mirror of
https://github.com/alchemy-fr/Phraseanet.git
synced 2025-10-18 07:23:13 +00:00
manage ImageMagick policies on docker context
This commit is contained in:
10
.env
10
.env
@@ -140,3 +140,13 @@ SSH_AUTH_SOCK=/dev/null
|
||||
# Plugin support
|
||||
PHRASEANET_PLUGINS=
|
||||
PHRASEANET_SSH_PRIVATE_KEY=
|
||||
|
||||
# ImageMagick policies change
|
||||
IMAGEMAGICK_POLICY_VERSION=6
|
||||
IMAGEMAGICK_POLICY_WIDTH=16KP
|
||||
IMAGEMAGICK_POLICY_HEIGHT=16KP
|
||||
IMAGEMAGICK_POLICY_MAP=512MiB
|
||||
IMAGEMAGICK_POLICY_MEMORY=256MiB
|
||||
IMAGEMAGICK_POLICY_AREA=128MB
|
||||
IMAGEMAGICK_POLICY_DISK=1GiB
|
||||
IMAGEMAGICK_POLICY_TEMPORARY_PATH=/tmp
|
||||
|
@@ -135,7 +135,14 @@ services:
|
||||
- LC_CTYPE=C.UTF-8
|
||||
- LC_TIME=C.UTF-8
|
||||
- LC_NAME=C.UTF-8
|
||||
|
||||
- IMAGEMAGICK_POLICY_VERSION
|
||||
- IMAGEMAGICK_POLICY_WIDTH
|
||||
- IMAGEMAGICK_POLICY_HEIGHT
|
||||
- IMAGEMAGICK_POLICY_MAP
|
||||
- IMAGEMAGICK_POLICY_MEMORY
|
||||
- IMAGEMAGICK_POLICY_AREA
|
||||
- IMAGEMAGICK_POLICY_DISK
|
||||
- IMAGEMAGICK_POLICY_TEMPORARY_PATH
|
||||
volumes:
|
||||
- ${PHRASEANET_CONFIG_DIR}:/var/alchemy/Phraseanet/config:rw
|
||||
- ${PHRASEANET_LOGS_DIR}:/var/alchemy/Phraseanet/logs:rw
|
||||
|
@@ -15,4 +15,12 @@ if [ ${XDEBUG_ENABLED} == "1" ]; then
|
||||
docker-php-ext-enable xdebug
|
||||
fi
|
||||
|
||||
sed -i "s/domain=\"resource\" name=\"memory\" value=\".*\"/domain=\"resource\" name=\"memory\" value=\"$IMAGEMAGICK_POLICY_MEMORY\"/g" /etc/ImageMagick-6/policy.xml
|
||||
sed -i "s/domain=\"resource\" name=\"map\" value=\".*\"/domain=\"resource\" name=\"map\" value=\"$IMAGEMAGICK_POLICY_MAP\"/g" /etc/ImageMagick-6/policy.xml
|
||||
sed -i "s/domain=\"resource\" name=\"width\" value=\".*\"/domain=\"resource\" name=\"width\" value=\"$IMAGEMAGICK_POLICY_WIDTH\"/g" /etc/ImageMagick-6/policy.xml
|
||||
sed -i "s/domain=\"resource\" name=\"height\" value=\".*\"/domain=\"resource\" name=\"height\" value=\"$IMAGEMAGICK_POLICY_HEIGHT\"/g" /etc/ImageMagick-6/policy.xml
|
||||
sed -i "s/domain=\"resource\" name=\"disk\" value=\".*\"/domain=\"resource\" name=\"disk\" value=\"$IMAGEMAGICK_POLICY_DISK\"/g" /etc/ImageMagick-6/policy.xml
|
||||
sed -i "s/domain=\"resource\" name=\"area\" value=\".*\"/domain=\"resource\" name=\"area\" value=\"$IMAGEMAGICK_POLICY_AREA\"/g" /etc/ImageMagick-6/policy.xml
|
||||
sed -i "s/domain=\"resource\" name=\"temporary-path\" value=\".*\"/domain=\"resource\" name=\"temporary-path\" value=\"\$IMAGEMAGICK_POLICY_TEMPORARY_PATH\"/g" /etc/ImageMagick-6/policy.xml
|
||||
|
||||
runuser -u app -- $@
|
||||
|
Reference in New Issue
Block a user