Page MenuHomeDevCentral
Differential D2179

Restrict access to ACME DNS
ClosedPublic
Actions

Authored by dereckson on Feb 4 2020, 19:28.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Mar 16, 18:47
Unknown Object (File)
Tue, Mar 10, 18:13
Unknown Object (File)
Sat, Mar 7, 05:00
Unknown Object (File)
Thu, Mar 5, 19:05
Unknown Object (File)
Mon, Mar 2, 00:13
Unknown Object (File)
Sun, Mar 1, 15:12
Unknown Object (File)
Sat, Feb 28, 13:24
Unknown Object (File)
Sat, Feb 28, 13:18
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T1580: Deploy ACME-specific DNS server
Commits
rOPSefa09f172404: Restrict access to ACME DNS
Summary

Only Nasqueron servers can access the Go server.

Anyone can get the homepage.

Ref T1580.

Test Plan

Tested on Equatower with various Curl from a Nasqueron server
and a workstation to /, /index.html and /register.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Feb 4 2020, 19:28
dereckson created this revision.
Harbormaster completed remote builds in B3382: Diff 5484.Feb 4 2020, 19:29
dereckson accepted this revision.Feb 4 2020, 19:29
This revision is now accepted and ready to land.Feb 4 2020, 19:29
Closed by commit rOPSefa09f172404: Restrict access to ACME DNS (authored by dereckson). · Explain WhyFeb 4 2020, 19:30
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPSefa09f172404: Restrict access to ACME DNS.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
containers/
2 lines
nginx/
files/
includes/
21 lines
vhosts/
64 lines

Diff 5485

View Options

roles/paas-docker/containers/acme_dns.sls

Loading...
View Options

roles/paas-docker/nginx/files/includes/geo_nasqueron

Loading...
View Options

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator