zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-05-18 10:19:45 +02:00
Code Issues Projects Releases Packages Wiki Activity

Readme

Browse source
This commit is contained in:
Martin Lensment 2015-03-24 18:20:48 +02:00
parent f5c47b8327
commit f03a11c3ae
2 changed files with 88 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

20
CHANGELOG.md
View file

@ -1,3 +1,23 @@
24.03.2015
* New Registrar virtualhost added. Please refer to readme for the configuration.
* Note the improved configuration for the registry virtualhost:
```
# Rewrite /login to /admin/login
RewriteEngine on
RewriteCond %{REQUEST_URI} ^/login [NC]
RewriteRule ^/(.*) /admin/$1 [PT,L,QSA]
<Location ~ "/.+/" >
Deny from all
</Location>
<Location ~ "/(admin|assets)\/.+">
Allow from all
</Location>
```
19.03.2015 19.03.2015
* New REPP virtualhost added. Please refer to readme for the configuration. * New REPP virtualhost added. Please refer to readme for the configuration.

68
README.md
View file

@ -67,6 +67,11 @@ For Apache, registry admin goes to port 443 in production, /etc/apache2/sites-en
ServerName your-domain ServerName your-domain
ServerAdmin your@example.com ServerAdmin your@example.com
# Rewrite /login to /admin/login
RewriteEngine on
RewriteCond %{REQUEST_URI} ^/login [NC]
RewriteRule ^/(.*) /admin/$1 [PT,L,QSA]
PassengerRoot /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini PassengerRoot /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini
PassengerRuby /home/registry/.rbenv/shims/ruby PassengerRuby /home/registry/.rbenv/shims/ruby
PassengerEnabled on PassengerEnabled on
@ -102,9 +107,72 @@ For Apache, registry admin goes to port 443 in production, /etc/apache2/sites-en
Options -MultiViews Options -MultiViews
</Directory> </Directory>
<Location ~ "/.+/" >
Deny from all
</Location>
<Location ~ "/(admin|assets)\/.+">
Allow from all
</Location>
</VirtualHost> </VirtualHost>
``` ```
Registrar configuration (/etc/apache2/sites-enabled/registrar.conf) is as follows:
<VirtualHost *:443>
ServerName your-registrar-domain
ServerAdmin your@example.com
# Rewrite /login to /registrar/login
RewriteEngine on
RewriteCond %{REQUEST_URI} ^/login [NC]
RewriteRule ^/(.*) /registrar/$1 [PT,L,QSA]
PassengerRoot /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini
PassengerRuby /home/registry/.rbenv/shims/ruby
PassengerEnabled on
PassengerMinInstances 10
PassengerMaxPoolSize 10
PassengerPoolIdleTime 0
PassengerMaxRequests 1000
RailsEnv production # or staging
DocumentRoot /home/registry/registrar/current/public
# Possible values include: debug, info, notice, warn, error, crit,
LogLevel info
ErrorLog /var/log/apache2/registry.error.log
CustomLog /var/log/apache2/registry.access.log combined
SSLEngine On
SSLCertificateFile /etc/ssl/certs/your.crt
SSLCertificateKeyFile /etc/ssl/private/your.key
SSLCertificateChainFile /etc/ssl/certs/your-chain-fail.pem
SSLCACertificateFile /etc/ssl/certs/ca.pem
SSLProtocol TLSv1
SSLHonorCipherOrder On
SSLCipherSuite RC4-SHA:HIGH:!ADH
<Directory /app/registry/registrar/current/public>
# comment out if Apache 2.4 or newer
Allow from all
# uncomment if Apache 2.4 or newer
# Require all granted
Options -MultiViews
</Directory>
<Location ~ "/.+/" >
Deny from all
</Location>
<Location ~ "/(registrar|assets)\/.+">
Allow from all
</Location>
</VirtualHost>
For Apache, REPP goes to port 443 in production, /etc/apache2/sites-enabled/repp.conf short example: For Apache, REPP goes to port 443 in production, /etc/apache2/sites-enabled/repp.conf short example:
``` ```
<VirtualHost *:443> <VirtualHost *:443>