Page MenuHomeDevCentral
Differential D2179

Restrict access to ACME DNS
ClosedPublic
Actions

Authored by dereckson on Feb 4 2020, 19:28.
Tags
None
Referenced Files
F15802455: D2179.diff
Sat, Dec 6, 03:06
Unknown Object (File)
Wed, Dec 3, 23:31
Unknown Object (File)
Mon, Dec 1, 15:30
Unknown Object (File)
Mon, Dec 1, 15:30
Unknown Object (File)
Mon, Dec 1, 15:30
Unknown Object (File)
Fri, Nov 28, 12:23
Unknown Object (File)
Wed, Nov 26, 19:14
Unknown Object (File)
Mon, Nov 24, 07:34
View All Files
Subscribers
None

Details

Reviewers
dereckson
Maniphest Tasks
T1580: Deploy ACME-specific DNS server
Commits
rOPSefa09f172404: Restrict access to ACME DNS
Summary

Only Nasqueron servers can access the Go server.

Anyone can get the homepage.

Ref T1580.

Test Plan

Tested on Equatower with various Curl from a Nasqueron server
and a workstation to /, /index.html and /register.

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Feb 4 2020, 19:28
dereckson created this revision.
Harbormaster completed remote builds in B3382: Diff 5484.Feb 4 2020, 19:29
dereckson accepted this revision.Feb 4 2020, 19:29
This revision is now accepted and ready to land.Feb 4 2020, 19:29
Closed by commit rOPSefa09f172404: Restrict access to ACME DNS (authored by dereckson). · Explain WhyFeb 4 2020, 19:30
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPSefa09f172404: Restrict access to ACME DNS.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
containers/
2 lines
nginx/
files/
includes/
21 lines
vhosts/
64 lines

Diff 5485

View Options

roles/paas-docker/containers/acme_dns.sls

Loading...
View Options

roles/paas-docker/nginx/files/includes/geo_nasqueron

Loading...
View Options

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator