mirror of
https://github.com/alchemy-fr/Phraseanet.git
synced 2025-10-18 07:23:13 +00:00
manage ImageMagick policies on docker context
This commit is contained in:
10
.env
10
.env
@@ -140,3 +140,13 @@ SSH_AUTH_SOCK=/dev/null
|
|||||||
# Plugin support
|
# Plugin support
|
||||||
PHRASEANET_PLUGINS=
|
PHRASEANET_PLUGINS=
|
||||||
PHRASEANET_SSH_PRIVATE_KEY=
|
PHRASEANET_SSH_PRIVATE_KEY=
|
||||||
|
|
||||||
|
# ImageMagick policies change
|
||||||
|
IMAGEMAGICK_POLICY_VERSION=6
|
||||||
|
IMAGEMAGICK_POLICY_WIDTH=16KP
|
||||||
|
IMAGEMAGICK_POLICY_HEIGHT=16KP
|
||||||
|
IMAGEMAGICK_POLICY_MAP=512MiB
|
||||||
|
IMAGEMAGICK_POLICY_MEMORY=256MiB
|
||||||
|
IMAGEMAGICK_POLICY_AREA=128MB
|
||||||
|
IMAGEMAGICK_POLICY_DISK=1GiB
|
||||||
|
IMAGEMAGICK_POLICY_TEMPORARY_PATH=/tmp
|
||||||
|
@@ -135,7 +135,14 @@ services:
|
|||||||
- LC_CTYPE=C.UTF-8
|
- LC_CTYPE=C.UTF-8
|
||||||
- LC_TIME=C.UTF-8
|
- LC_TIME=C.UTF-8
|
||||||
- LC_NAME=C.UTF-8
|
- LC_NAME=C.UTF-8
|
||||||
|
- IMAGEMAGICK_POLICY_VERSION
|
||||||
|
- IMAGEMAGICK_POLICY_WIDTH
|
||||||
|
- IMAGEMAGICK_POLICY_HEIGHT
|
||||||
|
- IMAGEMAGICK_POLICY_MAP
|
||||||
|
- IMAGEMAGICK_POLICY_MEMORY
|
||||||
|
- IMAGEMAGICK_POLICY_AREA
|
||||||
|
- IMAGEMAGICK_POLICY_DISK
|
||||||
|
- IMAGEMAGICK_POLICY_TEMPORARY_PATH
|
||||||
volumes:
|
volumes:
|
||||||
- ${PHRASEANET_CONFIG_DIR}:/var/alchemy/Phraseanet/config:rw
|
- ${PHRASEANET_CONFIG_DIR}:/var/alchemy/Phraseanet/config:rw
|
||||||
- ${PHRASEANET_LOGS_DIR}:/var/alchemy/Phraseanet/logs:rw
|
- ${PHRASEANET_LOGS_DIR}:/var/alchemy/Phraseanet/logs:rw
|
||||||
|
@@ -15,4 +15,12 @@ if [ ${XDEBUG_ENABLED} == "1" ]; then
|
|||||||
docker-php-ext-enable xdebug
|
docker-php-ext-enable xdebug
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
sed -i "s/domain=\"resource\" name=\"memory\" value=\".*\"/domain=\"resource\" name=\"memory\" value=\"$IMAGEMAGICK_POLICY_MEMORY\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
sed -i "s/domain=\"resource\" name=\"map\" value=\".*\"/domain=\"resource\" name=\"map\" value=\"$IMAGEMAGICK_POLICY_MAP\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
sed -i "s/domain=\"resource\" name=\"width\" value=\".*\"/domain=\"resource\" name=\"width\" value=\"$IMAGEMAGICK_POLICY_WIDTH\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
sed -i "s/domain=\"resource\" name=\"height\" value=\".*\"/domain=\"resource\" name=\"height\" value=\"$IMAGEMAGICK_POLICY_HEIGHT\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
sed -i "s/domain=\"resource\" name=\"disk\" value=\".*\"/domain=\"resource\" name=\"disk\" value=\"$IMAGEMAGICK_POLICY_DISK\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
sed -i "s/domain=\"resource\" name=\"area\" value=\".*\"/domain=\"resource\" name=\"area\" value=\"$IMAGEMAGICK_POLICY_AREA\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
sed -i "s/domain=\"resource\" name=\"temporary-path\" value=\".*\"/domain=\"resource\" name=\"temporary-path\" value=\"\$IMAGEMAGICK_POLICY_TEMPORARY_PATH\"/g" /etc/ImageMagick-6/policy.xml
|
||||||
|
|
||||||
runuser -u app -- $@
|
runuser -u app -- $@
|
||||||
|
Reference in New Issue
Block a user