si:logiciels:lstu [Wiki de Parinux]

Cette page est en lecture seule. Vous pouvez afficher le texte source, mais ne pourrez pas le modifier. Contactez votre administrateur si vous pensez qu'il s'agit d'une erreur.
Installation du raccourcisseur d'url


Installation des paquets :
<code>
apt-get install build-essential libssl-dev zlib1g-dev sudo git
sudo apt-get install libpng-dev
sudo cpan Carton
sudo apt-get install memcached
sudo apt-get install libmariadbd-dev
</code>


Ajout d'un utilisateur dédié
<code>
useradd lstu
groupadd lstu
mkdir -p /var/www/lstu
chown -R lstu:lstu /var/www/lstu
usermod -d /var/www/lstu/ lstu
</code>

Récupération du dépôt via git

<code>
git clone https://framagit.org/luc/lstu.git
</code>

mise à jour 
<code>
cd  /var/www/lstu
git pull
</code>

Installation des dépendance
<code>
su lstu -s /bin/bash
carton install
carton install --deployment  --without=test --without=sqlite --without=postgresql --without=ldap 
</code>

test du service ou mode manuel
start
<code>
carton exec hypnotoad   script/lstu
</code>

stop
<code>
carton exec hypnotoad  -s  script/lstu
</code>


Paramétrage de la configuration LDAP 

démarrage auto
<code>
cp utilities/lstu@.service /etc/systemd/system/

vérification des chemins et utilisateurs dans : 
<code>
vim /etc/systemd/system/lstu.service
</code>

utilisation du service
<code>
systemctl daemon-reload
systemctl enable lstu.service
systemctl start lstu.service
systemctl status lstu.service
</code>

vérification du pid
<code>
ls -la  /var/www/lstu/script/hypnotoad.pid
</code>

au cas ou
<code>
chown -R  lstu:www-data /var/www/lstu/script/
chmod -R 774 /var/www/lstu/script/
</code>


entrées dans le Vhost Nginx
<code>
 location / {
        error_page 404 = /oauth2/auth ;
        proxy_pass http://192.168.1.72:8080;
        proxy_set_header Host      $host;
        proxy_http_version 1.1;
        }

location /oauth2/ {
proxy_pass   http://127.0.0.1:4180;
proxy_set_header Host $host;
proxy_set_header X-Real-IP   $remote_addr;
proxy_set_header X-Scheme $scheme;
proxy_set_header X-Auth-Request-Redirect $request_uri;
# or, if you are handling multiple domains:
# proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
}

location = /oauth2/auth {
proxy_pass   http://127.0.0.1:4180;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme;
# nginx auth_request includes headers but not body
proxy_set_header Content-Length   "";
proxy_pass_request_body   off;
}

location  = / {
        auth_request /oauth2/auth;
        error_page 401 = /oauth2/sign_in;
# # pass information via X-User and X-Email headers to backend,
# # requires running with --set-xauthrequest flag
        auth_request_set $user   $upstream_http_x_auth_request_user;
        auth_request_set $email  $upstream_http_x_auth_request_email;
        proxy_set_header X-User  $user;
        proxy_set_header X-Email $email;
# if you enabled --pass-access-token, this will pass the token to the backend
        auth_request_set $token  $upstream_http_x_auth_request_access_token;
        proxy_set_header X-Access-Token $token;
# if you enabled --cookie-refresh, this is needed for it to work with auth_request
        auth_request_set $auth_cookie $upstream_http_set_cookie;
        add_header Set-Cookie $auth_cookie;
# When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
# limit and so the OAuth2 Proxy splits these into multiple parts.
# Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
# so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
        auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;
# Extract the Cookie attributes from the first Set-Cookie header and append them
# to the second part ($upstream_cookie_* variables only contain the raw cookie content)
        if ($auth_cookie ~* "(; .*)") {
                set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
        }
# Send both Set-Cookie headers now if there was a second part
        if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
        }
        proxy_pass http://192.168.1.72:8080;
#       proxy_pass http://127.0.0.1:3000/;
        proxy_set_header Host      $host;
        proxy_http_version 1.1;
    }
</code>