Skip to content
This repository has been archived by the owner on Jan 26, 2021. It is now read-only.

Update deployment scripts for three-tier architecture + move to CentOS (WIP) #781

Draft
wants to merge 6 commits into
base: master
Choose a base branch
from

Conversation

ronnix
Copy link
Contributor

@ronnix ronnix commented Oct 16, 2019

No description provided.

@ronnix ronnix changed the title Update deployment scripts for three-tier architecture + move to CentOS Update deployment scripts for three-tier architecture + move to CentOS (WIP) Oct 16, 2019
@ronnix ronnix force-pushed the vagrant-fabric-centos branch 3 times, most recently from a343995 to 1bfa4cc Compare November 5, 2019 16:19
@ronnix ronnix force-pushed the vagrant-fabric-centos branch from 1bfa4cc to 009a84a Compare November 26, 2019 16:57
@davidbgk davidbgk force-pushed the vagrant-fabric-centos branch from 009a84a to ade3e00 Compare November 26, 2019 19:08
@ronnix ronnix force-pushed the vagrant-fabric-centos branch from ade3e00 to 8b5b2d2 Compare December 2, 2019 09:21
if not is_directory(ctx, "/etc/nginx/snippets"):
create_directory(ctx, "/etc/nginx/snippets", owner="root")

sudo_put_if_modified(ctx, "files/nginx/ssl.conf", "/etc/nginx/snippets/ssl.conf")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That line doesn't look to be effective, to check.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure what the problem is. I can see the correct file on the server.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See page 48 of the security audit. Even if the file if present, maybe it is not considered?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

→ http --headers https://zam.51.83.111.31.nip.io/
HTTP/1.1 302 Found
Cache-Control: no-store
Connection: keep-alive
Content-Length: 284
Content-Type: text/html; charset=UTF-8
Date: Wed, 18 Dec 2019 23:10:14 GMT
Location: https://zam.51.83.111.31.nip.io/repondeur/identification?source=https%3A%2F%2Fzam.51.83.111.31.nip.io%2Frepondeur%2F
Pragma: no-cache
Server: nginx/1.16.1

→ http --headers https://zam.beta.gouv.fr                                                                                                    2s 164ms
HTTP/1.1 302 Found
Connection: keep-alive
Content-Length: 270
Content-Type: text/html; charset=UTF-8
Date: Wed, 18 Dec 2019 23:10:27 GMT
Location: https://zam.beta.gouv.fr/repondeur/identification?source=https%3A%2F%2Fzam.beta.gouv.fr%2Frepondeur%2F
Server: nginx/1.14.0 (Ubuntu)
Strict-Transport-Security: max-age=15768000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants