Page MenuHomeDevCentral
Differential D2179

Restrict access to ACME DNS
ClosedPublic
Actions

Authored by dereckson on Feb 4 2020, 19:28.
Tags
None
Referenced Files
F12069033: D2179.id.diff
Wed, Oct 1, 01:37
Unknown Object (File)
Fri, Sep 26, 23:22
Unknown Object (File)
Thu, Sep 25, 10:40
Unknown Object (File)
Thu, Sep 25, 08:50
Unknown Object (File)
Thu, Sep 25, 08:30
Unknown Object (File)
Thu, Sep 25, 08:30
Unknown Object (File)
Wed, Sep 24, 14:49
Unknown Object (File)
Fri, Sep 19, 18:03
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T1580: Deploy ACME-specific DNS server
Commits
rOPSefa09f172404: Restrict access to ACME DNS
Summary

Only Nasqueron servers can access the Go server.

Anyone can get the homepage.

Ref T1580.

Test Plan

Tested on Equatower with various Curl from a Nasqueron server
and a workstation to /, /index.html and /register.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Feb 4 2020, 19:28
dereckson created this revision.
Harbormaster completed remote builds in B3382: Diff 5484.Feb 4 2020, 19:29
dereckson accepted this revision.Feb 4 2020, 19:29
This revision is now accepted and ready to land.Feb 4 2020, 19:29
Closed by commit rOPSefa09f172404: Restrict access to ACME DNS (authored by dereckson). · Explain WhyFeb 4 2020, 19:30
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPSefa09f172404: Restrict access to ACME DNS.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
containers/
2 lines
nginx/
files/
includes/
21 lines
vhosts/
64 lines

Diff 5485

View Options

roles/paas-docker/containers/acme_dns.sls

Loading...
View Options

roles/paas-docker/nginx/files/includes/geo_nasqueron

Loading...
View Options

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator