Commit Graph

35 Commits

Author SHA1 Message Date
moctardiouf
026d61e52f PHRAS-4117 remove gateway /status and /ping page direct access (#4571)
* PHRAS-4117 remove gateway /status and /ping page direct access

* PHRAS-4117 fix typo

* PHRAS-4117 add ip management
2025-01-09 14:57:49 +01:00
moctardiouf
4e9414ba6e PHRAS-3588 implement http request quota by type (#4564)
* PHRAS-3588 manage http request limits by verbs

* PHRAS-3588 change limit method

* re-introduce burst parameters

* PHRAS-3588 add activation boolean

* applying auto-documentation format for env var
2024-12-12 11:08:23 +01:00
Aina Sitraka
f02e5b8e5f PHRAS-4023 hcaptcha in Phraseanet (#4473)
* use hcaptcha

* add conf

* use captcha-provider key instead of captchas-enabled in configuration

* fix test

* test

* bump back version to rc9
2024-02-29 14:59:46 +01:00
moctardiouf
5c16396d98 PHRAS-3993-fix-maintenance-mode : set as function (#4453)
* PHRAS-3993-fix-maintenance-mode : set as function

* PHRAS-3993-fix-maintenance-mode : remove comments

* PHRAS-3993 add custom maintenace message

* PHRAS-3993 update env file

* PHRAS-3993 add maintenance message exemple to .env

* Update .env

* Update .env documentation

* Change http api error code

---------

Co-authored-by: Nicolas Maillat <maillat@alchemy.fr>
2024-01-04 17:49:30 +01:00
jygaulier
148b17b9f7 PHRAS-3949_photo-editor-cant-save (#4411)
* add security policy to accept blob:

* leave only default values in gateway container

* wip

* Update entrypoint.sh

---------

Co-authored-by: Nicolas Maillat <maillat@alchemy.fr>
2023-11-17 11:09:42 +01:00
moctardiouf
7d23b7613b PHRAS-3892 set content security policies (csp) as env vars (#4375)
* PHRAS-3892 set content security policies (csp) as env vars

* fix diff from master

* PHRAS-3892 update default scp add sources

---------
2023-09-15 21:00:57 +02:00
moctardiouf
4326bc7e3d PHRAS-3904 Add server port on fastcgi https conf (#4370)
* Update entrypoint.sh

* Update entrypoint.sh

* enhance GATEWAY_FASTCGI_HTTPS management script

---------

Co-authored-by: Gaspard Jacobson <52928254+gjacobjn@users.noreply.github.com>
2023-09-07 15:29:19 +02:00
Nicolas Maillat
8886a3d548 PHRAS-3891 adding CSP (#4359)
* adding CSP

* csp S3 storage
2023-08-03 14:15:42 +02:00
Nicolas Maillat
d78203441b adding policies for matomo and newrelic (#4358) 2023-08-02 21:38:14 +02:00
Aina Sitraka
c79823a73c google analytics 4 (#4354) 2023-08-01 22:35:58 +02:00
Aina Sitraka
3354c0acb2 fix csp (#4339) 2023-07-20 10:05:56 +02:00
Nicolas Maillat
8d868c3297 PHRAS-3860 Sync phraseanet root account info (#4331)
* user edit command

* PHRAS-3859 set defaut fastcgi-https to off

* PHRAS-3859 fix typo and explain

* edit lastname, firstname, company

* fix

* sync Phraseanet root account

* Update entrypoint.sh

* fix test install

---------

Co-authored-by: aynsix <asr@esokia-webagency.com>
Co-authored-by: Moctar <diouf@alchemy.fr>
2023-07-07 09:42:01 +02:00
moctardiouf
1215f82c30 PHRAS-3859 increase security with headers (#4325)
* fix port value on nginx proxy case

* increase security using headers

* PHRAS-3859 add security set cookie httponly
2023-06-26 10:51:45 +02:00
moctardiouf
71d725e4a0 PHRAS-3859 add security headers : inital commit (#4324) 2023-06-22 17:28:34 +02:00
moctardiouf
86b4472b3c PHARS-3844 gateway container access restriction (#4323)
* PHRAS-3844 manager real ip on nginx

* PHRAS-3844 add restrictions on ip and/or password

* PHRAS-3844 add variable to helm

* PHRAS-3844 change variable names and force ssl

* fix https default value

* PHRAS-3844 fix deny on password usage case

* PHRAS-3844 fix deny on password usage case 2
2023-05-31 22:52:09 +02:00
moctardiouf
5643ee8912 PHRAS-3318 sp saml - Fix K8S service name on proxy nginx usage (#4149) 2022-10-10 10:17:00 +02:00
moctardiouf
9f349e063b PHRAS-3318 - Fix phraseanet-saml-sp for kubernets use (#4146) 2022-10-05 17:39:01 +02:00
moctardiouf
ba5eab7ae0 PHRAS-3734 add maintenance mode to stack (#4122) 2022-09-09 00:57:36 +02:00
moctardiouf
927affb455 PHRAS-3318 - saml service provider container (#4092) 2022-09-07 21:35:09 +02:00
Moctar
4b4ccffef6 fix nginx error when adding simplesaml config 2022-01-25 12:37:11 +01:00
Gaspard Jacobson
089fd38fd6 Update nginx.conf.sample 2021-11-19 16:29:17 +01:00
Moctar
1314850358 fix fastcgi_params duplicating values 2020-07-21 12:52:20 +02:00
Moctar
41591356a1 add cgi and proxy nginx timeout parameters 2020-07-16 16:09:36 +02:00
nmaillat
25319e6b18 fix sed src 2020-07-06 21:35:15 +02:00
nmaillat
f3750e987b add nginx.conf 2020-07-06 20:42:08 +02:00
nmaillat
72d2bc028d set gateway fpm timeout 2020-07-06 20:13:27 +02:00
Arthur de Moulins
4a634070d1 optimize docker build 2020-02-28 15:56:16 +01:00
Arthur de Moulins
4cfc712674 arrange entrypoints and commands for docker 2020-02-28 15:56:16 +01:00
Arthur de Moulins
d41268ea66 arrange volumes 2020-02-28 15:56:16 +01:00
Alexandre BRACH
9b25efdc67 kubernetes #comment add global nginx configuration 2019-10-04 15:56:38 +02:00
Alexandre BRACH
b66aae5047 kubernetes #comment Reconfigure nginx to serve log on stdout 2019-09-27 14:31:17 +02:00
Alexandre BRACH
cea47e8725 kubernetes #comment remove unused server_name directive in nginx 2019-09-27 10:20:58 +02:00
Alexandre BRACH
cb198fb52f fix max upload 2019-06-06 14:11:54 +02:00
Alexandre BRACH
0c9fef9a4f PHRDPL-32 #comment fpm/nginx configuration variabilisable 2019-05-31 19:15:26 +02:00
Alexandre BRACH
2c42f018bd Docker images are buildables 2019-05-02 13:44:51 +02:00