504
edits
Changes
Draft:Discourse Implementation and Exploitation (view source)
Revision as of 12:47, 24 January 2025
, 3 months ago→Upgrade the data container
Line 3:
Line 3:
Les forums sont accessibles depuis les url https://www.dolibarr.org/forum+Apache2 virtual hosts config <code>dolibarr.fr.conf</code> and <code>dolibarr.org.conf</code> has been copied from <code>vmprod1</code> (Servername apache directive has just been modified to match names specified in [[#Addresses]]).+Enabling '''proxy '''and '''proxy_http '''modules.+
−Adding
# Deny from all
−# Allow from 37.170.87.101
−# RequestHeader set X-Forwarded-Port "443"
−# RequestHeader set X-Forwarded-Proto "https"
/home/dolibarr/tools/firewallvmprod1
−
−Files from <code>/home/dolibarr/dolibarr.fr</code> and <code>/home/dolibarr/dolibarr.org</code> has been copied to the same location on the test VM (however <code>/home/dolibarr/dolibarr.org/httpdocs/files/stable</code> has not been replicated on the test VM due to the weight/size of all packages).
+
=== Apache2 config ===
=== Apache2 config ===
−Forums are available on entry URL: https://www.dolibarr.org/forum, https://www.dolibarr.fr/forum, https://www.dolibarr.de/forum
+but behind, it is discourse.
−Enable '''proxy '''and '''proxy_http '''modules.
−Add
−<syntaxhighlight lang="apache">
<syntaxhighlight lang="apache">
Line 24:
Line 23:
# Redirection pour transfert apache - discourse
# Redirection pour transfert apache - discourse
<Location "/forum">
<Location "/forum">
− RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
RequestHeader set "X-Forwarded-SSL" expr=%{HTTPS}
RequestHeader set "X-Forwarded-SSL" expr=%{HTTPS}
Line 34:
Line 29:
ProxyPassReverse "http://127.0.0.1:8800/forum"
ProxyPassReverse "http://127.0.0.1:8800/forum"
</Location>
</Location>
+
</syntaxhighlight>
</syntaxhighlight>
+
+The apache proxy redirect HTTP including /forum/ in URL to the port the docker nginx server run.
+
+The Logs of the proxy are available into /home/dolibarr/logs/dolibarr_ssl_access_log file and are used by fail2ban rules.
== Firewall ==
== Firewall ==
−Les regles du firewall sont définies et activé par lescript
+Les regles du firewall sont définies et activé par le script /home/dolibarr/tools/firewallvmprod1
−TODO Utilisé ufw
+TODO Utiliser ufw
−=== Files ===
+=== Backup ===
−Backup of discourse instance is done into directories /mnt/sdb1/backup/discourses
=== MySQL/MariaDB Databases ===
=== MySQL/MariaDB Databases ===
Line 57:
Line 55:
Installed following the Docker docs : https://docs.docker.com/install/linux/docker-ce/ubuntu/#install-docker-engine---community-1
Installed following the Docker docs : https://docs.docker.com/install/linux/docker-ce/ubuntu/#install-docker-engine---community-1
−== Tests for dolibarr.de migration ==
== Tests for dolibarr.de migration ==
Line 86:
Line 83:
sudo ./launcher stop web_only
sudo ./launcher stop web_only
sudo ./launcher stop data
sudo ./launcher stop data
+# twice is not a typo but on purpose
sudo ./launcher rebuild data
sudo ./launcher rebuild data
sudo ./launcher rebuild data
sudo ./launcher rebuild data