Page MenuHomeDevCentral
Differential D2179

Restrict access to ACME DNS
ClosedPublic
Actions

Authored by dereckson on Feb 4 2020, 19:28.
Tags
None
Referenced Files
F24052014: D2179.diff
Mon, Feb 9, 02:22
Unknown Object (File)
Sat, Feb 7, 16:23
Unknown Object (File)
Fri, Feb 6, 12:34
Unknown Object (File)
Fri, Feb 6, 10:46
Unknown Object (File)
Fri, Feb 6, 09:08
Unknown Object (File)
Fri, Feb 6, 04:12
Unknown Object (File)
Thu, Feb 5, 05:05
Unknown Object (File)
Wed, Feb 4, 23:42
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T1580: Deploy ACME-specific DNS server
Commits
rOPSefa09f172404: Restrict access to ACME DNS
Summary

Only Nasqueron servers can access the Go server.

Anyone can get the homepage.

Ref T1580.

Test Plan

Tested on Equatower with various Curl from a Nasqueron server
and a workstation to /, /index.html and /register.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Feb 4 2020, 19:28
dereckson created this revision.
Harbormaster completed remote builds in B3382: Diff 5484.Feb 4 2020, 19:29
dereckson accepted this revision.Feb 4 2020, 19:29
This revision is now accepted and ready to land.Feb 4 2020, 19:29
Closed by commit rOPSefa09f172404: Restrict access to ACME DNS (authored by dereckson). · Explain WhyFeb 4 2020, 19:30
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPSefa09f172404: Restrict access to ACME DNS.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
containers/
2 lines
nginx/
files/
includes/
21 lines
vhosts/
64 lines

Diff 5485

View Options

roles/paas-docker/containers/acme_dns.sls

Loading...
View Options

roles/paas-docker/nginx/files/includes/geo_nasqueron

Loading...
View Options

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator