source: darkpeak-services/ @ 9693e7f3

Last change on this file since 9693e7f3 was 9693e7f3, checked in by Mat Booth <mat.booth@…>, 3 years ago

sssd: Bind non-anonymously to allow retrieval of more privileged
information like ssh keys, etc

  • Property mode set to 100644
File size: 947 bytes
1- Create users and groups as part of each web service's role rather than having php-fpm role create them indirectly.
2- Shorten the merry dance of simlinks involved in the location of mediawiki's LocalSettings.php file (which involves allowing the execution of php code in several directories that might otherwise be sensible to keep out of php-fpm's path, like /etc/mediawiki)
3- Have each role create its own webroot directory, or at least pass owner, group and mode as variables to the nginx role's "configure-nginx-website.yml" playbook. This would avoid having to fix webroot permissions for roles that use php-fpm(e.g. ttrss, mediawiki).
4- Move mastodon's webroot from /home/mastodon/live to /var/www/mastodon for consistency.
5- Fix the "include" deprecation warnings.
6- Ensure all users of LDAP are talking over TLS and actually verify certs
7- Replace the "darkpeak" LDAP user with a proper system user for services such as SSSD to bind with
Note: See TracBrowser for help on using the repository browser.