Page MenuHomeDevCentral
Feed All Stories

Jun 3 2016

dereckson updated subscribers of T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
dereckson created T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
Sandlayth updated subscribers of T846: Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:11 · Servers, Nasqueron Docker deployment squad
Sandlayth renamed T846: Migrate Pootle from Ysul to a docker container on Dwellers from Migrate Pottle from Ysul to a docker container on Dwellers to Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:08 · Servers, Nasqueron Docker deployment squad
Sandlayth created T846: Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:05 · Servers, Nasqueron Docker deployment squad
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul as "Open".

docroot switched back to /usr/local/www/data

Jun 3 2016, 15:44 · Servers
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Open.
Jun 3 2016, 15:44 · Servers
dereckson added a comment to T516: hotglue.nasqueron.org returns a 500 error.

Still the same error:

Jun 3 2016, 15:42 · Servers
dereckson created T845: Create a wiki farm.
Jun 3 2016, 15:31 · Servers
dereckson created T844: Handle GitHub issue_comment event.
Jun 3 2016, 14:05 · User-Dereckson, Notifications center
dereckson updated the task description for T843: Handle GitHub pull_request event.
Jun 3 2016, 14:05 · Notifications center
dereckson created T843: Handle GitHub pull_request event.
Jun 3 2016, 14:05 · Notifications center
dereckson created P197 Notifications entries for a GitHub pull request.
Jun 3 2016, 14:02 · Notifications center

Jun 2 2016

dereckson edited P196 Server block for login.nasqueron.org.
Jun 2 2016, 05:17 · Auth Grove, Nasqueron Docker deployment squad
dereckson committed rGROVE0f370cd5307d: Allow to serve https:// links behind a front-end server with SSL termination (authored by dereckson).
Allow to serve https:// links behind a front-end server with SSL termination
Jun 2 2016, 04:59
dereckson closed T492: When using a front-end server with SSL termination, back-end serves http:// links., a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
Jun 2 2016, 04:59 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson closed T492: When using a front-end server with SSL termination, back-end serves http:// links. as Resolved by committing rGROVE0f370cd5307d: Allow to serve https:// links behind a front-end server with SSL termination.
Jun 2 2016, 04:59 · security, Auth Grove
dereckson closed D25: Allow to serve https:// links behind a front-end server with SSL termination by committing rGROVE0f370cd5307d: Allow to serve https:// links behind a front-end server with SSL termination.
Jun 2 2016, 04:59
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Improve Docker command, so out of the box Docker installation won't expose the port to world.

Jun 2 2016, 04:58
dereckson added a comment to D25: Allow to serve https:// links behind a front-end server with SSL termination.
In D25#6159, @xcombelle wrote:

@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch

Jun 2 2016, 04:36
dereckson created P196 Server block for login.nasqueron.org.
Jun 2 2016, 04:35 · Auth Grove, Nasqueron Docker deployment squad

Jun 1 2016

xcombelle accepted D25: Allow to serve https:// links behind a front-end server with SSL termination.
Jun 1 2016, 23:27
xcombelle added a comment to D25: Allow to serve https:// links behind a front-end server with SSL termination.

@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch

Jun 1 2016, 23:26
dereckson added a comment to D387: Arcanist configuration.

Upstream typo fixed in Bootstrap, my pull request has been merged.

Jun 1 2016, 22:09
dereckson edited P195 AuthenticatesAndRegistersUsers.diff.
Jun 1 2016, 20:40
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Ready to merge. @xcombelle Could you check that looks good to you?

Jun 1 2016, 20:36
dereckson created T842: Fix license in Composer.
Jun 1 2016, 18:38 · Auth Grove
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Test for some proxy scheme.

Jun 1 2016, 18:30
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.
  • Rebased against 2cb53eabe
  • Fixed typo (found by arc lint spelling)
Jun 1 2016, 18:10
dereckson committed rGROVE2cb53eabe359: Arcanist configuration (authored by dereckson).
Arcanist configuration
Jun 1 2016, 18:07
dereckson closed D387: Arcanist configuration by committing rGROVE2cb53eabe359: Arcanist configuration.
Jun 1 2016, 18:07
dereckson accepted D387: Arcanist configuration.
Jun 1 2016, 18:06
dereckson retitled D387: Arcanist configuration from to Arcanist configuration.
Jun 1 2016, 18:04
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Rebased against 0d90fbb8ff2c.

Jun 1 2016, 17:43
dereckson committed rGROVE0d90fbb8ff2c: Upgrade Laravel bootstrap code to 5.2 style (authored by dereckson).
Upgrade Laravel bootstrap code to 5.2 style
Jun 1 2016, 17:42
dereckson closed D386: Upgrade Laravel bootstrap code to 5.2 style by committing rGROVE0d90fbb8ff2c: Upgrade Laravel bootstrap code to 5.2 style.
Jun 1 2016, 17:42
dereckson accepted D386: Upgrade Laravel bootstrap code to 5.2 style.
Jun 1 2016, 17:42
dereckson retitled D386: Upgrade Laravel bootstrap code to 5.2 style from to Upgrade Laravel bootstrap code to 5.2 style.
Jun 1 2016, 17:42
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.
  • Tests have been added for TrustProxy None/All. It runs independantly of the main test suite, as the configuration doesn't seem to be refreshed between tests, even using refreshApplication method.
  • REMOTE_ADDR is now handled through Symfony Request component
  • Add a link to Symfony trust proxy method documentation
Jun 1 2016, 17:40
dereckson committed rGROVE1460c3162108: Extra integration test for /auth/reset view (authored by dereckson).
Extra integration test for /auth/reset view
Jun 1 2016, 14:54
dereckson closed D385: Extra integration test for /auth/reset view by committing rGROVE1460c3162108: Extra integration test for /auth/reset view.
Jun 1 2016, 14:54
dereckson accepted D385: Extra integration test for /auth/reset view.
Jun 1 2016, 14:53
dereckson retitled D385: Extra integration test for /auth/reset view from to Extra integration test for /auth/reset view.
Jun 1 2016, 14:53
dereckson committed rGROVEa899004350af: Fix whitespace issues (authored by dereckson).
Fix whitespace issues
Jun 1 2016, 14:52
dereckson closed D384: Fix whitespace issues by committing rGROVEa899004350af: Fix whitespace issues.
Jun 1 2016, 14:52
dereckson accepted D384: Fix whitespace issues.
Jun 1 2016, 14:51
dereckson retitled D384: Fix whitespace issues from to Fix whitespace issues.
Jun 1 2016, 14:50
dereckson committed rGROVE43423833776e: Integration tests for auth views (authored by dereckson).
Integration tests for auth views
Jun 1 2016, 14:41
dereckson closed D383: Integration tests for auth views by committing rGROVE43423833776e: Integration tests for auth views.
Jun 1 2016, 14:41
dereckson accepted D383: Integration tests for auth views.
Jun 1 2016, 14:40
dereckson retitled D383: Integration tests for auth views from to Integration tests for auth views.
Jun 1 2016, 14:40

May 31 2016

Sandlayth added a comment to T824: Tests for SuEXEC on Ysul.

We can have the complete path to the executable through

httpd -V | grep SUEXEC_BIN | grep -o "/.*" | sed 's/.$//'
May 31 2016, 22:19 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T824: Tests for SuEXEC on Ysul.

So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.

May 31 2016, 21:28 · Operations sprints (Consolidate them all), Servers
dereckson committed rOPS86c8e06e7946: Check if Apache is up and SuEXEC installed on Ysul (authored by dereckson).
Check if Apache is up and SuEXEC installed on Ysul
May 31 2016, 21:21
dereckson closed D371: Check if Apache is up and SuEXEC installed on Ysul by committing rOPS86c8e06e7946: Check if Apache is up and SuEXEC installed on Ysul.
May 31 2016, 21:20
dereckson closed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as Resolved.

That doesn't need any Postfix restart.

May 31 2016, 21:19 · Nasqueron Docker deployment squad, Mail, Servers
amj accepted D371: Check if Apache is up and SuEXEC installed on Ysul.
May 31 2016, 21:14
dereckson raised the priority of T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from High to Unbreak Now!.
May 31 2016, 20:52 · Nasqueron Docker deployment squad, Mail, Servers
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Adressed security concerns:

May 31 2016, 19:21
dereckson updated the diff for D25: Allow to serve https:// links behind a front-end server with SSL termination.

Rebased against master.

May 31 2016, 19:14
dereckson added a parent task for T492: When using a front-end server with SSL termination, back-end serves http:// links.: T271: Deploy Auth Grove to login.nasqueron.org.
May 31 2016, 18:52 · security, Auth Grove
dereckson added a subtask for T271: Deploy Auth Grove to login.nasqueron.org: T492: When using a front-end server with SSL termination, back-end serves http:// links..
May 31 2016, 18:52 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added a comment to D25: Allow to serve https:// links behind a front-end server with SSL termination.

To address security concerns, I'm going to change this, so no proxy is trusted by default.

May 31 2016, 18:48
dereckson renamed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from renew SSL certificate for mail.nasqueron.org to Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container.
May 31 2016, 17:10 · Nasqueron Docker deployment squad, Mail, Servers

May 30 2016

dereckson triaged T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as High priority.
May 30 2016, 14:31 · Nasqueron Docker deployment squad, Mail, Servers

May 27 2016

Sandlayth reopened T728: Deploy a MongoDB container as "Open".
May 27 2016, 23:13 · User-Sandlayth, Nasqueron Docker deployment squad
Sandlayth reopened T728: Deploy a MongoDB container, a subtask of T727: Deploy a RocketChat container on Dwellers, as Open.
May 27 2016, 23:13 · Nasqueron Docker deployment squad
Sandlayth closed T728: Deploy a MongoDB container as Wontfix.
May 27 2016, 22:48 · User-Sandlayth, Nasqueron Docker deployment squad
Sandlayth closed T728: Deploy a MongoDB container, a subtask of T727: Deploy a RocketChat container on Dwellers, as Wontfix.
May 27 2016, 22:48 · Nasqueron Docker deployment squad

May 23 2016

Sandlayth changed the status of T727: Deploy a RocketChat container on Dwellers from Invalid to Wontfix.
May 23 2016, 16:54 · Nasqueron Docker deployment squad
Sandlayth closed T727: Deploy a RocketChat container on Dwellers as Invalid.
May 23 2016, 16:52 · Nasqueron Docker deployment squad
dereckson committed rGROVEa889e0d62a8f: Docker instructions in README (authored by dereckson).
Docker instructions in README
May 23 2016, 16:39
dereckson closed D382: Docker instructions in README by committing rGROVEa889e0d62a8f: Docker instructions in README.
May 23 2016, 16:39
dereckson added projects to T841: Add a #nolog feature to PhabricatorBot: Servers, IRC, DevCentral.
May 23 2016, 16:37 · DevCentral, IRC, Servers
dereckson claimed T841: Add a #nolog feature to PhabricatorBot.
May 23 2016, 16:37 · DevCentral, IRC, Servers
Sandlayth accepted D382: Docker instructions in README.
May 23 2016, 16:33

May 22 2016

dereckson updated the diff for D382: Docker instructions in README.

Improved README

May 22 2016, 20:58
dereckson retitled D382: Docker instructions in README from to Docker instructions in README.
May 22 2016, 20:58
dereckson closed T812: Add required HTML5 attribute to required <input> fields as Invalid.

Every required field in resources/views/auth/ has already a required attribute.

May 22 2016, 20:38 · good-first-issue, Auth Grove
dereckson claimed T812: Add required HTML5 attribute to required <input> fields.
May 22 2016, 20:32 · good-first-issue, Auth Grove
dereckson added a comment to T271: Deploy Auth Grove to login.nasqueron.org.

1#!/bin/sh
2
3# -------------------------------------------------------------
4# Auth Grove
5# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6# Author: Sébastien Santoro aka Dereckson
7# Project: Nasqueron
8# Created: 2016-05-21
9# Description: SSO for Nasqueron services.
10# Image: nasqueron/auth-grove
11# Services used: MySQL server (acquisitariat)
12# Docker volume (/data/notifications/storage)
13# -------------------------------------------------------------
14
15# -------------------------------------------------------------
16# Container parameters
17# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
18
19INSTANCE_NAME=login
20PORT=25080
21MYSQL_INSTANCE=acquisitariat
22STORAGE=/data/login/storage
23CANONICAL_URL=http://login.nasqueron.org
24
25# -------------------------------------------------------------
26# Database parameters
27#
28# Get credentials from zr
29# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
30
31MYSQL_HOST=mysql
32MYSQL_USER=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67 username`
33MYSQL_PASS=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67`
34MYSQL_DB=$INSTANCE_NAME
35
36# -------------------------------------------------------------
37# Run the container
38# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
39
40# Checks container isn't running
41docker-container-status $INSTANCE_NAME > /dev/null
42if [ "$?" -lt 2 ]; then
43 echo "Container is already running."
44 echo "To force relaunch, try docker stop $INSTANCE_NAME ; docker rm $INSTANCE_NAME ; $0"
45 exit 1
46fi
47
48mkdir -p $STORAGE
49chcon -Rt svirt_sandbox_file_t $STORAGE
50chown 431:433 $STORAGE
51docker run -t -d \
52 --link $MYSQL_INSTANCE:$MYSQL_HOST \
53 -p $PORT:80 \
54 -e DB_HOST=$MYSQL_HOST \
55 -e DB_DATABASE=$MYSQL_DB \
56 -e DB_USERNAME=$MYSQL_USER \
57 -e DB_PASSWORD=$MYSQL_PASS \
58 -e CANONICAL_URL="$CANONICAL_URL" \
59 --name $INSTANCE_NAME nasqueron/auth-grove
60
61echo "Deployment done at `date`."
62exit 0

May 22 2016, 20:27 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson edited P194 run-login.
May 22 2016, 20:27
dereckson closed T839: Current URL detection code in views aren't coherent as Resolved.

app.url setting is for CLI links

May 22 2016, 20:23 · Auth Grove
dereckson closed T839: Current URL detection code in views aren't coherent, a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
May 22 2016, 20:23 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson committed rGROVE0074a0737b75: Set session cookie name to auth_grove (authored by dereckson).
Set session cookie name to auth_grove
May 22 2016, 19:51
dereckson closed D381: Set session cookie name to auth_grove by committing rGROVE0074a0737b75: Set session cookie name to auth_grove.
May 22 2016, 19:51
dereckson updated D381: Set session cookie name to auth_grove.
May 22 2016, 19:50
dereckson accepted D381: Set session cookie name to auth_grove.
May 22 2016, 19:50
dereckson retitled D381: Set session cookie name to auth_grove from to Set session cookie name to auth_grove.
May 22 2016, 19:50
dereckson moved T839: Current URL detection code in views aren't coherent from Backlog to Working on on the Auth Grove board.
May 22 2016, 19:27 · Auth Grove
dereckson renamed T840: Upgrade to Laravel 5.2 from Upgrade to Laravel 5 to Upgrade to Laravel 5.2.
May 22 2016, 19:27 · User-Dereckson, Technical debt, Auth Grove
dereckson created T840: Upgrade to Laravel 5.2.
May 22 2016, 19:16 · User-Dereckson, Technical debt, Auth Grove

May 21 2016

dereckson committed rDGROVEcc41e132174a: Initial revision for Auth Grove's Docker image (authored by dereckson).
Initial revision for Auth Grove's Docker image
May 21 2016, 23:35
dereckson closed D375: Initial revision for Auth Grove's Docker image by committing rDGROVEcc41e132174a: Initial revision for Auth Grove's Docker image.
May 21 2016, 23:35
dereckson updated the diff for D375: Initial revision for Auth Grove's Docker image.

npm:

  • install Gulp globally
  • run npm install in Dockerfile, not in container launch time setup
May 21 2016, 23:33
dereckson created T839: Current URL detection code in views aren't coherent.
May 21 2016, 22:24 · Auth Grove
dereckson committed rGROVE4612c989164f: Disable gulp-notify (authored by dereckson).
Disable gulp-notify
May 21 2016, 22:13
dereckson closed T838: Disable gulp-notify as Resolved by committing rGROVE4612c989164f: Disable gulp-notify.
May 21 2016, 22:13 · Auth Grove
dereckson closed D380: Disable gulp-notify by committing rGROVE4612c989164f: Disable gulp-notify.
May 21 2016, 22:13
dereckson closed T838: Disable gulp-notify, a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
May 21 2016, 22:13 · Nasqueron Docker deployment squad, Servers, Auth Grove