Commit Graph

196 Commits

Author SHA1 Message Date
Nicolas Maillat
5dd527d339 imageMagick policies in FPM container WIP (#4604) 2025-05-20 17:16:54 +02:00
Aina Sitraka
1f56bfa225 PHRAS-4146 bin/setup system:install - abort app installation if mysql db is not empty (#4599)
* abort install if db table exist

* fix test

* unneeded

* highlight install message

---------

Co-authored-by: Nicolas Maillat <maillat@alchemy.fr>
2025-03-29 12:03:19 +01:00
Aina Sitraka
3495492d39 add mysql timeout env (#4584) 2025-02-19 08:32:23 +01:00
moctardiouf
30a8029ff1 PHRAS-4130 : upgrade mariadb to 5.11.11 (#4586)
* PHRAS-4130 : upgrade mariadb to 5.11.11

* Update CHANGELOG.md
2025-02-19 08:04:22 +01:00
moctardiouf
026d61e52f PHRAS-4117 remove gateway /status and /ping page direct access (#4571)
* PHRAS-4117 remove gateway /status and /ping page direct access

* PHRAS-4117 fix typo

* PHRAS-4117 add ip management
2025-01-09 14:57:49 +01:00
moctardiouf
4e9414ba6e PHRAS-3588 implement http request quota by type (#4564)
* PHRAS-3588 manage http request limits by verbs

* PHRAS-3588 change limit method

* re-introduce burst parameters

* PHRAS-3588 add activation boolean

* applying auto-documentation format for env var
2024-12-12 11:08:23 +01:00
Nicolas Maillat
62e44715b6 PHRAS-4100 Php upload tmp directory (#4553)
* adding PHP_UPLOAD_TMP_DIR

* ready for QA

* clean in fpm entrypoint

* leave php upload_tmp_dir in /tmp for workers

* keep only PHP_UPLOAD_TMP_DIR env in fpm and setup containers
2024-10-10 18:14:46 +02:00
moctardiouf
f2789d53c2 PHRAS-4056 -fix non escaped path error in sed (#4524)
* PHRAS-4056 -fix non escaped path error in sed

* PHRAS-4056 add ImageMagick variables to CMD container
2024-06-13 18:13:17 +02:00
moctardiouf
9f77c2cbbe PHRAS-4064-fix-worker-plugin-install-as-app (#4508) 2024-05-15 22:08:49 +02:00
moctardiouf
50ca67433f PHRAS-4053 redis native session (#4505)
* PHRASEANET_USER_SESSION_LIFETIME as php session.gc_maxlifetime

* dissociate PHRASEANET_SESSION_TYPE and php SESSION_SAVE_HANDLER
2024-04-29 19:05:08 +02:00
moctardiouf
fd4adfc977 PHRAS-4056 change imagemagick version and config file path (#4500)
* PHRAS-4056 change imagemagick version and config file path

* PHRAS-4056 uncomment ImageMagick policy lines

* PHRAS-4056 fix line break

* PHRAS-4056 increase ImageMagick default config policy values
2024-04-25 18:28:42 +02:00
moctardiouf
f1b81219cd PHRAS-4005 - update containers os (#4464)
* update debian version to debian 11

* uncomment make install

* change base image version

* Update entrypoint.sh

* bump base image version 1.0.0
2024-03-19 14:00:10 +01:00
Aina Sitraka
f02e5b8e5f PHRAS-4023 hcaptcha in Phraseanet (#4473)
* use hcaptcha

* add conf

* use captcha-provider key instead of captchas-enabled in configuration

* fix test

* test

* bump back version to rc9
2024-02-29 14:59:46 +01:00
Nicolas Maillat
d776d3d71b PHRAS-4022 setup optim (#4467)
* exclude www/thumbnails of chown

* Update entrypoint.sh
2024-02-02 18:27:59 +01:00
Aina Sitraka
d6c21faac0 PHRAS-4019: Session expires with the php default value (#4466)
* fix param in function

* docker - add session management variables

* docker - fix setup entrypoint error

---------

Co-authored-by: Moctar <diouf@alchemy.fr>
2024-02-02 16:02:06 +01:00
Aina Sitraka
71ef4bf1dd PHRAS-4011 : Moving cmd from console to setup - system:clear-cache system:clear-session (#4460)
* cmd clear cache in bin/setup

* Change maintenance state wording
2024-01-22 10:34:13 +01:00
moctardiouf
5c16396d98 PHRAS-3993-fix-maintenance-mode : set as function (#4453)
* PHRAS-3993-fix-maintenance-mode : set as function

* PHRAS-3993-fix-maintenance-mode : remove comments

* PHRAS-3993 add custom maintenace message

* PHRAS-3993 update env file

* PHRAS-3993 add maintenance message exemple to .env

* Update .env

* Update .env documentation

* Change http api error code

---------

Co-authored-by: Nicolas Maillat <maillat@alchemy.fr>
2024-01-04 17:49:30 +01:00
Nicolas Maillat
03d129a329 PHRAS-3997 clear cache before play upgrade (#4451)
* clear cache before play upgrade

* clear session
2023-12-21 15:38:00 +01:00
Nicolas Maillat
02b0445fb4 PHRAS-3991: pre upgrade backup WIP (#4445)
* PHRAS-3991: pre upgrade backup WIP

* wip

* gz option
2023-12-16 11:42:29 +01:00
Nicolas Maillat
0b9a3e01d6 PHRAS-3980 cmd container (#4440)
PHRAS-3980 cmd container for docker compose ready
2023-12-13 12:27:32 +01:00
Nicolas Maillat
9091cf7368 PHRAS-3980 custom worker (#4438)
* PHRAS-3980 removing Blackfire
2023-12-12 14:53:57 +01:00
Nicolas Maillat
670f8601a0 PHRAS-3945 download async config change (#4423)
* PHRAS-3945 change deployment for download async mode and pusher

* wip

* Missing var in setup container - WIP

* quiet option for sensitives values
2023-11-30 13:46:16 +01:00
jygaulier
148b17b9f7 PHRAS-3949_photo-editor-cant-save (#4411)
* add security policy to accept blob:

* leave only default values in gateway container

* wip

* Update entrypoint.sh

---------

Co-authored-by: Nicolas Maillat <maillat@alchemy.fr>
2023-11-17 11:09:42 +01:00
jygaulier
7d703b690f PHRAS-3928_download_async WIP ok to test (#4386)
* WIP/POC DO NOT MERGE
use "pusher" to wait for export-by-email worker to tell client that export is done.
nb: export worker is artificially delayed by 30s !

* WIP OK TO TEST ; DO NOT MERGE

* WIP/POC DO NOT MERGE
use "pusher" to wait for export-by-email worker to tell client that export is done.
nb: export worker is artificially delayed by 30s !

* WIP OK TO TEST ; DO NOT MERGE

* cleanup

* cleanup

* better conf & cleanup

* fix typo

* fix stamp transparency (bump imagine)
fix missing cgu for one file download
better cli feedback
add (re)download link on cli

* fix test

* fix missing js feedback (when worker publish before client subscribes)

* cleanup

* fix "remove stamp" choice

* add default conf

* WIP/POC DO NOT MERGE
use "pusher" to wait for export-by-email worker to tell client that export is done.
nb: export worker is artificially delayed by 30s !

* WIP OK TO TEST ; DO NOT MERGE

* WIP/POC DO NOT MERGE
use "pusher" to wait for export-by-email worker to tell client that export is done.
nb: export worker is artificially delayed by 30s !

* WIP OK TO TEST ; DO NOT MERGE

* cleanup

* cleanup

* better conf & cleanup

* fix typo

* fix stamp transparency (bump imagine)
fix missing cgu for one file download
better cli feedback
add (re)download link on cli

* fix test

* fix missing js feedback (when worker publish before client subscribes)

* cleanup

* fix "remove stamp" choice

* add default conf

* WIP OK TO TEST generates an excel report for async download.
define some env-vars for Pusher (todo: fix entrypoint to add during install)

* fix xl formating for tabs >1
add env_vars to config build

* fix test
2023-10-30 15:08:55 +01:00
moctardiouf
7d23b7613b PHRAS-3892 set content security policies (csp) as env vars (#4375)
* PHRAS-3892 set content security policies (csp) as env vars

* fix diff from master

* PHRAS-3892 update default scp add sources

---------
2023-09-15 21:00:57 +02:00
moctardiouf
4326bc7e3d PHRAS-3904 Add server port on fastcgi https conf (#4370)
* Update entrypoint.sh

* Update entrypoint.sh

* enhance GATEWAY_FASTCGI_HTTPS management script

---------

Co-authored-by: Gaspard Jacobson <52928254+gjacobjn@users.noreply.github.com>
2023-09-07 15:29:19 +02:00
moctardiouf
2c56cff4cd PHRAS-3387 php fpm optimization (#4364)
* set different variables for cli and fpm memory limit

* PHRAS-3387 set fpm variables for pm optimization
2023-08-10 16:10:59 +02:00
Nicolas Maillat
8886a3d548 PHRAS-3891 adding CSP (#4359)
* adding CSP

* csp S3 storage
2023-08-03 14:15:42 +02:00
Nicolas Maillat
d78203441b adding policies for matomo and newrelic (#4358) 2023-08-02 21:38:14 +02:00
Aina Sitraka
c79823a73c google analytics 4 (#4354) 2023-08-01 22:35:58 +02:00
Aina Sitraka
3354c0acb2 fix csp (#4339) 2023-07-20 10:05:56 +02:00
Nicolas Maillat
8d868c3297 PHRAS-3860 Sync phraseanet root account info (#4331)
* user edit command

* PHRAS-3859 set defaut fastcgi-https to off

* PHRAS-3859 fix typo and explain

* edit lastname, firstname, company

* fix

* sync Phraseanet root account

* Update entrypoint.sh

* fix test install

---------

Co-authored-by: aynsix <asr@esokia-webagency.com>
Co-authored-by: Moctar <diouf@alchemy.fr>
2023-07-07 09:42:01 +02:00
moctardiouf
1215f82c30 PHRAS-3859 increase security with headers (#4325)
* fix port value on nginx proxy case

* increase security using headers

* PHRAS-3859 add security set cookie httponly
2023-06-26 10:51:45 +02:00
moctardiouf
71d725e4a0 PHRAS-3859 add security headers : inital commit (#4324) 2023-06-22 17:28:34 +02:00
moctardiouf
86b4472b3c PHARS-3844 gateway container access restriction (#4323)
* PHRAS-3844 manager real ip on nginx

* PHRAS-3844 add restrictions on ip and/or password

* PHRAS-3844 add variable to helm

* PHRAS-3844 change variable names and force ssl

* fix https default value

* PHRAS-3844 fix deny on password usage case

* PHRAS-3844 fix deny on password usage case 2
2023-05-31 22:52:09 +02:00
moctardiouf
21c9747637 PHRAS-3843 change in php-cli and fpm exposition config value (#4313) 2023-05-11 00:00:51 +02:00
Aina Sitraka
de120780f6 PHRAS-3826 ci test (#4300)
switching docker build image and unit test run on github action
2023-04-29 22:13:08 +02:00
Nicolas Maillat
faf179681a chown ftp (#4287) 2023-03-24 20:43:53 +01:00
Nicolas Maillat
82e857aa15 PHRAS-3821 chown cache repo (#4274)
* chown cache for plugins
2023-03-16 08:21:29 +01:00
Nicolas Maillat
32ff2739ab PHRAS-382 delete cache content after plugin install (#4272)
Co-authored-by: Moctar <diouf@alchemy.fr>
2023-03-14 19:19:34 +01:00
Nicolas Maillat
1f1d3b901e PHRAS-3821 chown re-organistion between setup and fpm and worker- wip (#4261)
PHRAS-3821 : chown are now only executed by "setup" container
2023-03-08 17:30:33 +01:00
Aina Sitraka
0339fa1b78 PHRAS-3798 bin/setup - system:config set - return sensitive credential on stdout (#4247)
* system:config use quiet option

* remove -q from some properties

* remove debug auto-install.sh
2023-02-16 15:57:36 +01:00
moctardiouf
c95ae5158b PHRAS-3144 add plugin post install clean cache (#4238)
* PHRAS-3144 add plugin post install script on worker image

* PHRAS-3144 add plugin post install clean cache
2023-01-30 12:29:20 +01:00
moctardiouf
d04a3a0d6e PHRAS-3144 add plugin post install script on worker image (#4212) 2023-01-18 19:01:33 +01:00
Nicolas Maillat
0d43e4f4a2 PHRAS-3794 : populate order MODIFICATION_DATE by default (#4202)
* PHRAS-3794 : MODIFICATION_DATE by default

* Update auto-install.sh

* MODIFICATION_DATE in env file
2023-01-03 11:24:47 +01:00
moctardiouf
dcd0d92bd9 PHRAS-3780 enable opcache zend extension (#4172) 2022-11-07 16:36:03 +01:00
Nicolas Maillat
bd4bca437c - Publish message only when a worker failed (#4168)
- log tail optim
2022-11-01 17:04:07 +01:00
Aina Sitraka
19b4f6d06b task and scheduler log (#4158) 2022-10-25 22:22:26 +02:00
Aina Sitraka
43cd154c87 PHRAS-3760 logs file - remove date from name of current log file - worker (#4154) 2022-10-21 21:21:18 +02:00
Nicolas Maillat
42f44717c6 PHRAS-3736 fix chown on tmp, exit 1 when worker count is wrong (#4156) 2022-10-21 15:25:11 +02:00