si:lstu

Différences

Ci-dessous, les différences entre deux révisions de la page.

Lien vers cette vue comparative

Les deux révisions précédentes Révision précédente
si:lstu [2021/02/21 15:54] – dinosi:lstu [2021/02/21 15:57] (Version actuelle) – dino
Ligne 1: Ligne 1:
 +Installation du raccourcisseur d'url
  
 +
 +Installation des paquets :
 +<code>
 +apt-get install build-essential libssl-dev zlib1g-dev sudo git
 +sudo apt-get install libpng-dev
 +sudo cpan Carton
 +sudo apt-get install memcached
 +sudo apt-get install libmariadbd-dev
 +</code>
 +
 +
 +Ajout d'un utilisateur dédié
 +<code>
 +useradd lstu
 +groupadd lstu
 +mkdir -p /var/www/lstu
 +chown -R lstu:lstu /var/www/lstu
 +usermod -d /var/www/lstu/ lstu
 +</code>
 +
 +Récupération du dépôt via git
 +
 +<code>
 +git clone https://framagit.org/luc/lstu.git
 +</code>
 +
 +mise à jour 
 +<code>
 +cd  /var/www/lstu
 +git pull
 +</code>
 +
 +Installation des dépendance
 +<code>
 +su lstu -s /bin/bash
 +carton install
 +carton install --deployment  --without=test --without=sqlite --without=postgresql --without=ldap 
 +</code>
 +
 +test du service ou mode manuel
 +start
 +<code>
 +carton exec hypnotoad   script/lstu
 +</code>
 +
 +stop
 +<code>
 +carton exec hypnotoad  -s  script/lstu
 +</code>
 +
 +
 +Paramétrage de la configuration LDAP 
 +
 +démarrage auto
 +<code>
 +cp utilities/lstu@.service /etc/systemd/system/
 +
 +vérification des chemins et utilisateurs dans : 
 +<code>
 +vim /etc/systemd/system/lstu.service
 +</code>
 +
 +utilisation du service
 +<code>
 +systemctl daemon-reload
 +systemctl enable lstu.service
 +systemctl start lstu.service
 +systemctl status lstu.service
 +</code>
 +
 +vérification du pid
 +<code>
 +ls -la  /var/www/lstu/script/hypnotoad.pid
 +</code>
 +
 +au cas ou
 +<code>
 +chown -R  lstu:www-data /var/www/lstu/script/
 +chmod -R 774 /var/www/lstu/script/
 +</code>
 +
 +
 +entrées dans le Vhost Nginx
 +<code>
 + location / {
 +        error_page 404 = /oauth2/auth ;
 +        proxy_pass http://192.168.1.72:8080;
 +        proxy_set_header Host      $host;
 +        proxy_http_version 1.1;
 +        }
 +
 +location /oauth2/ {
 +proxy_pass   http://127.0.0.1:4180;
 +proxy_set_header Host $host;
 +proxy_set_header X-Real-IP   $remote_addr;
 +proxy_set_header X-Scheme $scheme;
 +proxy_set_header X-Auth-Request-Redirect $request_uri;
 +# or, if you are handling multiple domains:
 +# proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
 +}
 +
 +location = /oauth2/auth {
 +proxy_pass   http://127.0.0.1:4180;
 +proxy_set_header Host $host;
 +proxy_set_header X-Real-IP $remote_addr;
 +proxy_set_header X-Scheme $scheme;
 +# nginx auth_request includes headers but not body
 +proxy_set_header Content-Length   "";
 +proxy_pass_request_body   off;
 +}
 +
 +location  = / {
 +        auth_request /oauth2/auth;
 +        error_page 401 = /oauth2/sign_in;
 +# # pass information via X-User and X-Email headers to backend,
 +# # requires running with --set-xauthrequest flag
 +        auth_request_set $user   $upstream_http_x_auth_request_user;
 +        auth_request_set $email  $upstream_http_x_auth_request_email;
 +        proxy_set_header X-User  $user;
 +        proxy_set_header X-Email $email;
 +# if you enabled --pass-access-token, this will pass the token to the backend
 +        auth_request_set $token  $upstream_http_x_auth_request_access_token;
 +        proxy_set_header X-Access-Token $token;
 +# if you enabled --cookie-refresh, this is needed for it to work with auth_request
 +        auth_request_set $auth_cookie $upstream_http_set_cookie;
 +        add_header Set-Cookie $auth_cookie;
 +# When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
 +# limit and so the OAuth2 Proxy splits these into multiple parts.
 +# Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
 +# so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
 +        auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;
 +# Extract the Cookie attributes from the first Set-Cookie header and append them
 +# to the second part ($upstream_cookie_* variables only contain the raw cookie content)
 +        if ($auth_cookie ~* "(; .*)") {
 +                set $auth_cookie_name_0 $auth_cookie;
 +        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
 +        }
 +# Send both Set-Cookie headers now if there was a second part
 +        if ($auth_cookie_name_upstream_1) {
 +        add_header Set-Cookie $auth_cookie_name_0;
 +        add_header Set-Cookie $auth_cookie_name_1;
 +        }
 +        proxy_pass http://192.168.1.72:8080;
 +#       proxy_pass http://127.0.0.1:3000/;
 +        proxy_set_header Host      $host;
 +        proxy_http_version 1.1;
 +    }
 +</code>