Page MenuHomeDevCentral
Feed Advanced Search

Advanced Search
Use Results
Hide Query

Jun 3 2016

dereckson committed rVIPER653971e61ced: Notifications: add new 'devtools' group (authored by dereckson).
Notifications: add new 'devtools' group
Jun 3 2016, 23:50
dereckson committed rVIPER4f152124f6da: [Channel] Ensure we've a video title before print it (authored by dereckson).
[Channel] Ensure we've a video title before print it
Jun 3 2016, 23:50
dereckson committed rVIPER87fd7cbda285: Keruald notifications are for #nasqueron-logs (authored by dereckson).
Keruald notifications are for #nasqueron-logs
Jun 3 2016, 23:50
dereckson accepted D391: Import commits from Mercurial.
Jun 3 2016, 23:47
dereckson retitled D391: Import commits from Mercurial from to Import commits from Mercurial.
Jun 3 2016, 23:46
dereckson committed rVIPER27c6b0dde3c4: Arcanist configuration update (authored by dereckson).
Arcanist configuration update
Jun 3 2016, 23:40
dereckson closed D390: Arcanist configuration update by committing rVIPER27c6b0dde3c4: Arcanist configuration update.
Jun 3 2016, 23:40
dereckson accepted D390: Arcanist configuration update.
Jun 3 2016, 23:39
dereckson retitled D390: Arcanist configuration update from to Arcanist configuration update.
Jun 3 2016, 23:39
dereckson accepted D389: For 3rd users scripts: !download.
Jun 3 2016, 22:09
dereckson retitled D389: For 3rd users scripts: !download from to For 3rd users scripts: !download.
Jun 3 2016, 22:08
dereckson planned changes to D347: Notifications: summarize Docker Images rebuilds.

Doesn't work currently. We need to debug that.

Jun 3 2016, 22:06 · Notifications center, IRC
dereckson added a comment to T850: Add TrustSpace repos to notifications center.

GitHub → Notifications center

Jun 3 2016, 22:03 · TrustSpace, IRC, Nasqueron Docker deployment squad, Notifications center
dereckson moved T851: Map GitHub gates to Phabricator instances from Backlog to New services on the Notifications center board.
Jun 3 2016, 22:03 · TrustSpace, User-Dereckson, Notifications center
dereckson created T851: Map GitHub gates to Phabricator instances.
Jun 3 2016, 21:59 · TrustSpace, User-Dereckson, Notifications center
dereckson created T850: Add TrustSpace repos to notifications center.
Jun 3 2016, 21:55 · TrustSpace, IRC, Nasqueron Docker deployment squad, Notifications center
dereckson retitled D388: Serve https links from to Serve https links.
Jun 3 2016, 21:52
dereckson added a revision to T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content: D388: Serve https links.
Jun 3 2016, 21:52 · TrustSpace, security, Servers
dereckson set the color for TrustSpace to Green.
Jun 3 2016, 21:45
dereckson created TrustSpace.
Jun 3 2016, 21:45
dereckson created T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content.
Jun 3 2016, 21:30 · TrustSpace, security, Servers
dereckson closed T848: hotglue.nasqueron.org serves http:// content, a subtask of T654: Apply Let's encrypt SSL certificates for *.nasqueron.org, as Resolved.
Jun 3 2016, 18:02 · TLS certificates, security, Servers
dereckson closed T848: hotglue.nasqueron.org serves http:// content as Resolved.

Created a branch nasqueron_deploy on git@github.com:dereckson/hotglue2.git

Jun 3 2016, 18:02 · Servers
dereckson added a comment to T848: hotglue.nasqueron.org serves http:// content.

upstream — https://github.com/k0a1a/hotglue2/pull/8

Jun 3 2016, 17:47 · Servers
dereckson created T848: hotglue.nasqueron.org serves http:// content.
Jun 3 2016, 17:06 · Servers
dereckson closed T516: hotglue.nasqueron.org returns a 500 error as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson closed T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson closed T517: Apache SuEXEC isn't configured on Ysul as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson added a comment to T517: Apache SuEXEC isn't configured on Ysul.

Should normally definitively fixed with this:

Jun 3 2016, 17:01 · Servers
dereckson added a comment to T824: Tests for SuEXEC on Ysul.

Another thing to test: SuEXEC AP_DOC_ROOT should be /var/wwwroot.

Jun 3 2016, 16:59 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T214: Software security issues on Ysul.

So for reference, we can now customize SuEXEC settings.

Jun 3 2016, 16:58 · security, Servers
dereckson updated subscribers of T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
dereckson created T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul as "Open".

docroot switched back to /usr/local/www/data

Jun 3 2016, 15:44 · Servers
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Open.
Jun 3 2016, 15:44 · Servers
dereckson added a comment to T516: hotglue.nasqueron.org returns a 500 error.

Still the same error:

Jun 3 2016, 15:42 · Servers
dereckson created T845: Create a wiki farm.
Jun 3 2016, 15:31 · Servers
dereckson created T844: Handle GitHub issue_comment event.
Jun 3 2016, 14:05 · User-Dereckson, Notifications center
dereckson updated the task description for T843: Handle GitHub pull_request event.
Jun 3 2016, 14:05 · Notifications center
dereckson created T843: Handle GitHub pull_request event.
Jun 3 2016, 14:05 · Notifications center
dereckson created P197 Notifications entries for a GitHub pull request.
Jun 3 2016, 14:02 · Notifications center

Jun 2 2016

dereckson edited P196 Server block for login.nasqueron.org.
Jun 2 2016, 05:17 · Auth Grove, Nasqueron Docker deployment squad
dereckson committed rGROVE0f370cd5307d: Allow to serve https:// links behind a front-end server with SSL termination (authored by dereckson).
Allow to serve https:// links behind a front-end server with SSL termination
Jun 2 2016, 04:59
dereckson closed T492: When using a front-end server with SSL termination, back-end serves http:// links., a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
Jun 2 2016, 04:59 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson closed T492: When using a front-end server with SSL termination, back-end serves http:// links. as Resolved by committing rGROVE0f370cd5307d: Allow to serve https:// links behind a front-end server with SSL termination.
Jun 2 2016, 04:59 · security, Auth Grove
dereckson closed D25: Allow to serve https:// links behind a front-end server with SSL termination by committing rGROVE0f370cd5307d: Allow to serve https:// links behind a front-end server with SSL termination.
Jun 2 2016, 04:59
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Improve Docker command, so out of the box Docker installation won't expose the port to world.

Jun 2 2016, 04:58
dereckson added a comment to D25: Allow to serve https:// links behind a front-end server with SSL termination.
In D25#6159, @xcombelle wrote:

@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch

Jun 2 2016, 04:36
dereckson created P196 Server block for login.nasqueron.org.
Jun 2 2016, 04:35 · Auth Grove, Nasqueron Docker deployment squad

Jun 1 2016

dereckson added a comment to D387: Arcanist configuration.

Upstream typo fixed in Bootstrap, my pull request has been merged.

Jun 1 2016, 22:09
dereckson edited P195 AuthenticatesAndRegistersUsers.diff.
Jun 1 2016, 20:40
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Ready to merge. @xcombelle Could you check that looks good to you?

Jun 1 2016, 20:36
dereckson created T842: Fix license in Composer.
Jun 1 2016, 18:38 · Auth Grove
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Test for some proxy scheme.

Jun 1 2016, 18:30
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.
  • Rebased against 2cb53eabe
  • Fixed typo (found by arc lint spelling)
Jun 1 2016, 18:10
dereckson committed rGROVE2cb53eabe359: Arcanist configuration (authored by dereckson).
Arcanist configuration
Jun 1 2016, 18:07
dereckson closed D387: Arcanist configuration by committing rGROVE2cb53eabe359: Arcanist configuration.
Jun 1 2016, 18:07
dereckson accepted D387: Arcanist configuration.
Jun 1 2016, 18:06
dereckson retitled D387: Arcanist configuration from to Arcanist configuration.
Jun 1 2016, 18:04
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Rebased against 0d90fbb8ff2c.

Jun 1 2016, 17:43
dereckson committed rGROVE0d90fbb8ff2c: Upgrade Laravel bootstrap code to 5.2 style (authored by dereckson).
Upgrade Laravel bootstrap code to 5.2 style
Jun 1 2016, 17:42
dereckson closed D386: Upgrade Laravel bootstrap code to 5.2 style by committing rGROVE0d90fbb8ff2c: Upgrade Laravel bootstrap code to 5.2 style.
Jun 1 2016, 17:42
dereckson accepted D386: Upgrade Laravel bootstrap code to 5.2 style.
Jun 1 2016, 17:42
dereckson retitled D386: Upgrade Laravel bootstrap code to 5.2 style from to Upgrade Laravel bootstrap code to 5.2 style.
Jun 1 2016, 17:42
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.
  • Tests have been added for TrustProxy None/All. It runs independantly of the main test suite, as the configuration doesn't seem to be refreshed between tests, even using refreshApplication method.
  • REMOTE_ADDR is now handled through Symfony Request component
  • Add a link to Symfony trust proxy method documentation
Jun 1 2016, 17:40
dereckson committed rGROVE1460c3162108: Extra integration test for /auth/reset view (authored by dereckson).
Extra integration test for /auth/reset view
Jun 1 2016, 14:54
dereckson closed D385: Extra integration test for /auth/reset view by committing rGROVE1460c3162108: Extra integration test for /auth/reset view.
Jun 1 2016, 14:54
dereckson accepted D385: Extra integration test for /auth/reset view.
Jun 1 2016, 14:53
dereckson retitled D385: Extra integration test for /auth/reset view from to Extra integration test for /auth/reset view.
Jun 1 2016, 14:53
dereckson committed rGROVEa899004350af: Fix whitespace issues (authored by dereckson).
Fix whitespace issues
Jun 1 2016, 14:52
dereckson closed D384: Fix whitespace issues by committing rGROVEa899004350af: Fix whitespace issues.
Jun 1 2016, 14:52
dereckson accepted D384: Fix whitespace issues.
Jun 1 2016, 14:51
dereckson retitled D384: Fix whitespace issues from to Fix whitespace issues.
Jun 1 2016, 14:50
dereckson committed rGROVE43423833776e: Integration tests for auth views (authored by dereckson).
Integration tests for auth views
Jun 1 2016, 14:41
dereckson closed D383: Integration tests for auth views by committing rGROVE43423833776e: Integration tests for auth views.
Jun 1 2016, 14:41
dereckson accepted D383: Integration tests for auth views.
Jun 1 2016, 14:40
dereckson retitled D383: Integration tests for auth views from to Integration tests for auth views.
Jun 1 2016, 14:40

May 31 2016

dereckson added a comment to T824: Tests for SuEXEC on Ysul.

So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.

May 31 2016, 21:28 · Operations sprints (Consolidate them all), Servers
dereckson committed rOPS86c8e06e7946: Check if Apache is up and SuEXEC installed on Ysul (authored by dereckson).
Check if Apache is up and SuEXEC installed on Ysul
May 31 2016, 21:21
dereckson closed D371: Check if Apache is up and SuEXEC installed on Ysul by committing rOPS86c8e06e7946: Check if Apache is up and SuEXEC installed on Ysul.
May 31 2016, 21:20
dereckson closed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as Resolved.

That doesn't need any Postfix restart.

May 31 2016, 21:19 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers
dereckson raised the priority of T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from High to Unbreak Now!.
May 31 2016, 20:52 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Adressed security concerns:

May 31 2016, 19:21
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Rebased against master.

May 31 2016, 19:14
dereckson added a parent task for T492: When using a front-end server with SSL termination, back-end serves http:// links.: T271: Deploy Auth Grove to login.nasqueron.org.
May 31 2016, 18:52 · security, Auth Grove
dereckson added a subtask for T271: Deploy Auth Grove to login.nasqueron.org: T492: When using a front-end server with SSL termination, back-end serves http:// links..
May 31 2016, 18:52 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added a comment to D25: Allow to serve https:// links behind a front-end server with SSL termination.

To address security concerns, I'm going to change this, so no proxy is trusted by default.

May 31 2016, 18:48
dereckson renamed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from renew SSL certificate for mail.nasqueron.org to Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container.
May 31 2016, 17:10 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers

May 30 2016

dereckson triaged T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as High priority.
May 30 2016, 14:31 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers

May 23 2016

dereckson committed rGROVEa889e0d62a8f: Docker instructions in README (authored by dereckson).
Docker instructions in README
May 23 2016, 16:39
dereckson closed D382: Docker instructions in README by committing rGROVEa889e0d62a8f: Docker instructions in README.
May 23 2016, 16:39
dereckson added projects to T841: Add a #nolog feature to PhabricatorBot: Servers, IRC, DevCentral.
May 23 2016, 16:37 · DevCentral, IRC, Servers
dereckson claimed T841: Add a #nolog feature to PhabricatorBot.
May 23 2016, 16:37 · DevCentral, IRC, Servers

May 22 2016

dereckson updated the diff for D382: Docker instructions in README.

Improved README

May 22 2016, 20:58
dereckson retitled D382: Docker instructions in README from to Docker instructions in README.
May 22 2016, 20:58
dereckson closed T812: Add required HTML5 attribute to required <input> fields as Invalid.

Every required field in resources/views/auth/ has already a required attribute.

May 22 2016, 20:38 · good-first-issue, Auth Grove
dereckson claimed T812: Add required HTML5 attribute to required <input> fields.
May 22 2016, 20:32 · good-first-issue, Auth Grove
dereckson added a comment to T271: Deploy Auth Grove to login.nasqueron.org.

P194 run-login
1#!/bin/sh
2
3# -------------------------------------------------------------
4# Auth Grove
5# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6# Author: Sébastien Santoro aka Dereckson
7# Project: Nasqueron
8# Created: 2016-05-21
9# Description: SSO for Nasqueron services.
10# Image: nasqueron/auth-grove
11# Services used: MySQL server (acquisitariat)
12# Docker volume (/data/notifications/storage)
13# -------------------------------------------------------------
14
15# -------------------------------------------------------------
16# Container parameters
17# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
18
19INSTANCE_NAME=login
20PORT=25080
21MYSQL_INSTANCE=acquisitariat
22STORAGE=/data/login/storage
23CANONICAL_URL=http://login.nasqueron.org
24
25# -------------------------------------------------------------
26# Database parameters
27#
28# Get credentials from zr
29# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
30
31MYSQL_HOST=mysql
32MYSQL_USER=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67 username`
33MYSQL_PASS=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67`
34MYSQL_DB=$INSTANCE_NAME
35
36# -------------------------------------------------------------
37# Run the container
38# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
39
40# Checks container isn't running
41docker-container-status $INSTANCE_NAME > /dev/null
42if [ "$?" -lt 2 ]; then
43 echo "Container is already running."
44 echo "To force relaunch, try docker stop $INSTANCE_NAME ; docker rm $INSTANCE_NAME ; $0"
45 exit 1
46fi
47
48mkdir -p $STORAGE
49chcon -Rt svirt_sandbox_file_t $STORAGE
50chown 431:433 $STORAGE
51docker run -t -d \
52 --link $MYSQL_INSTANCE:$MYSQL_HOST \
53 -p $PORT:80 \
54 -e DB_HOST=$MYSQL_HOST \
55 -e DB_DATABASE=$MYSQL_DB \
56 -e DB_USERNAME=$MYSQL_USER \
57 -e DB_PASSWORD=$MYSQL_PASS \
58 -e CANONICAL_URL="$CANONICAL_URL" \
59 --name $INSTANCE_NAME nasqueron/auth-grove
60
61echo "Deployment done at `date`."
62exit 0

May 22 2016, 20:27 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson edited P194 run-login.
May 22 2016, 20:27
dereckson closed T839: Current URL detection code in views aren't coherent as Resolved.

app.url setting is for CLI links

May 22 2016, 20:23 · Auth Grove
First
Prev
Next
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator