Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RFE: replace internal django HTTP runserver by Apache/nginx #29

Closed
f-trivino opened this issue Mar 16, 2023 · 1 comment
Closed

RFE: replace internal django HTTP runserver by Apache/nginx #29

f-trivino opened this issue Mar 16, 2023 · 1 comment

Comments

@f-trivino
Copy link
Collaborator

Runserver is not intended for production as it doesn’t support HTTPS, instead we need to deploy the bridge service with WSGI platform in a container. This way, we will be able to start serving API HTTPS requests. The deployment must be container friendly.

Finally, the different services must redirect everything into HTTPS, only HTTPS based communication should be allowed.

https://docs.djangoproject.com/en/dev/howto/deployment/wsgi/

https://medium.com/@adamsokode/deploying-django-app-inside-container-running-apache-mod-wsgi-73831aa04724
f-trivino added a commit to f-trivino/ipa-tuura that referenced this issue May 29, 2023
@f-trivino
Add path
2ddff1a 
When the WSGI server loads, Django needs to import the settings module by using
the DJANGO_SETTINGS_MODULE environment variable to locate the appropriate settings
module. It must contain the dotted path to the settings module.

This commit is adding the path to the settings module.

Related: freeipa#29

Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
f-trivino added a commit to f-trivino/ipa-tuura that referenced this issue May 29, 2023
@f-trivino
[wsgi] Add project path to the sys.path
7558673 
When the WSGI server loads, Django needs to import the settings module by using
the DJANGO_SETTINGS_MODULE environment variable to locate the appropriate settings
module. It must contain the dotted path to the settings module.

This commit is adding the path to the settings module.

Related: freeipa#29

Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
@f-trivino f-trivino mentioned this issue May 29, 2023
Merged
f-trivino added a commit to f-trivino/ipa-tuura that referenced this issue May 29, 2023
@f-trivino
[wsgi] Add project path to the sys.path
3c144a7 
When the WSGI server loads, Django needs to import the settings module by using
the DJANGO_SETTINGS_MODULE environment variable to locate the appropriate settings
module. It must contain the dotted path to the settings module.

This commit is adding the path to the settings module.

Related: freeipa#29

Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
f-trivino added a commit that referenced this issue Jun 6, 2023
@f-trivino
[wsgi] Add project path to the sys.path
26c0905 
When the WSGI server loads, Django needs to import the settings module by using
the DJANGO_SETTINGS_MODULE environment variable to locate the appropriate settings
module. It must contain the dotted path to the settings module.

This commit is adding the path to the settings module.

Related: #29

Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
f-trivino added a commit to f-trivino/ipa-tuura that referenced this issue Jun 6, 2023
@f-trivino
Add sample virtualhost .conf file for Apache2 on Fedora
46cf6dd 
This needs to be used when hosting the project in production with
Apache, mod_ssl, and mod_wsgi (enabling SSL).

Self-certificate can be generated with openssl.

Related: freeipa#29
Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
f-trivino added a commit that referenced this issue Jun 6, 2023
@f-trivino
Add sample virtualhost .conf file for Apache2 on Fedora
1420ae2 
This needs to be used when hosting the project in production with
Apache, mod_ssl, and mod_wsgi (enabling SSL).

Self-certificate can be generated with openssl.

Related: #29
Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
@f-trivino f-trivino mentioned this issue Jun 6, 2023
Merged
antoniotorresm added a commit to antoniotorresm/ipa-tuura that referenced this issue Jun 7, 2023
@antoniotorresm
Add containerization for the ipa-tuura+Apache service
740406f 
Add Containerfile and podman-compose files that containerize ipa-tuura
using httpd as HTTPS server. This replaces the previous Dockerfile.test,
using Apache HTTPS server instead of the insecure built-in Django HTTP server.

By running the podman-compose.yaml, the container is built and deployed
with the needed port mapping.

Related: freeipa#29
Signed-off-by: Antonio Torres <antorres@redhat.com>
antoniotorresm added a commit to antoniotorresm/ipa-tuura that referenced this issue Jun 7, 2023
@antoniotorresm
Add containerization for the ipa-tuura+Apache service
9a588f4 
Add Containerfile and podman-compose files that containerize ipa-tuura
using Apache as HTTPS server.

By running the podman-compose.yaml, the container is built and deployed
with the needed port mapping and environment variables.

Related: freeipa#29
Signed-off-by: Antonio Torres <antorres@redhat.com>
antoniotorresm added a commit to antoniotorresm/ipa-tuura that referenced this issue Jun 13, 2023
@antoniotorresm
Add containerization for the ipa-tuura+Apache service
c1e60af 
Add Containerfile and podman-compose files that containerize ipa-tuura
using Apache as HTTPS server.

By running the podman-compose.yaml, the container is built and deployed
with the needed port mapping and environment variables.

Related: freeipa#29
Signed-off-by: Antonio Torres <antorres@redhat.com>
f-trivino pushed a commit that referenced this issue Jun 13, 2023
@antoniotorresm @f-trivino
Add containerization for the ipa-tuura+Apache service
b1472aa 
Add Containerfile and podman-compose files that containerize ipa-tuura
using Apache as HTTPS server.

By running the podman-compose.yaml, the container is built and deployed
with the needed port mapping and environment variables.

Related: #29
Signed-off-by: Antonio Torres <antorres@redhat.com>
@antoniotorresm
Copy link
Collaborator

Closing as per #47

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@antoniotorresm @f-trivino