chrome policy update

[faikmalik]

Hi im following this tutorial

according to tutorial here is my config

here is my policies.json @ /opt/neko-rooms/data/templates/policies.json
"HomepageLocation": "my def domain", "AutoFillEnabled": false, "AutofillAddressEnabled": false, "AutofillCreditCardEnabled": false, "BrowserSignin": 0, "DefaultNotificationsSetting": 2, "DeveloperToolsAvailability": 2, "EditBookmarksEnabled": false, "FullscreenAllowed": true, "IncognitoModeAvailability": 1, "SyncDisabled": true, "AutoplayAllowed": true, "BrowserAddPersonEnabled": false, "BrowserGuestModeEnabled": false, "DefaultPopupsSetting": 2, "DownloadRestrictions": 0, "VideoCaptureAllowed": false, "AllowFileSelectionDialogs": false, "PromptForDownloadLocation": true, "BookmarkBarEnabled": false, "PasswordManagerEnabled": false, "URLBlacklist": [ ], "ExtensionInstallForcelist": [ "lpcaedmchfhocbbapmcbpinfpgnhiddi;https://clients2.google.com/service/update2/crx", "cjpalhdlnbpafiamejdnhcphjbkeiagm;https://clients2.google.com/service/update2/crx", "fjoaledfpmneenckfbpdfhkmimnjocfa;https://clients2.google.com/service/update2/crx" ], "ExtensionInstallWhitelist": [ "lpcaedmchfhocbbapmcbpinfpgnhiddi", "cjpalhdlnbpafiamejdnhcphjbkeiagm", "fjoaledfpmneenckfbpdfhkmimnjocfa" ], "ExtensionInstallBlacklist": [ "*" ] }

iv manually copied same file to /opt/neko-rooms/data/faik which is my room name. for some reason it wasnt auto created

here is my .env

NEKO_ROOMS_EPR=59000-59100
NEKO_ROOMS_TRAEFIK_DOMAIN=neko.oemnavigations.net
NEKO_ROOMS_TRAEFIK_ENTRYPOINT=websecure
NEKO_ROOMS_TRAEFIK_NETWORK=neko-rooms-traefik
NEKO_ROOMS_TRAEFIK_CERTRESOLVER=lets-encrypt
NEKO_ROOMS_NEKO_IMAGES=m1k1o/neko:firefox m1k1o/neko:chromium m1k1o/neko:google-chrome m1k1o/neko:vlc m1k1o/neko:xfce m1k1o/neko:tor-browser
NEKO_ROOMS_MOUNTS_WHITELIST="/home /media /opt/neko-rooms/data/templates/ /etc/opt/chrome/policies/managed/policies.json"

here is my docker-compose.yml

version: "3.5"

networks:
default:
attachable: true
name: "${NEKO_ROOMS_TRAEFIK_NETWORK}"

services:
traefik:
image: "traefik:2.4"
restart: "unless-stopped"
environment:
- "TZ"
ports:
- target: 80
published: 80
protocol: "tcp"
mode: "host"
- target: 443
published: 443
protocol: "tcp"
mode: "host"
volumes:
- "/var/run/docker.sock:/var/run/docker.sock:ro"
- "./traefik.yml:/etc/traefik/traefik.yml:ro"
- "./usersfile:/usersfile:ro"
- "./acme.json:/acme.json"
- "./config:/config"

neko-rooms:
image: "m1k1o/neko-rooms:latest"
restart: "unless-stopped"
environment:
- "NEKO_ROOMS_STORAGE_ENABLED=true"
- "NEKO_ROOMS_STORAGE_INTERNAL=/data"
- "NEKO_ROOMS_STORAGE_EXTERNAL=/opt/neko-rooms/data"
env_file:
- ".env"
volumes:
- "/var/run/docker.sock:/var/run/docker.sock"
- "/opt/neko-rooms/data:/data"
labels:
- "traefik.enable=true"
- "traefik.http.services.neko-rooms-frontend.loadbalancer.server.port=8080"
- "traefik.http.routers.neko-rooms.entrypoints=${NEKO_ROOMS_TRAEFIK_ENTRYPOINT}"
- "traefik.http.routers.neko-rooms.rule=Host(${NEKO_ROOMS_TRAEFIK_DOMAIN})"
- "traefik.http.routers.neko-rooms.tls=true"
- "traefik.http.routers.neko-rooms.tls.certresolver=${NEKO_ROOMS_TRAEFIK_CERTRESOLVER}"
- "traefik.http.routers.neko-rooms.middlewares=basicauth@file"

PROBLEM

if you see in config iv removed the default policy page and file path restriction from .docker folder. im trying to let users download a file to my file system. aditionally i want to add my own set of extensions in the force install extensions. but for some reason its still picking up default policies.

any help is appreciated

[m1k1o]

Your neko rooms mounts whitelist should only be folders on your host system. If you put /opt/neko-rooms/data everything in that folder will be allowed:

- NEKO_ROOMS_MOUNTS_WHITELIST="/home /media /opt/neko-rooms/data"`

Not sure if mistake here or in your file, but check your /opt/neko-rooms/data/templates/policies.json if its valid json e.g. using https://jsonlint.com/. I see that in the text you pasted there is missing initial {.

Your container path for the policies is wrong, it depends on the browser you are using. If it's google chrome then it should be /etc/opt/chrome/policies/managed/policies.json.

As in docs:

[faikmalik]

hi. thanks for reply. im aware of white list. did that for testing.

yeah it was a mistake here. verified the file and its ok. but i thought for a second and questioned my self.

as for the policy path. im not native to linux. i was fiddling with paths. actually the path you gave above gives me an error like this

thanks for the reply

[m1k1o]

Sounds like you are mounting directory to a file. And it does not seem to be valid path /opt/neko-rooms/data/rooms/rrr1 seems like a private path not template you wanted to use. Can you check if thats correct?