Skip to content
This repository was archived by the owner on Jan 26, 2021. It is now read-only.

Update deployment scripts for three-tier architecture + move to CentOS (WIP) - #781

Draft
ronnix wants to merge 6 commits into
masterfrom
vagrant-fabric-centos
Draft

Update deployment scripts for three-tier architecture + move to CentOS (WIP)#781
ronnix wants to merge 6 commits into
masterfrom
vagrant-fabric-centos

Conversation

@ronnix

@ronnix ronnix commented Oct 16, 2019

Copy link
Copy Markdown
Contributor

No description provided.

@ronnix ronnix changed the title Update deployment scripts for three-tier architecture + move to CentOS Update deployment scripts for three-tier architecture + move to CentOS (WIP) Oct 16, 2019
@ronnix
ronnix force-pushed the vagrant-fabric-centos branch 3 times, most recently from a343995 to 1bfa4cc Compare November 5, 2019 16:19
@ronnix
ronnix force-pushed the vagrant-fabric-centos branch from 1bfa4cc to 009a84a Compare November 26, 2019 16:57
@davidbgk
davidbgk force-pushed the vagrant-fabric-centos branch from 009a84a to ade3e00 Compare November 26, 2019 19:08
@ronnix
ronnix force-pushed the vagrant-fabric-centos branch from ade3e00 to 8b5b2d2 Compare December 2, 2019 09:21
Comment thread admin/tasks/web.py
if not is_directory(ctx, "/etc/nginx/snippets"):
create_directory(ctx, "/etc/nginx/snippets", owner="root")

sudo_put_if_modified(ctx, "files/nginx/ssl.conf", "/etc/nginx/snippets/ssl.conf")

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That line doesn't look to be effective, to check.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure what the problem is. I can see the correct file on the server.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See page 48 of the security audit. Even if the file if present, maybe it is not considered?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

→ http --headers https://zam.51.83.111.31.nip.io/
HTTP/1.1 302 Found
Cache-Control: no-store
Connection: keep-alive
Content-Length: 284
Content-Type: text/html; charset=UTF-8
Date: Wed, 18 Dec 2019 23:10:14 GMT
Location: https://zam.51.83.111.31.nip.io/repondeur/identification?source=https%3A%2F%2Fzam.51.83.111.31.nip.io%2Frepondeur%2F
Pragma: no-cache
Server: nginx/1.16.1

→ http --headers https://zam.beta.gouv.fr                                                                                                    2s 164ms
HTTP/1.1 302 Found
Connection: keep-alive
Content-Length: 270
Content-Type: text/html; charset=UTF-8
Date: Wed, 18 Dec 2019 23:10:27 GMT
Location: https://zam.beta.gouv.fr/repondeur/identification?source=https%3A%2F%2Fzam.beta.gouv.fr%2Frepondeur%2F
Server: nginx/1.14.0 (Ubuntu)
Strict-Transport-Security: max-age=15768000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants