openstack
/
fuel-library
Code Issues Proposed changes

Change /dump url to internal in nginx conf 

/dump is used for snapshot downloading - since we want to allow
only authenticated users, we change the url to /api/dump/
(which is handled by nailgun and authentication occurs).
Then user is redirected to /dump (using XSendfile).
To prevent potential intruder from downloading sensitive data
/dump should be changed to 'internal'.

Change-Id: I1ee2758e3f21803c82c3587e706f46877fcfbe9b
Implements: blueprint snapshot-download-with-auth
Depends-On: Id46b533e8d2a8021d1fbb2e5d4284508e1181704
This commit is contained in:
Sylwester Brzeczkowski 2015-06-24 16:11:51 +02:00
parent f25d5da0a9
commit 0f891c7584
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
deployment/puppet/nailgun/templates/nginx_nailgun.conf.erb
View File

@ -24,6 +24,7 @@ server {
}
location /dump {
internal;
alias <%= @logdumpdir %>;
}
@ -43,7 +44,7 @@ server {
location /api {
include uwsgi_params;
uwsgi_pass <%= @nailgun_host %>:8001;
uwsgi_pass <%= @nailgun_host %>:8001;
client_max_body_size 100m;
}
}