Improve Docker command, so out of the box Docker installation won't expose the port to world.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Jun 2 2016
In D25#6159, @xcombelle wrote:@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch
Jun 1 2016
@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch
Upstream typo fixed in Bootstrap, my pull request has been merged.
Ready to merge. @xcombelle Could you check that looks good to you?
Test for some proxy scheme.
- Rebased against 2cb53eabe
- Fixed typo (found by arc lint spelling)
Rebased against 0d90fbb8ff2c.
- Tests have been added for TrustProxy None/All. It runs independantly of the main test suite, as the configuration doesn't seem to be refreshed between tests, even using refreshApplication method.
- REMOTE_ADDR is now handled through Symfony Request component
- Add a link to Symfony trust proxy method documentation
May 31 2016
We can have the complete path to the executable through
httpd -V | grep SUEXEC_BIN | grep -o "/.*" | sed 's/.$//'
So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.
That doesn't need any Postfix restart.
Adressed security concerns:
Rebased against master.
To address security concerns, I'm going to change this, so no proxy is trusted by default.
May 30 2016
May 27 2016
May 23 2016
May 22 2016
Improved README
Every required field in resources/views/auth/ has already a required attribute.
| 1 | #!/bin/sh |
|---|---|
| 2 | |
| 3 | # ------------------------------------------------------------- |
| 4 | # Auth Grove |
| 5 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 6 | # Author: Sébastien Santoro aka Dereckson |
| 7 | # Project: Nasqueron |
| 8 | # Created: 2016-05-21 |
| 9 | # Description: SSO for Nasqueron services. |
| 10 | # Image: nasqueron/auth-grove |
| 11 | # Services used: MySQL server (acquisitariat) |
| 12 | # Docker volume (/data/notifications/storage) |
| 13 | # ------------------------------------------------------------- |
| 14 | |
| 15 | # ------------------------------------------------------------- |
| 16 | # Container parameters |
| 17 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 18 | |
| 19 | INSTANCE_NAME=login |
| 20 | PORT=25080 |
| 21 | MYSQL_INSTANCE=acquisitariat |
| 22 | STORAGE=/data/login/storage |
| 23 | CANONICAL_URL=http://login.nasqueron.org |
| 24 | |
| 25 | # ------------------------------------------------------------- |
| 26 | # Database parameters |
| 27 | # |
| 28 | # Get credentials from zr |
| 29 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 30 | |
| 31 | MYSQL_HOST=mysql |
| 32 | MYSQL_USER=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67 username` |
| 33 | MYSQL_PASS=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67` |
| 34 | MYSQL_DB=$INSTANCE_NAME |
| 35 | |
| 36 | # ------------------------------------------------------------- |
| 37 | # Run the container |
| 38 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 39 | |
| 40 | # Checks container isn't running |
| 41 | docker-container-status $INSTANCE_NAME > /dev/null |
| 42 | if [ "$?" -lt 2 ]; then |
| 43 | echo "Container is already running." |
| 44 | echo "To force relaunch, try docker stop $INSTANCE_NAME ; docker rm $INSTANCE_NAME ; $0" |
| 45 | exit 1 |
| 46 | fi |
| 47 | |
| 48 | mkdir -p $STORAGE |
| 49 | chcon -Rt svirt_sandbox_file_t $STORAGE |
| 50 | chown 431:433 $STORAGE |
| 51 | docker run -t -d \ |
| 52 | --link $MYSQL_INSTANCE:$MYSQL_HOST \ |
| 53 | -p $PORT:80 \ |
| 54 | -e DB_HOST=$MYSQL_HOST \ |
| 55 | -e DB_DATABASE=$MYSQL_DB \ |
| 56 | -e DB_USERNAME=$MYSQL_USER \ |
| 57 | -e DB_PASSWORD=$MYSQL_PASS \ |
| 58 | -e CANONICAL_URL="$CANONICAL_URL" \ |
| 59 | --name $INSTANCE_NAME nasqueron/auth-grove |
| 60 | |
| 61 | echo "Deployment done at `date`." |
| 62 | exit 0 |
app.url setting is for CLI links
May 21 2016
npm:
- install Gulp globally
- run npm install in Dockerfile, not in container launch time setup
Can't repro with Node 6.
Spaces
$ php artisan migrate Migrated: 2016_05_21_224200_set_users_table_auto_increment $ php artisan tinker >>> DB::select("SHOW CREATE TABLE users"); => [ {#698 +"Table": "users" +"Create Table": """ CREATE TABLE `users` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `username` varchar(255) COLLATE utf8_unicode_ci DEFAULT NULL, `fullname` varchar(255) COLLATE utf8_unicode_ci DEFAULT NULL, `email` varchar(255) COLLATE utf8_unicode_ci NOT NULL, `password` varchar(60) COLLATE utf8_unicode_ci NOT NULL, `remember_token` varchar(100) COLLATE utf8_unicode_ci DEFAULT NULL, `created_at` timestamp NOT NULL DEFAULT '0000-00-00 00:00:00', `updated_at` timestamp NOT NULL DEFAULT '0000-00-00 00:00:00', PRIMARY KEY (`id`), UNIQUE KEY `users_email_unique` (`email`) ) ENGINE=InnoDB AUTO_INCREMENT=1000000000 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci""" } ]