docroot switched back to /usr/local/www/data
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Jun 3 2016
Still the same error:
Jun 2 2016
Improve Docker command, so out of the box Docker installation won't expose the port to world.
In D25#6159, @xcombelle wrote:@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch
Jun 1 2016
@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch
Upstream typo fixed in Bootstrap, my pull request has been merged.
Ready to merge. @xcombelle Could you check that looks good to you?
Test for some proxy scheme.
- Rebased against 2cb53eabe
- Fixed typo (found by arc lint spelling)
Rebased against 0d90fbb8ff2c.
- Tests have been added for TrustProxy None/All. It runs independantly of the main test suite, as the configuration doesn't seem to be refreshed between tests, even using refreshApplication method.
- REMOTE_ADDR is now handled through Symfony Request component
- Add a link to Symfony trust proxy method documentation
May 31 2016
We can have the complete path to the executable through
httpd -V | grep SUEXEC_BIN | grep -o "/.*" | sed 's/.$//'
So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.
That doesn't need any Postfix restart.
Adressed security concerns:
Rebased against master.
To address security concerns, I'm going to change this, so no proxy is trusted by default.
May 30 2016
May 27 2016
May 23 2016
May 22 2016
Improved README
Every required field in resources/views/auth/ has already a required attribute.
| 1 | #!/bin/sh |
|---|---|
| 2 | |
| 3 | # ------------------------------------------------------------- |
| 4 | # Auth Grove |
| 5 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 6 | # Author: Sébastien Santoro aka Dereckson |
| 7 | # Project: Nasqueron |
| 8 | # Created: 2016-05-21 |
| 9 | # Description: SSO for Nasqueron services. |
| 10 | # Image: nasqueron/auth-grove |
| 11 | # Services used: MySQL server (acquisitariat) |
| 12 | # Docker volume (/data/notifications/storage) |
| 13 | # ------------------------------------------------------------- |
| 14 | |
| 15 | # ------------------------------------------------------------- |
| 16 | # Container parameters |
| 17 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 18 | |
| 19 | INSTANCE_NAME=login |
| 20 | PORT=25080 |
| 21 | MYSQL_INSTANCE=acquisitariat |
| 22 | STORAGE=/data/login/storage |
| 23 | CANONICAL_URL=http://login.nasqueron.org |
| 24 | |
| 25 | # ------------------------------------------------------------- |
| 26 | # Database parameters |
| 27 | # |
| 28 | # Get credentials from zr |
| 29 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 30 | |
| 31 | MYSQL_HOST=mysql |
| 32 | MYSQL_USER=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67 username` |
| 33 | MYSQL_PASS=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67` |
| 34 | MYSQL_DB=$INSTANCE_NAME |
| 35 | |
| 36 | # ------------------------------------------------------------- |
| 37 | # Run the container |
| 38 | # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - |
| 39 | |
| 40 | # Checks container isn't running |
| 41 | docker-container-status $INSTANCE_NAME > /dev/null |
| 42 | if [ "$?" -lt 2 ]; then |
| 43 | echo "Container is already running." |
| 44 | echo "To force relaunch, try docker stop $INSTANCE_NAME ; docker rm $INSTANCE_NAME ; $0" |
| 45 | exit 1 |
| 46 | fi |
| 47 | |
| 48 | mkdir -p $STORAGE |
| 49 | chcon -Rt svirt_sandbox_file_t $STORAGE |
| 50 | chown 431:433 $STORAGE |
| 51 | docker run -t -d \ |
| 52 | --link $MYSQL_INSTANCE:$MYSQL_HOST \ |
| 53 | -p $PORT:80 \ |
| 54 | -e DB_HOST=$MYSQL_HOST \ |
| 55 | -e DB_DATABASE=$MYSQL_DB \ |
| 56 | -e DB_USERNAME=$MYSQL_USER \ |
| 57 | -e DB_PASSWORD=$MYSQL_PASS \ |
| 58 | -e CANONICAL_URL="$CANONICAL_URL" \ |
| 59 | --name $INSTANCE_NAME nasqueron/auth-grove |
| 60 | |
| 61 | echo "Deployment done at `date`." |
| 62 | exit 0 |
app.url setting is for CLI links
May 21 2016
npm:
- install Gulp globally
- run npm install in Dockerfile, not in container launch time setup