Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr-frontend: restrict access to mbs to localhost only

Browse source
This commit is contained in:
clime 2017-04-19 20:23:36 +02:00
parent 0d95c4b7a2
commit 46ac145b3e
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/copr/frontend/templates/copr.conf
View file

@ -66,7 +66,7 @@ ENFORCE_PROTOCOL_FOR_FRONTEND_URL = "https"
DIST_GIT_URL="http://{{ dist_git_base_url }}/cgit" DIST_GIT_URL="http://{{ dist_git_base_url }}/cgit"
COPR_DIST_GIT_LOGS_URL = "http://{{ dist_git_base_url }}/per-task-logs" COPR_DIST_GIT_LOGS_URL = "http://{{ dist_git_base_url }}/per-task-logs"
MBS_URL = "{{ frontend_base_url }}/module/1/module-builds/" MBS_URL = "localhost/module/1/module-builds/"
# no need to filter cla_* groups, they are already filtered by fedora openid # no need to filter cla_* groups, they are already filtered by fedora openid
BLACKLISTED_GROUPS = ['fedorabugs', 'packager', 'provenpackager'] BLACKLISTED_GROUPS = ['fedorabugs', 'packager', 'provenpackager']

3
roles/copr/mbs/files/httpd/mbs.conf
View file

@ -6,12 +6,13 @@
WSGIDaemonProcess module-build-service user=mbs group=mbs threads=15 display-name=module-build-service WSGIDaemonProcess module-build-service user=mbs group=mbs threads=15 display-name=module-build-service
WSGIScriptAlias /module-build-service /opt/module-build-service/mbs.wsgi WSGIScriptAlias /module-build-service /opt/module-build-service/mbs.wsgi
<Location /module-build-service> <Location /module-build-service>
Require host localhost
WSGIProcessGroup module-build-service WSGIProcessGroup module-build-service
</Location> </Location>
<Directory /opt/module-build-service> <Directory /opt/module-build-service>
Require host localhost
WSGIApplicationGroup %{GLOBAL} WSGIApplicationGroup %{GLOBAL}
Require all granted
</Directory> </Directory>
RewriteEngine On RewriteEngine On