Page MenuHomeDevCentral
Differential D2179

Restrict access to ACME DNS
ClosedPublic
Actions

Authored by dereckson on Feb 4 2020, 19:28.
Tags
None
Referenced Files
F40606639: D2179.diff
Sat, Aug 1, 18:58
Unknown Object (File)
Thu, Jul 30, 20:29
Unknown Object (File)
Thu, Jul 30, 14:43
Unknown Object (File)
Thu, Jul 30, 14:42
Unknown Object (File)
Thu, Jul 30, 02:48
Unknown Object (File)
Wed, Jul 29, 07:50
Unknown Object (File)
Mon, Jul 20, 07:32
Unknown Object (File)
Fri, Jul 10, 18:05
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T1580: Deploy ACME-specific DNS server
Commits
rOPSefa09f172404: Restrict access to ACME DNS
Summary

Only Nasqueron servers can access the Go server.

Anyone can get the homepage.

Ref T1580.

Test Plan

Tested on Equatower with various Curl from a Nasqueron server
and a workstation to /, /index.html and /register.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
master
Build Status
Buildable 3382
Build 3631: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Feb 4 2020, 19:28
dereckson created this revision.
Harbormaster completed remote builds in B3382: Diff 5484.Feb 4 2020, 19:29
dereckson accepted this revision.Feb 4 2020, 19:29
This revision is now accepted and ready to land.Feb 4 2020, 19:29
Closed by commit rOPSefa09f172404: Restrict access to ACME DNS (authored by dereckson). · Explain WhyFeb 4 2020, 19:30
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPSefa09f172404: Restrict access to ACME DNS.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
containers/
2 lines
nginx/
files/
includes/
21 lines
vhosts/
64 lines

Diff 5484

View Options

roles/paas-docker/containers/acme_dns.sls

Loading...
View Options

roles/paas-docker/nginx/files/includes/geo_nasqueron

Loading...
View Options

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator