tobias/infra-oasis21
1
0
Fork 0
Code Issues 11 Pull Requests Projects Releases Wiki Activity

Compare commits

base: tobias/infra-oasis21:master
Branches Tags
tobias/infra-oasis21:master
..
compare: tobias/infra-oasis21:d31846f77c07da61f252308b06c2a63530689ce8
Branches Tags
tobias/infra-oasis21:master
1 Commits
master .. d31846f77c
Author SHA1 Message Date
librezo d31846f77c initial commit 2022-04-28 16:37:19 +02:00
24 changed files with 3 additions and 869 deletions
Expand all files Collapse all files
.gitignore
-2
View File
@@ -1,2 +0,0 @@
.autorestic.env
.autorestic.lock.yml
README.md
-99
View File
@@ -1,99 +0,0 @@
# Installation de l'infrastructure
### Lancement
#### Certs
Au premier lancement, assurez-vous que :
- Le dossier `/DATA/docker/traefik/certs` existe
- Créez un fichier `acme.json` à l'intérieur
- Changez son propriétaire à `root`
- Changez ses permissions à `600`
C'est dans ce fichier que seront conservés tous les certificats générés par Traefik.
### Migration des données
1. Mettre nextcloud en mode maintenance : 
```
sudo -u www-data php occ maintenance:mode --on
```
2. Faire un dump de la bdd
```
sudo -u postgres pg_dump -Fc nc > nc.dump
```
3. Sauver les données du dossier nextcloud
```
mkdir -p /var/lib/backuppc/migration/data
cp -r /srv/nextcloud/ /var/lib/backuppc/migration/data
```
4. Sauver le fichier de configuration de nextcloud
```
cp /var/www/nextcloud/public_html/config/config.php /var/lib/backuppc/migration
```
…
installation de proxmox, vm, docker.
…
### Installation des services
1. Cloner le repo de l'infra et le mettre au bon endroit
```
git clone https://yuno.oiseauroch.fr/gitea/tobias/infra-oasis21.git
mkdir -p /DATA/docker
mv infra_oasis21 /DATA/docker/services
```
2. copy file `config.php` and change values
```
cp /var/lib/backuppc/migration/config.php .
# change host for redis
sed -i 's#/run/redis/redis.sock#redis#' config.php
# change dbhost
sed -i 's#localhost#nextcloud-db#' config.php
# change datadirectory
sed -i 's#/srv/nextcloud#/var/www/html/data#' config.php
```
3. Move `secrets/librezo.secrets.example` to `secrets/librezo.secrets`
4.Replace **nextcloud** and **collabora** password from vaultwarden
```
sed -i 's/__POSTGRES_PASSWORD__/nextcloudstrongpassword/g' config.php secrets/librezo.secrets
sed -i 's/__COLLABORA_PASSWORD__/collaborastrongpassword/g' config.php secrets/librezo.secrets
```
4. Start traefik
```
cd traefik
docker-compose up -d
```
5. Create docker containers and volume
```
docker-compose up --no-start
```
6. Import database
```
docker cp nc.dump nextcloud-db:/nc.dmp
docker-compose up -d nextcloud-db
docker-compose exec nextcloud-db sh -c "pg_restore -d nc -U nc nc.dmp"
docker-compose exec nextcloud-db rm /nc.dmp
```
7. Copy files and set correct rights
```
docker cp /var/lib/backuppc/migration/data nextcloud-app:/var/www/html/
cp config.php nextcloud-app:/var/www/html/config/config.php
docker-compose up -d nextcloud-app
docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/data
docker-compose exec nextcloud-app chown -R www-data:www-data /var/www/html/config/config.php
```
8. restart docker-compose
```
docker-compose restart
```
### Configure collabora <!--onlyoffice?-->
1. connect to nextcloud
2. go to paramètres->nextcloud office-> utiliser mon propre serveur
3. choisir `code.oasis21.org`, décocher l'option `ne pas vérifier le certificat`
4. désinstaller l'application collabora built-in serveur
backups/.autorestic.yml
-81
View File
@@ -1,81 +0,0 @@
version: 2
global:
forget:
keep-hourly: 24
keep-daily: 7
keep-weekly: 4
keep-monthly: 12
backends:
fch:
type: sftp
path: FCH_serveur:backups/
locations:
nextcloud_data:
from:
- /var/lib/docker/volumes/docker_nextcloud
to:
- fch
cron: 0 0 * * *
forget: prune
nextcloud_conf:
from:
- /var/lib/docker/volumes/docker_nextcloud-conf
to:
- fch
cron: 0 0 * * *
forget: prune
nextcloud_data:
from:
- /var/lib/docker/volumes/docker_nextcloud
to:
- fch
cron: 0 0 * * *
forget: prune
nextcloud_db:
from:
- /DATA/dump_bdd/nextcloud-db
to:
- fch
cron: 0 0 * * *
forget: prune
hooks:
before:
- /DATA/docker/services/backups/backup_db.sh nextcloud-db postgresql
onlyoffice:
from:
- /var/lib/docker/volumes/docker_onlyoffice-cache
- /var/lib/docker/volumes/docker_onlyoffice-data
to:
- fch
cron: 0 0 * * *
forget: prune
traefik-certs:
from:
- /DATA/docker/services/certs
to:
- fch
cron: 0 0 * * *
forget: prune
repos:
from:
- /DATA/docker/services/
to:
- fch
options:
backup:
exclude:
- '.git'
cron: 0 0 * * *
forget: prune
backups/autorestic.service
-10
View File
@@ -1,10 +0,0 @@
[Unit]
Description=Backups yay
[Service]
Type=oneshot
ExecStart=autorestic -c /DATA/docker/services/backups/.autorestic.yml --ci cron
# fail if backup takes more than 1 day
TimeoutStartSec=86400
IPAccounting=yes
MemoryAccounting=yes
backups/autorestic.timer
-9
View File
@@ -1,9 +0,0 @@
[Unit]
Description=Backups yay
[Timer]
# Trigger every 10 minutes
OnCalendar=*:0/10:0
[Install]
WantedBy=timers.target
backups/backup_db.sh
-61
View File
@@ -1,61 +0,0 @@
#!/usr/bin/env bash
# usage: <script> <container-name> <database-type>
#
# exports the database of a running docker container in a dump in $BACKUP_DIR/$CONTAINER_NAME/
BACKUP_DIR=/DATA/dump_bdd/
# Check container existence
CONTAINER="$1"
if ! docker ps | grep -q "$CONTAINER"
then
echo "The container $CONTAINER doesn't exist or doesn't run"
exit 1
fi
# Check database type
TYPE="$2"
COMMAND=""
case "$TYPE" in
postgresql)
POSTGRES_USER=$(docker exec "$CONTAINER" env | grep POSTGRES_USER | cut -d= -f2)
COMMAND="pg_dumpall -c -U $POSTGRES_USER"
EXTENSION=sql
;;
mariadb)
MARIADB_USER=$(docker exec "$CONTAINER" env | grep MYSQL_USER | cut -d= -f2)
MARIADB_PASSWORD=$(docker exec "$CONTAINER" env | grep MYSQL_PASSWORD | cut -d= -f2)
COMMAND="mariadb-dump -u $MARIADB_USER --password=$MARIADB_PASSWORD --all-databases"
EXTENSION=sql
;;
mongodb)
COMMAND="mongodump --archive"
EXTENSION=mongodump
;;
ldap-config)
COMMAND="slapcat -n 0"
EXTENSION=config.ldif
;;
ldap-content)
COMMAND="slapcat -n 1"
EXTENSION=content.ldif
;;
*)
echo "I don't know $TYPE database type."
exit 1
esac
# Ensure directory exists
mkdir -p "$BACKUP_DIR/$CONTAINER"
# Export database
docker exec "$CONTAINER" $COMMAND > "$BACKUP_DIR/$CONTAINER/dump.$EXTENSION"
exit $?
dump_bdd_volumes.sh
-3
View File
@@ -1,3 +0,0 @@
#!/bin/bash
docker exec nextcloud-db pg_dumpall -U nc > /DATA/dump_bdd/nextcloud.sql
nextcloud-pica
Submodule
+1
Submodule nextcloud-pica added at c56205576e
nextcloud/.gitignore
-3
View File
@@ -1,3 +0,0 @@
*.secrets
.env
config.php
nextcloud/.nginx.conf.swp
View File
nextcloud/docker-compose.yml
-103
View File
@@ -1,103 +0,0 @@
version: '3.7'
volumes:
nextcloud-db:
name: docker_nextcloud-db-15
nextcloud-data:
name: docker_nextcloud
nextcloud:
name: docker_nextcloud-conf
onlyoffice-cache:
name: docker_onlyoffice-cache
onlyoffice-db:
name: docker_onlyoffice-db
networks:
nextcloud:
proxy:
external: true
services:
nextcloud-app:
image: nextcloud-cron:26.0.11
build: .
container_name: nextcloud-app
restart: unless-stopped
extra_hosts :
office.oasis21.org : 172.16.7.10
volumes:
- nextcloud:/var/www/html
- nextcloud-data:/var/www/html/data
environment:
- "TZ=Europe/Paris"
- REDIS_HOST=redis
env_file: ./secrets/librezo.secrets
depends_on:
- nextcloud-db
- redis
networks:
- nextcloud
- proxy
labels:
traefik.http.routers.nextcloud-web.entrypoints: websecure
traefik.http.routers.nextcloud-web.rule: Host(`cloud.oasis21.org`)
traefik.http.services.nextcloud-web.loadbalancer.server.port: 80
traefik.enable: true
# https://docs.nextcloud.com/server/16/admin_manual/configuration_server/reverse_proxy_configuration.html
traefik.http.routers.nextcloud-web.middlewares: nextcloud-web@docker, allowFrameAndCORS@file
traefik.http.middlewares.nextcloud-web.redirectregex.permanent: true
traefik.http.middlewares.nextcloud-web.redirectregex.regex: "https://(.*)/.well-known/(card|cal)dav"
traefik.http.middlewares.nextcloud-web.redirectregex.replacement: "https://$${1}/remote.php/dav/"
redis:
image: 'bitnami/redis:7.0.10'
container_name: redis
restart: unless-stopped
environment:
- "TZ=Europe/Paris"
- ALLOW_EMPTY_PASSWORD=yes
env_file: ./secrets/librezo.secrets
networks:
- nextcloud
nextcloud-db:
image: postgres:15-alpine
container_name: nextcloud-db
volumes:
- nextcloud-db:/var/lib/postgresql/data
networks:
- nextcloud
env_file: ./secrets/librezo.secrets
environment:
- "TZ=Europe/Paris"
restart: unless-stopped
onlyoffice:
build:
context: .
dockerfile: ./dockerfile-oo
container_name: onlyoffice
image: onlyoffice:7.5.1
restart: unless-stopped
extra_hosts :
cloud.oasis21.org : 172.16.7.10
environment:
- JWT_ENABLED=true
- JWT_SECRET=MvaG9zdHMgCnN1ZG8gbmFubyAvZXRjL2hvc3RzIApzY3AgVMOpbMOpY
- FORCESAVE_ENABLE=true
- FORCESAVE_INTERVAL=2m
- FORCESAVE_STEP=5m
volumes:
- onlyoffice-cache:/var/lib/onlyoffice/documentserver/App_Data
- onlyoffice-db:/var/lib/postgresql
labels:
traefik.http.routers.onlyoffice.entrypoints: websecure
traefik.http.routers.onlyoffice.rule: Host(`office.oasis21.org`)
traefik.http.services.onlyoffice.loadbalancer.server.port: 80
traefik.enable: true
traefik.http.routers.onlyoffice.middlewares: allowFrameAndCORS@file, onlyoffice-sslheaders
traefik.http.middlewares.onlyoffice-sslheaders.headers.customrequestheaders.X-Forwarded-Proto: "https"
networks:
- nextcloud
- proxy
nextcloud/dockerfile
-15
View File
@@ -1,15 +0,0 @@
FROM nextcloud:26.0.11-apache
ARG VERSION
RUN apt-get update && apt-get install -y \
supervisor \
libmagickcore-6.q16-6-extra \
&& rm -rf /var/lib/apt/lists/* \
&& mkdir /var/log/supervisord /var/run/supervisord
COPY supervisord.conf /
ENV NEXTCLOUD_UPDATE=1
CMD ["/usr/bin/supervisord", "-c", "/supervisord.conf"]
nextcloud/dockerfile-oo
-9
View File
@@ -1,9 +0,0 @@
FROM thomisus/onlyoffice-documentserver-unlimited:7.5.1
ARG VERSION
RUN sed -i '27i FORCESAVE_ENABLE=${FORCESAVE_ENABLE:-false}\nFORCESAVE_INTERVAL=${FORCESAVE_INTERVAL:-5m}\nFORCESAVE_STEP=${FORCESAVE_STEP:-1m}\n' /app/ds/run-document-server.sh
RUN sed -i '340i ${JSON} -I -e "if(this.services.CoAuthoring.autoAssembly===undefined)this.services.CoAuthoring.autoAssembly={};"' /app/ds/run-document-server.sh
RUN sed -i '341i ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.enable = ${FORCESAVE_ENABLE}"' /app/ds/run-document-server.sh
RUN sed -i '342i ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.interval = \x27${FORCESAVE_INTERVAL}\x27"' /app/ds/run-document-server.sh
RUN sed -i '343i ${JSON} -I -e "this.services.CoAuthoring.autoAssembly.step = \x27${FORCESAVE_STEP}\x27"\n' /app/ds/run-document-server.sh
nextcloud/onlyoffice.tar.gz
BIN
View File
Binary file not shown.
nextcloud/secrets/librezo.secrets.example
-6
View File
@@ -1,6 +0,0 @@
POSTGRES_PASSWORD=__POSTGRES_PASSWORD__
POSTGRES_DB=nc
POSTGRES_USER=nc
POSTGRES_HOST=nextcloud-db
username=nextcloud
password=__COLLABORA_PASSWORD__
nextcloud/share.sql
-270
View File
@@ -1,270 +0,0 @@
--
-- PostgreSQL database dump
--
-- Dumped from database version 11.16 (Debian 11.16-1.pgdg90+1)
-- Dumped by pg_dump version 11.16 (Debian 11.16-1.pgdg90+1)
SET statement_timeout = 0;
SET lock_timeout = 0;
SET idle_in_transaction_session_timeout = 0;
SET client_encoding = 'UTF8';
SET standard_conforming_strings = on;
SELECT pg_catalog.set_config('search_path', '', false);
SET check_function_bodies = false;
SET xmloption = content;
SET client_min_messages = warning;
SET row_security = off;
SET default_tablespace = '';
SET default_with_oids = false;
--
-- Name: oc_share; Type: TABLE; Schema: public; Owner: nc
--
CREATE TABLE public.oc_share (
id bigint NOT NULL,
share_type smallint DEFAULT 0 NOT NULL,
share_with character varying(255) DEFAULT NULL::character varying,
password character varying(255) DEFAULT NULL::character varying,
uid_owner character varying(64) DEFAULT ''::character varying NOT NULL,
uid_initiator character varying(64) DEFAULT NULL::character varying,
parent bigint,
item_type character varying(64) DEFAULT ''::character varying NOT NULL,
item_source character varying(255) DEFAULT NULL::character varying,
item_target character varying(255) DEFAULT NULL::character varying,
file_source bigint,
file_target character varying(512) DEFAULT NULL::character varying,
permissions smallint DEFAULT 0 NOT NULL,
stime bigint DEFAULT 0 NOT NULL,
accepted smallint DEFAULT 0 NOT NULL,
expiration timestamp(0) without time zone DEFAULT NULL::timestamp without time zone,
token character varying(32) DEFAULT NULL::character varying,
mail_send smallint DEFAULT 0 NOT NULL,
share_name character varying(64) DEFAULT NULL::character varying,
password_by_talk boolean DEFAULT false,
note text,
hide_download smallint DEFAULT 0,
label character varying(255) DEFAULT NULL::character varying
);
ALTER TABLE public.oc_share OWNER TO nc;
--
-- Name: oc_share_id_seq; Type: SEQUENCE; Schema: public; Owner: nc
--
CREATE SEQUENCE public.oc_share_id_seq
START WITH 1
INCREMENT BY 1
NO MINVALUE
NO MAXVALUE
CACHE 1;
ALTER TABLE public.oc_share_id_seq OWNER TO nc;
--
-- Name: oc_share_id_seq; Type: SEQUENCE OWNED BY; Schema: public; Owner: nc
--
ALTER SEQUENCE public.oc_share_id_seq OWNED BY public.oc_share.id;
--
-- Name: oc_share id; Type: DEFAULT; Schema: public; Owner: nc
--
ALTER TABLE ONLY public.oc_share ALTER COLUMN id SET DEFAULT nextval('public.oc_share_id_seq'::regclass);
--
-- Data for Name: oc_share; Type: TABLE DATA; Schema: public; Owner: nc
--
COPY public.oc_share (id, share_type, share_with, password, uid_owner, uid_initiator, parent, item_type, item_source, item_target, file_source, file_target, permissions, stime, accepted, expiration, token, mail_send, share_name, password_by_talk, note, hide_download, label) FROM stdin;
1 3 \N \N admin.local admin.local \N file 1314 \N 1314 /Test feuille.xlsx 19 1644510958 0 \N RiHyHyWRBw4qAQH 0 \N f 0
2 3 \N \N admin.local admin.local \N folder 2504 \N 2504 /Comité d'engagement 17 1648638034 0 \N 5AJWRE2aaqSJZrW 0 \N f \N 0
3 6 fredj@merlinsystem.com/nextcloud \N Frederic Jozon Frederic Jozon \N folder 1342 \N 1342 31 1649147646 0 \N ePDMGozFDzRfsrl 0 \N f \N 0 \N
6 3 \N \N admin.local admin.local \N folder 2761 \N 2761 /Comité d'engagement 17 1649753193 0 \N cE3i7ngpnCkNiKG 0 \N f \N 0
8 3 \N \N Ramin Farhangi Ramin Farhangi \N file 13201 \N 13201 /Rencontres Oasis septembre 2022 - Modèle économique et tarification.ods 19 1649779159 0 \N 4KkdJRCcE3aZ3Qn 0 \N f 0
7 3 \N \N Ramin Farhangi Ramin Farhangi \N file 13202 \N 13202 /Rencontres Oasis à Oasis du 22-24 septembre 2022 - modèle.odt 19 1649779067 0 \N FK7jRfJQNDbkxzT 0 \N f 0
9 3 \N \N Ramin Farhangi Ramin Farhangi \N file 16898 \N 16898 /Rencontres oasis à oasis 22-24 septembre - Rôles et redevabilités.ods 19 1649927426 0 \N apsEJtEQsa9rxAz 0 \N f 0
10 3 \N \N admin.local admin.local \N file 22287 \N 22287 /Organisation Nextcloud - Coopérative Oasis.ods 19 1650448091 0 \N 5BokzgJBko3pFfx 0 \N f 0
12 3 \N \N admin.local admin.local \N file 22287 \N 22287 /Organisation Nextcloud - Coopérative Oasis.ods 17 1650448199 0 \N DC3nRSCK4NWRNJT 0 \N f \N 0
13 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23231 \N 23231 /Matrice lieux d'accueil 2021.ods 17 1650449222 0 \N iK2Be9HPynaqwwL 0 \N f \N 0
14 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23230 \N 23230 /Coop oasis - modèle économique Ramïn.ods 17 1650449289 0 \N cPiqttifmYx72Hx 0 \N f \N 0
15 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23453 \N 23453 /Cercle 0 - le Noyau.ods 17 1650449384 0 \N GkcGngL43NgyZzq 0 \N f \N 0
16 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23454 \N 23454 /Cercle 1 - Oasis à Oasis.ods 17 1650449409 0 \N DociBAAsP3YkXCi 0 \N f \N 0
17 3 \N \N Ramin Farhangi Ramin Farhangi \N file 23450 \N 23450 /Coop Oasis - design webinaires et lettres OàO à partir de mai 2022.odt 17 1650449488 0 \N QKbEkPZb7soGzR3 0 \N f \N 0
18 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24699 \N 24699 /Rencontres 2022 - Est - Modèle économique et tarification.ods 17 1650554473 0 \N ogPgApGFEyfgDJx 0 \N f \N 0
19 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24911 \N 24911 /Rencontres 2022 - Est - Cadre général et programme.odt 19 1650555825 0 \N eWMAG8MGC6zZHoD 0 \N f 0
20 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24894 \N 24894 /Rencontres 2022 - Est - Modèle économique et tarification.ods 17 1650555983 0 \N DrzTjS6B4anTnTe 0 \N f \N 0
21 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24898 \N 24898 /Rencontres 2022 - Sud - Modèle économique et tarification.ods 19 1650562138 0 \N 57mf2RGFELMpFdF 0 \N f 0
22 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24906 \N 24906 /Rencontres 2022 - Sud - Cadre général et programme.odt 19 1650562315 0 \N 8Toq2YgwA2Sn2Ni 0 \N f 0
27 1 Coopérative Oasis \N Mathieu Labonne Mathieu Labonne \N folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 0 \N \N 0 \N f \N 0 \N
28 2 admin.local \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
29 2 Aurore Borowik \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
32 2 Fabrice Perez \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
33 2 Fabrice Tournier-Courtes \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
34 2 Frederic Jozon \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
35 2 Gabrielle Paoli \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
36 2 Ludovic Simon \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
37 2 Mathieu Labonne \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
39 2 Ramin Farhangi \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
40 3 \N \N Fabrice Perez Fabrice Perez \N file 9867 \N 9867 /Cooperative-Oasis-Dossier-presse-juin-2021.pdf 17 1650966233 0 \N oycXHPJz95Z85Mi 0 \N f \N 0
41 3 \N \N Ramin Farhangi Ramin Farhangi \N file 24753 \N 24753 /Rencontres 2022 - Est - Rôles et redevabilités.ods 17 1650975010 0 \N pEFKH3e72GnkJeP 0 \N f \N 0
42 3 \N \N Ramin Farhangi Ramin Farhangi \N file 27471 \N 27471 /Rencontres 2022 - Ouest - Modèle économique et tarification.ods 19 1650986878 0 \N FNYfwYTaqmZCymY 0 \N f 0
43 3 \N \N Ramin Farhangi Ramin Farhangi \N file 27472 \N 27472 /Rencontres 2022 - Ouest - Rôles et redevabilités.ods 19 1650986902 0 \N G5bbrtWEfFSyt89 0 \N f 0
44 3 \N \N Ramin Farhangi Ramin Farhangi \N file 27473 \N 27473 /Rencontres 2022 - Ouest - Cadre général et programme.odt 19 1650986912 0 \N R5foCAtH2wEbP8g 0 \N f 0
45 3 \N \N Mathieu Labonne Mathieu Labonne \N file 23624 \N 23624 /Pad réunions d'équipe.md 19 1651002550 0 \N yobqRirJwdxNQ4M 0 \N f 0
47 3 \N \N Ramin Farhangi Ramin Farhangi \N file 29498 \N 29498 /Coop Oasis - organisation, rôles et redevabilités.ods 19 1651053500 0 \N rLjcxCRFW6GywDn 0 \N f 0
48 3 \N \N Aurore Borowik Aurore Borowik \N file 44086 \N 44086 /Curriculum Vitae du représentant légal de la Coopérative Oasis.pdf 17 1651151428 0 \N mBgSj3n24ot6MoX 0 \N f \N 0
49 3 \N \N Aurore Borowik Aurore Borowik \N file 56294 \N 56294 /Levées de fonds Coopérative Oasis.ods 17 1651502448 0 \N BMHK8b2KjT9wR7Q 0 \N f \N 0
50 3 \N \N Aurore Borowik Aurore Borowik \N file 56317 \N 56317 /Rapport Du commissaire aux comptes sur les comptes annuels _ exercice clos le 31 décembre 2020.pdf 17 1651502525 0 \N 3x7QodjTHetMQd6 0 \N f \N 0
51 3 \N \N Aurore Borowik Aurore Borowik \N file 56318 \N 56318 /COOPERATIVE OASIS - Comptes annuels 31_12_2020.pdf 17 1651502612 0 \N 8t2iRz5bHqnceZY 0 \N f \N 0
52 3 \N \N Aurore Borowik Aurore Borowik \N file 56310 \N 56310 /Échéancier de l’endettement sur 5 ans _ Coopérative Oasis.ods 17 1651502700 0 \N XReCHP6DGN3boqY 0 \N f \N 0
53 3 \N \N Aurore Borowik Aurore Borowik \N file 56295 \N 56295 /Prévisionnel d'activité _ Coopérative Oasis.ods 17 1651502753 0 \N Lm4zfy3bcLz8yY5 0 \N f \N 0
54 3 \N \N Aurore Borowik Aurore Borowik \N file 56309 \N 56309 /Curriculum Vitae du représentant légal de la Coopérative Oasis.pdf 17 1651502798 0 \N cJeybXSe45ijqt8 0 \N f \N 0
55 3 \N \N Aurore Borowik Aurore Borowik \N file 56354 \N 56354 /PV CA_Coop OASIS_2018_12_11.pdf 17 1651502911 0 \N 9qjbxAg6X5iCB7s 0 \N f \N 0
56 3 \N \N Aurore Borowik Aurore Borowik \N file 56347 \N 56347 /Tableau de répartition de l'actionnariat _ Coopérative Oasis.ods 17 1651502967 0 \N HjjTZwSEzA7xqtm 0 \N f \N 0
57 3 \N \N Aurore Borowik Aurore Borowik \N file 56366 \N 56366 /Articles 17 et 20 des statuts de la SCIC SA COOPERATIVE OASIS.pdf 17 1651503040 0 \N 9bQwdrtxzr6WHn3 0 \N f \N 0
58 3 \N \N Aurore Borowik Aurore Borowik \N file 56375 \N 56375 /Articles 12 et 15 des statuts de la SCIC SA COOPERATIVE OASIS.pdf 17 1651503104 0 \N sEXQxRWWHaWEnHt 0 \N f \N 0
59 3 \N \N Aurore Borowik Aurore Borowik \N file 56387 \N 56387 /Articles 8 et 11 des statuts de la SCIC SA COOPERATIVE OASIS.pdf 17 1651503166 0 \N BMmNzxpNKsqBj74 0 \N f \N 0
60 3 \N \N Aurore Borowik Aurore Borowik \N file 56388 \N 56388 /Bulletin-personne-physique.pdf 17 1651503271 0 \N kG8Xd44MzzE4XjM 0 \N f \N 0
61 3 \N \N Aurore Borowik Aurore Borowik \N file 56389 \N 56389 /Bulletin-personne-morale.pdf 17 1651503294 0 \N cATQLYqiLSKxrLW 0 \N f \N 0
62 3 \N \N Aurore Borowik Aurore Borowik \N file 56596 \N 56596 /Tableau des congés.ods 17 1651514240 0 \N z5y8GMyGfqg47se 0 \N f \N 0
63 3 \N \N Fabrice Perez Fabrice Perez \N folder 13641 \N 13641 /Kit Com Oasis Convention 17 1651593789 0 \N 4RoPNQi4LtdBEWg 0 \N f \N 0
76 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90674 \N 90674 /CAP SUR LES OASIS Communqué de lancement.odt 19 1652263931 0 \N Q3xoozjSTnCasFp 0 \N f 0
67 3 \N \N Mathieu Labonne Mathieu Labonne \N file 83251 \N 83251 /Comité stratégique 2022-05-06.odt 17 1651858176 0 \N 5XQ5ft26xMb35jf 0 \N f \N 0
69 3 \N \N Mathieu Labonne Mathieu Labonne \N file 83691 \N 83691 /COOPERATIVE OASIS - COMPTES ANNUELS_2021.pdf 17 1652168085 0 \N MfQYqj7o9RZ3j2S 0 \N f \N 0
71 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90259 \N 90259 /Cap sur les Oasis Dossier de présentation.pdf 17 1652261112 0 \N zDWBmS4pxyFxBDb 0 \N f \N 0
72 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90266 \N 90266 /Cap sur les Oasis du Sud-Ouest - Saison 1 - Bande-annonce.mp4 17 1652261177 0 \N pytgTxtkmnEqNQc 0 \N f \N 0
73 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90495 \N 90495 /Bannières et titres 17 1652261644 0 \N gKTkmFRsCksj2Qe 0 \N f \N 0
74 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90317 \N 90317 /Vignettes 17 1652261666 0 \N fdmbaNRAKnHHfbt 0 \N f \N 0
75 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90318 \N 90318 /Photos 17 1652261677 0 \N 3bFd64fdH5CgCyQ 0 \N f \N 0
77 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90255 \N 90255 /CAP SUR LES OASIS Kit de communication.odt 19 1652264032 0 \N bTp4zkCQo2HXzBr 0 \N f 0
78 3 \N \N Mathieu Labonne Mathieu Labonne \N file 90720 \N 90720 /Invités Rencontres 2022.ods 17 1652265835 0 \N B2Q2e4qKm2sCiaP 0 \N f \N 0
79 3 \N \N Mathieu Labonne Mathieu Labonne \N folder 86204 \N 86204 /TERRE DE MILPA 17 1652290862 0 \N CCY97ajdT5XQ26k 0 \N f \N 0
80 3 \N \N Mathieu Labonne Mathieu Labonne \N file 91288 \N 91288 /TDM_présentation_Ferme_des_Seignes.pdf 17 1652290928 0 \N ANXpRJDtzDtWQ9i 0 \N f \N 0
70 3 \N \N Mathieu Labonne Fabrice Perez 27 folder 90253 \N 90253 /Kit Com Cap sur les oasis 17 1652261040 0 \N ZZi7XzXJg6jpoR5 0 \N f 0
81 3 \N \N Mathieu Labonne Fabrice Perez 27 file 90260 \N 90260 /CAP SUR LES OASIS Calendrier de diffusion.jpg 17 1652789736 0 \N FAfKtgHoyGA9JBC 0 \N f \N 0
83 3 \N \N serveur serveur \N file 1314 \N 1314 /Test feuille.xlsx 17 1652968350 0 \N ingaEtoE3gSZQFw 0 \N f \N 0
86 2 daphne_vialan \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
87 3 \N \N admin.local admin.local \N file 166356 \N 166356 /Quartier circulaire.odt 17 1653038891 0 \N Sdgd3f6YnYx8EAC 0 \N f \N 0
90 3 \N \N Mathieu Labonne Mathieu Labonne \N file 166448 \N 166448 /Suivi contacts Oasis (hors ou avant prêt).xlsx 17 1653300018 0 \N 5p8wFonaNPWds59 0 \N f \N 0
93 2 nathalie_boquien \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
94 3 \N \N Mathieu Labonne Mathieu Labonne \N file 177009 \N 177009 /Fiche de rôle Communication et inspiration.docx 17 1653413869 0 \N StXYQ6QBffdRYTs 0 \N f \N 0
95 2 coralie_darsy \N Mathieu Labonne Mathieu Labonne 27 folder 8954 \N 8954 /INSPIRATION DOCUMENTATION 31 1650965478 1 \N \N 0 \N f \N 0 \N
88 3 \N \N daphne_vialan daphne_vialan \N file 25818 \N 25818 /Mandat Rôle Prendre soin de l'Humain.xlsx 17 1653147142 0 \N zP7YxQPRjkR2nyH 0 \N f 0 pour les oasis
96 3 \N \N Mathieu Labonne Mathieu Labonne \N file 186155 \N 186155 /Fiche de rôle Communication et inspiration.pdf 17 1653998560 0 \N i9G3RZECZoKfmXJ 0 \N f \N 0
97 3 \N \N daphne_vialan daphne_vialan \N file 176905 \N 176905 /Coop Oasis - organisation, rôles et redevabilités.ods 17 1654028293 0 \N mj75WDXG8GmSB3M 0 \N f \N 0
98 3 \N \N nathalie_boquien nathalie_boquien \N folder 183238 \N 183238 /Docs finaux pour Comité engagement - Petite Graine 17 1654201973 0 \N 3LnrDmeATnsGH2g 0 \N f \N 0
99 3 \N \N nathalie_boquien nathalie_boquien \N folder 183238 \N 183238 /Docs finaux pour Comité engagement - Petite Graine 17 1654201983 0 \N kbNeASGgiBxoWEC 0 \N f \N 0
100 3 \N \N nathalie_boquien nathalie_boquien \N folder 23684 \N 23684 /Comite engagement 17 1654430328 0 \N XjDKqknYNNjEFkt 0 \N f \N 0
101 3 \N \N Ramin Farhangi Ramin Farhangi \N file 195081 \N 195081 /Oasis de Kernours - Coop Oasis.ods 19 1654672970 0 \N xAEjFqwoHAMNMPZ 0 \N f 0
103 3 \N \N event event \N file 196005 \N 196005 /Grille tarifaire OASIS 21.xlsx 17 1654776825 0 \N i4F6BS2DMxtr6Dc 0 \N f \N 0
104 3 \N \N nathalie_boquien nathalie_boquien \N file 204819 \N 204819 /CR CE Petite graine.docx 19 1654786801 0 \N 2cq4o9ZGfzqeLpE 0 \N f 0
105 3 \N \N nathalie_boquien nathalie_boquien \N file 18427 \N 18427 /Devis 2022-NB-6_PetiteGraine signé 8-04-2022.pdf 17 1655130350 0 \N iqm6kPCXkFALJ7z 0 \N f \N 0
106 3 \N \N nathalie_boquien nathalie_boquien \N file 189055 \N 189055 /proposition de document cadre vie de lequipe.odt 17 1655214144 0 \N HYAy9qaLffc5Sxb 0 \N f \N 0
107 3 \N \N Fabrice Perez Fabrice Perez \N folder 13637 \N 13637 /RVB 17 1655245076 0 \N pLdeMnpXKdLyecF 0 \N f \N 0
108 3 \N \N daphne_vialan daphne_vialan \N file 246082 \N 246082 /remuneration proposition.odt 17 1655283100 0 \N oSSsq5ocP2jtETp 0 \N f \N 0
109 10 pn8z9muv \N serveur serveur \N file 2482 \N 2482 /{TALK_PLACEHOLDER}/Readme.md 19 1655803587 0 \N RyLqXNn6piiT3Pc 0 \N f \N 0 \N
110 11 transfert \N serveur serveur 109 file 2482 \N 2482 /Readme.md 19 1655803587 0 \N \N 0 \N f \N 0 \N
111 10 k7sa78si \N serveur serveur \N file 2404 \N 2404 /{TALK_PLACEHOLDER}/toto.ods 19 1655919198 0 \N YmCHdAFWRidc9Ln 0 \N f \N 0 \N
112 11 Anne Tavernier \N serveur serveur 111 file 2404 \N 2404 /toto.ods 19 1655919198 0 \N \N 0 \N f \N 0 \N
113 3 \N \N nathalie_boquien nathalie_boquien \N folder 204432 \N 204432 /CE 17 1656100171 0 \N BpnQoA58NnSo3KL 0 \N f \N 0
114 3 \N \N daphne_vialan daphne_vialan \N file 259638 \N 259638 /ingrid leduc.md 17 1656485529 0 \N tRDWkoGYNfcHN8A 0 \N f \N 0
115 3 \N \N Ramin Farhangi Ramin Farhangi \N file 261546 \N 261546 /Extrait AG Coop Oasis - pages 5 à 9.pdf 17 1656502984 0 \N QAMPnoHrmd5LjJZ 0 \N f \N 0
116 3 \N \N Aurore Borowik Aurore Borowik \N folder 261615 \N 261615 /Juin 2022_Photos Forge du Vallon 17 1656506802 0 \N 6cys6AgEmZ2LBb2 0 \N f \N 0
117 3 \N \N coralie_darsy coralie_darsy \N file 259064 \N 259064 /Présentation WE Forge du Vallon.odp 17 1656649765 0 \N R8J6izxYE2tbBt5 0 \N f \N 0
118 3 \N \N nathalie_boquien nathalie_boquien \N file 264120 \N 264120 /CR CE Les Commun.es.docx 19 1656668815 0 \N FadPpRdz5sTtiLY 0 \N f 0
119 3 \N \N Mathieu Labonne Mathieu Labonne \N folder 25365 \N 25365 /LES COMMUN.E.S 17 1656697632 0 \N 65NMaGL3e96ArE9 0 \N f \N 0
120 3 \N \N Mathieu Labonne Mathieu Labonne \N folder 204432 \N 204432 /CE 17 1656697825 0 \N ArQ7EActTqHqKsC 0 \N f \N 0
121 3 \N \N Fabrice Perez Fabrice Perez \N file 264464 \N 264464 /Audiences et bilan.ods 19 1656712578 0 \N CPpmAAGgWcfC7eY 0 \N f 0
122 3 \N \N Aurore Borowik Aurore Borowik \N file 71102 \N 71102 /oasis-infographie VDEF Horizontal 1 partie.pdf 17 1657114911 0 \N 48pZWYwfBNfYCEm 0 \N f \N 0
123 3 \N \N Aurore Borowik Aurore Borowik \N file 71099 \N 71099 /oasis-infographie VDEF Vertical 2 partie.pdf 17 1657115014 0 \N kQCxJE7SzbY6FeC 0 \N f \N 0
124 3 \N \N Aurore Borowik Aurore Borowik \N file 9878 \N 9878 /Dossier-presse-juin-2021.pdf 17 1657115613 0 \N z44Fxijz5K5CGR7 0 \N f \N 0
125 3 \N \N Aurore Borowik Aurore Borowik \N file 267540 \N 267540 /Pad ambassadeurs et ambassadrices.md 17 1657121026 0 \N zkJ79jcy5xRLPq7 0 \N f \N 0
126 0 Tobias Ollive \N serveur serveur \N file 268352 \N 268352 /test.odt 19 1657230654 1 \N \N 0 \N f \N 0 \N
127 3 \N \N Aurore Borowik Aurore Borowik \N file 277937 \N 277937 /oasis-infographie VDEF Horizontal 1 partie.pdf 17 1657535403 0 \N 5zNYy6BSa5cmNsK 0 \N f \N 0
128 3 \N \N Aurore Borowik Aurore Borowik \N file 277939 \N 277939 /oasis-infographie VDEF Vertical 2 partie.pdf 17 1657535436 0 \N EgsXDSNyDbQzQbm 0 \N f \N 0
129 3 \N \N Aurore Borowik Aurore Borowik \N file 278048 \N 278048 /Dossier-presse-juin-2021.pdf 17 1657535549 0 \N MwXJyAfqi7Z4E6A 0 \N f \N 0
132 3 \N \N serveur serveur \N file 269160 \N 269160 /Nextcloud flyer.pdf 17 1657618310 0 \N MddLc7CoPxZK2Bc 0 \N f \N 0
133 3 \N \N serveur serveur \N file 269164 \N 269164 /Welcome to Nextcloud Hub.docx 17 1657618326 0 \N ACkXB5RDqzDCnFJ 0 \N f \N 0
131 3 \N \N serveur serveur \N file 376132 \N 376132 /encore.odt 17 1657618225 0 \N encoreunfois 0 \N f 0
135 3 \N \N serveur serveur \N file 269116 \N 269116 /Readme.md 17 1657620978 0 \N xAb4Kiyxq2sfrNQ 0 \N f \N 0
\.
--
-- Name: oc_share_id_seq; Type: SEQUENCE SET; Schema: public; Owner: nc
--
SELECT pg_catalog.setval('public.oc_share_id_seq', 135, true);
--
-- Name: oc_share oc_share_pkey; Type: CONSTRAINT; Schema: public; Owner: nc
--
ALTER TABLE ONLY public.oc_share
ADD CONSTRAINT oc_share_pkey PRIMARY KEY (id);
--
-- Name: file_source_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX file_source_index ON public.oc_share USING btree (file_source);
--
-- Name: initiator_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX initiator_index ON public.oc_share USING btree (uid_initiator);
--
-- Name: item_share_type_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX item_share_type_index ON public.oc_share USING btree (item_type, share_type);
--
-- Name: owner_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX owner_index ON public.oc_share USING btree (uid_owner);
--
-- Name: parent_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX parent_index ON public.oc_share USING btree (parent);
--
-- Name: share_with_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX share_with_index ON public.oc_share USING btree (share_with);
--
-- Name: token_index; Type: INDEX; Schema: public; Owner: nc
--
CREATE INDEX token_index ON public.oc_share USING btree (token);
--
-- PostgreSQL database dump complete
--
nextcloud/supervisord.conf
-22
View File
@@ -1,22 +0,0 @@
[supervisord]
nodaemon=true
logfile=/var/log/supervisord/supervisord.log
pidfile=/var/run/supervisord/supervisord.pid
childlogdir=/var/log/supervisord/
logfile_maxbytes=50MB ; maximum size of logfile before rotation
logfile_backups=10 ; number of backed up logfiles
loglevel=error
[program:apache2]
stdout_logfile=/dev/stdout
stdout_logfile_maxbytes=0
stderr_logfile=/dev/stderr
stderr_logfile_maxbytes=0
command=apache2-foreground
[program:cron]
stdout_logfile=/dev/stdout
stdout_logfile_maxbytes=0
stderr_logfile=/dev/stderr
stderr_logfile_maxbytes=0
command=/cron.sh
traefik
Submodule
+1
Submodule traefik added at 3a0455e577
traefik/.gitignore
-3
View File
@@ -1,3 +0,0 @@
*.secrets
.env
certs
traefik/README.md
-46
View File
@@ -1,46 +0,0 @@
## Traefik
Ce dossier contient les ressources nécessaires pour lancer Traefik, un reverse proxy adapté pour Docker.
C'est la pièce la plus importante de l'infrastructure, puisque l'ensemble des communications HTTP(S) passent d'abord par Traefik, et il est aussi utilisé pour [générer des certificats pour les services TCP](../pica-tls-certs-monitor).
Ce service doit être lancé sur l'ensemble des machines de l'infrastructure.
Les explications sont sur le Wiki et doivent être modifiées en cas de changement majeur de configuration : https://wiki.picasoft.net/doku.php?id=technique:tech_team:traefik
### Configuration
La configuration a lieu dans les fichiers [traefik.toml](./traefik.toml) et [traefik_dynamic.toml](./traefik_dynamic.toml).
Notez que toute modification dans ce fichier impactera l'ensemble des machines, puisque le même fichier est utilisé pour l'ensemble des machines.
À des fins de tests, il peut être modifié localement sur les machines, mais doit toujours rester synchronisé avec ce dépôt à long terme.
Pour la génération des certificats, Traefik utilise Let's Encrypt. Il n'y a aucune configuration à faire de ce côté. Attention, le nombre de certificats générables est limité à 50 par semaine.
Si on lance plein de conteneurs de tests, on utilisera temporairement [l'environnement de qualification](https://letsencrypt.org/fr/docs/staging-environment/) de Let's Encrypt, en ajoutant la directive `caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"` sous la section `[certificatesResolvers.letsencrypt.acme]`.
### Lancement
#### Certs
Au premier lancement, assurez-vous que :
- Le dossier `/DATA/docker/traefik/certs` existe
- Créez un fichier `acme.json` à l'intérieur
- Changez son propriétaire à `root`
- Changez ses permissions à `600`
C'est dans ce fichier que seront conservés tous les certificats générés par Traefik.
#### Métriques
Pour le bon fonctionnement des métriques, il faut aussi créer un fichier `.env` (dans le même dossier que le Docker Compose) qui devra contenir 2 variables :
- `SERVER_NAME` qui correspond au nom du serveur, par exemple `SERVER_NAME=pica01-test.picasoft.net`
- `METRICS_AUTH` qui correspond à la chaîne d'identification htpasswd utilisée pour authentifier sur l'endpoint des métriques, par exemple `METRICS_AUTH="traefik:$apr1$bXnknJ0S$GsC.ozNJc/dAkh9uH7Qlg."`
### Mise à jour
Il suffit de mettre à jour le tag de l'image dans Compose.
Lire la documentation [sur les mises à jour mineures](https://docs.traefik.io/v2.2/migration/v2/) pour voir s'il y a des opérations à effectuer ou des options dépréciées.
La mise à jour vers Traefik v2 a été effectuée ; quelques détails sont à consulter [sur le wiki](https://wiki.picasoft.net/doku.php?id=technique:adminsys:migration-traefik-v2).
traefik/docker-compose.yml
-23
View File
@@ -1,23 +0,0 @@
version: "3.7"
networks:
proxy:
name: "proxy"
services:
traefik:
image: traefik:2.10.7
container_name: traefik
ports:
- 80:80
- 443:443
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./traefik.toml:/traefik.toml
- ./traefik_dynamic.toml:/traefik_dynamic.toml
- /DATA/docker/services/certs:/certs
environment:
TZ: Europe/Paris
networks:
- proxy
restart: unless-stopped
traefik/traefik.toml
-50
View File
@@ -1,50 +0,0 @@
[global]
sendAnonymousUsage = false
checkNewVersion = true
[entryPoints]
[entryPoints.web]
address = ":80"
[entryPoints.web.http.redirections.entryPoint]
to = "websecure"
scheme = "https"
[entryPoints.websecure]
address = ":443"
[entryPoints.websecure.http]
middlewares = ["hardening@file", "compression@file"]
[entryPoints.websecure.http.tls]
certResolver = "letsencrypt"
options = "tls12@file"
[entryPoints.metrics]
address = ":8082"
[providers]
providersThrottleDuration = "2s"
[providers.docker]
watch = true
endpoint = "unix:///var/run/docker.sock"
exposedByDefault = false
network = "proxy"
[providers.file]
filename = "/traefik_dynamic.toml"
watch = true
[log]
level = "INFO"
[accessLog]
format = "json"
[accessLog.fields.headers]
defaultMode = "keep"
# See https://doc.traefik.io/traefik/observability/access-logs/#time-zones
[accessLog.fields.names]
"StartUTC" = "drop"
"ClientUsername" = "drop"
[certificatesResolvers]
[certificatesResolvers.letsencrypt]
[certificatesResolvers.letsencrypt.acme]
email = "serveur@oasis21.org"
storage = "/certs/acme.json"
[certificatesResolvers.letsencrypt.acme.httpChallenge]
entryPoint = "web"
traefik/traefik_dynamic.toml
-54
View File
@@ -1,54 +0,0 @@
[tls.options]
[tls.options.tls12]
minVersion = "VersionTLS12"
cipherSuites = [
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
"TLS_AES_256_GCM_SHA384",
"TLS_CHACHA20_POLY1305_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
]
curvePreferences = ["CurveP521","CurveP384", "CurveP256"]
[http]
[http.middlewares.hardening.headers]
browserXssFilter = true
contentTypeNosniff = true
forceSTSHeader = true
frameDeny = true
stsIncludeSubdomains = true
stsPreload = true
customFrameOptionsValue = "ALLOW-FROM https://odoo.cooperative-oasis.org https://cloud.oasis21.org"
referrerPolicy = "same-origin"
permissionsPolicy = "vibrate='self'"
stsSeconds = 315360000
[http.middlewares.compression.compress]
excludedContentTypes = ["text/event-stream"]
[http.middlewares.allowFrameAndCORS.headers]
customFrameOptionsValue = "ALLOW-FROM https://code.oasis21.org https://odoo.cooperative-oasis.org"
contentSecurityPolicy = "frame-ancestors * cloud.oasis21.org https://odoo.cooperative-oasis.org"
accessControlAllowHeaders = ["*"]
accessControlAllowMethods = ["GET", "POST", "OPTIONS"]
accessControlAllowOriginList = ["*"]
accessControlExposeHeaders = ["*"]
[http.routers]
[http.routers.coopoasis]
entrypoints = "websecure"
rule = "Host(`odoo.cooperative-oasis.org`) || Host(`pad.cooperative-oasis.org`) || Host(`odoo-dev.cooperative-oasis.org`) || Host(`test-odoo.cooperative-oasis.org`)"
service = "coopoasis"
[http.routers.papercut]
entrypoints = "websecure"
rule = "Host(`papercut.oasis21.org`)"
service = "papercut"
[http.services]
[http.services.coopoasis.loadBalancer]
[[http.services.coopoasis.loadBalancer.servers]]
url = "http://172.16.7.12/"
[http.services.papercut.loadBalancer]
[[http.services.papercut.loadBalancer.servers]]
url = "http://172.16.7.13:9191/"
website
Submodule
+1
Submodule website added at de2740993b