Disassembler/Spotter-VM
1
0
Fork 0
Code Issues 78 Pull Requests Actions Packages Projects Releases Wiki Activity

Create OS user for SeedDMS and make PHP use that user

Browse Source
This commit is contained in:
Disassembler 2017-09-10 22:49:39 +02:00
parent c260987dd9
commit 333af922ca
3 changed files with 20 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
10-seeddms.sh
View File

@ -21,16 +21,20 @@ psql -f /srv/seeddms/www/install/create_tables-postgres.sql seeddms seeddms
unset PGPASSWORD unset PGPASSWORD
# Configure SeedDMS # Configure SeedDMS
envsubst <${SOURCE_DIR}/seeddms/srv/seeddms/conf/settings.xml >/srv/seeddms/conf/settings.xml envsubst <${SOURCE_DIR}/seeddms/srv/seeddms/www/conf/settings.xml >/srv/seeddms/www/conf/settings.xml
rm -rf /srv/seeddms/www/install/ rm -rf /srv/seeddms/www/install/
chown -R www-data:www-data /srv/seeddms/ # Create OS user
adduser --system --group --home /srv/seeddms --shell /bin/false seeddms
chown -R seeddms:seeddms /srv/seeddms/
# Create nginx app definition # Create PHP and nginx app definition
cp ${SOURCE_DIR}/seeddms/etc/php/7.0/fpm/pool.d/seeddms.conf /etc/php/7.0/fpm/pool.d/seeddms.conf
cp ${SOURCE_DIR}/seeddms/etc/nginx/apps-available/seeddms /etc/nginx/apps-available/seeddms cp ${SOURCE_DIR}/seeddms/etc/nginx/apps-available/seeddms /etc/nginx/apps-available/seeddms
ln -s /etc/nginx/apps-available/seeddms /etc/nginx/apps-enabled/seeddms ln -s /etc/nginx/apps-available/seeddms /etc/nginx/apps-enabled/seeddms
# Restart services # Restart services
systemctl restart php7.0-fpm
systemctl restart nginx systemctl restart nginx
# TODO: Custom user # TODO: Custom user

2
seeddms/etc/nginx/apps-available/seeddms
View File

@ -5,6 +5,6 @@ location /seeddms {
location ~ \.php$ { location ~ \.php$ {
include snippets/fastcgi-php.conf; include snippets/fastcgi-php.conf;
fastcgi_param SCRIPT_FILENAME $request_filename; fastcgi_param SCRIPT_FILENAME $request_filename;
fastcgi_pass unix:/run/php/php7.0-fpm.sock; fastcgi_pass unix:/run/php/seeddms.sock;
} }
} }

12
seeddms/etc/php/7.0/fpm/pool.d/seeddms.conf Normal file
View File

@ -0,0 +1,12 @@
[seeddms]
user = seeddms
group = seeddms
listen = /run/php/seeddms.sock
listen.owner = www-data
listen.group = www-data
pm = ondemand
pm.max_children = 8
php_admin_value[open_basedir] = /srv/seeddms:/tmp:/tmp:/usr/share/php