Doesn't work currently. We need to debug that.

GitHub → Notifications center

A restart of redis-server have resolved the problem

Created a branch nasqueron_deploy on git@github.com:dereckson/hotglue2.git

upstream — https://github.com/k0a1a/hotglue2/pull/8

Should normally definitively fixed with this:

Another thing to test: SuEXEC AP_DOC_ROOT should be /var/wwwroot.

So for reference, we can now customize SuEXEC settings.

docroot switched back to /usr/local/www/data

Still the same error:

Improve Docker command, so out of the box Docker installation won't expose the port to world.

In D25#6159, @xcombelle wrote:

@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch

@dereckson Yes it's ok I would just nitpick that the line in the example of the README -e TRUST_ALL_PROXIES=1 \ is an unecessary example of unsecure use and a better line would be -e TRUST_ALL_PROXIES=0\ But that is really too much nitpicking for saying no to the patch

Upstream typo fixed in Bootstrap, my pull request has been merged.

Ready to merge. @xcombelle Could you check that looks good to you?

Test for some proxy scheme.

• Rebased against 2cb53eabe
• Fixed typo (found by arc lint spelling)

Rebased against 0d90fbb8ff2c.

• Tests have been added for TrustProxy None/All. It runs independantly of the main test suite, as the configuration doesn't seem to be refreshed between tests, even using refreshApplication method.
• REMOTE_ADDR is now handled through Symfony Request component
• Add a link to Symfony trust proxy method documentation

We can have the complete path to the executable through

httpd -V | grep SUEXEC_BIN | grep -o "/.*" | sed 's/.$//'

So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.

That doesn't need any Postfix restart.

Adressed security concerns:

Rebased against master.

To address security concerns, I'm going to change this, so no proxy is trusted by default.