diff options
| author | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-12-24 08:27:02 +0100 |
|---|---|---|
| committer | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-12-24 08:27:02 +0100 |
| commit | 5f6ff49e37b92c7aeada9b867246d4a513b5ae56 (patch) | |
| tree | 9564e46169f72c4bfaf97107605fab4fc66c1e65 | |
| parent | 91b75ffe45f2a5d7e148c92f53a4ba90ede8df77 (diff) | |
| download | Nix-5f6ff49e37b92c7aeada9b867246d4a513b5ae56.tar.gz Nix-5f6ff49e37b92c7aeada9b867246d4a513b5ae56.tar.zst Nix-5f6ff49e37b92c7aeada9b867246d4a513b5ae56.zip | |
Protect adminer access
| -rw-r--r-- | modules/private/websites/commons/adminer.nix | 5 | ||||
| -rw-r--r-- | modules/private/websites/tools/tools/adminer.nix | 5 |
2 files changed, 8 insertions, 2 deletions
diff --git a/modules/private/websites/commons/adminer.nix b/modules/private/websites/commons/adminer.nix index 98ab461..d591c90 100644 --- a/modules/private/websites/commons/adminer.nix +++ b/modules/private/websites/commons/adminer.nix | |||
| @@ -11,10 +11,13 @@ rec { | |||
| 11 | Alias /adminer ${root} | 11 | Alias /adminer ${root} |
| 12 | <Directory ${root}> | 12 | <Directory ${root}> |
| 13 | DirectoryIndex index.php | 13 | DirectoryIndex index.php |
| 14 | Require all granted | ||
| 15 | <FilesMatch "\.php$"> | 14 | <FilesMatch "\.php$"> |
| 16 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | 15 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" |
| 17 | </FilesMatch> | 16 | </FilesMatch> |
| 17 | |||
| 18 | Use LDAPConnect | ||
| 19 | Require ldap-group cn=users,cn=mysql,cn=pam,ou=services,dc=immae,dc=eu | ||
| 20 | Require ldap-group cn=users,cn=postgresql,cn=pam,ou=services,dc=immae,dc=eu | ||
| 18 | </Directory> | 21 | </Directory> |
| 19 | ''; | 22 | ''; |
| 20 | }; | 23 | }; |
diff --git a/modules/private/websites/tools/tools/adminer.nix b/modules/private/websites/tools/tools/adminer.nix index cd51e7f..e41c488 100644 --- a/modules/private/websites/tools/tools/adminer.nix +++ b/modules/private/websites/tools/tools/adminer.nix | |||
| @@ -37,10 +37,13 @@ rec { | |||
| 37 | Alias /adminer ${root} | 37 | Alias /adminer ${root} |
| 38 | <Directory ${root}> | 38 | <Directory ${root}> |
| 39 | DirectoryIndex index.php | 39 | DirectoryIndex index.php |
| 40 | Require all granted | ||
| 41 | <FilesMatch "\.php$"> | 40 | <FilesMatch "\.php$"> |
| 42 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" | 41 | SetHandler "proxy:unix:${phpFpm.socket}|fcgi://localhost" |
| 43 | </FilesMatch> | 42 | </FilesMatch> |
| 43 | |||
| 44 | Use LDAPConnect | ||
| 45 | Require ldap-group cn=users,cn=mysql,cn=pam,ou=services,dc=immae,dc=eu | ||
| 46 | Require ldap-group cn=users,cn=postgresql,cn=pam,ou=services,dc=immae,dc=eu | ||
| 44 | </Directory> | 47 | </Directory> |
| 45 | ''; | 48 | ''; |
| 46 | }; | 49 | }; |