_NET_BIND_SERVICE
+# in a systemd override
+address: :8443
+
+authenticate_service_url: https://authenticate.localhost.pomerium.io
+certificates:
+  - cert: /etc/pomerium/cert.pem
+    key: /etc/pomerium/key.pem
+shared_secret: XXXXXX
+cookie_secret: YYYYY
+idp_provider: "google"
+idp_client_id: XXXX
+idp_client_secret: YYYY
+idp_service_account: XXXXXX
+
+policy:
+  - from: https://yoursite.localhost.pomerium.io
+    to: https://yoursite.local
+    allowed_users:
+      - user@domain.com

ospkg/pomerium.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Pomerium
+
+[Service]
+ExecStart=/usr/sbin/pomerium -config /etc/pomerium/config.yaml
+User=pomerium
+Group=pomerium
+Environment=AUTOCERT_DIR=/etc/pomerium/
+
+[Install]
+WantedBy=multi-user.target

ospkg/postinstall.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+chown pomerium:pomerium -R /etc/pomerium
+chmod 750 /etc/pomerium

ospkg/preinstall.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+if ! getent passwd pomerium >/dev/null; then
+    useradd --system -d / -s /sbin/nologin pomerium
+fi