Skip to content

slapos
slapos
Commit c3794124 authored by Alain Takoudjou's avatar Alain Takoudjou
Browse files
Options

certificate authority: move instance.cfg from sr to the stack 

certificate-authority software release and stack was renamed to caucase
parent d604ad6a
Hide whitespace changes
Inline Side-by-side
Showing with 164 additions and 157 deletions
software/caucase/software.cfg 0 → 100644
View file @ c3794124
[buildout]
extends =
../../stack/caucase/buildout.cfg
../../stack/slapos.cfg
parts =
slapos-cookbook
extra-eggs
instance-caucase
software/certificate-authority/instance.cfg.in deleted 100644 → 0
View file @ d604ad6a
[buildout]
parts =
publish-connection-parameter
extends =
{{ certificate_authority_template }}
eggs-directory = {{ eggs_directory }}
develop-eggs-directory = {{ develop_eggs_directory }}
offline = true
[publish-connection-parameter]
recipe = slapos.cookbook:publish.serialised
http-url = ${certificate-authority-server:insecure-url}
https-url = ${certificate-authority-server:url}
\ No newline at end of file
software/certificate-authority/software.cfg deleted 100644 → 0
View file @ d604ad6a
[buildout]
extends =
../../stack/certificate-authority/buildout.cfg
../../stack/slapos.cfg
parts =
slapos-cookbook
extra-eggs
template
[template]
recipe = slapos.recipe.template:jinja2
template = ${:_profile_base_location_}/instance.cfg.in
rendered = ${buildout:directory}/template.cfg
mode = 0644
md5sum = c61a8f951e99002753c3a53d0a18b16d
context =
key bin_directory buildout:bin-directory
key develop_eggs_directory buildout:develop-eggs-directory
key eggs_directory buildout:eggs-directory
key certificate_authority_template template-certificate-authority:rendered
stack/certificate-authority/buildout.cfg → stack/caucase/buildout.cfg
View file @ c3794124
...@@ -7,11 +7,12 @@ extends = ...@@ -7,11 +7,12 @@ extends =
../../component/curl/buildout.cfg ../../component/curl/buildout.cfg
../../component/dash/buildout.cfg ../../component/dash/buildout.cfg
../../component/openssl/buildout.cfg ../../component/openssl/buildout.cfg
../../component/bcrypt/buildout.cfg
../../stack/logrotate/buildout.cfg ../../stack/logrotate/buildout.cfg
parts = parts =
template-logrotate-base instance-caucase
[extra-eggs] [extra-eggs]
recipe = zc.recipe.egg recipe = zc.recipe.egg
...@@ -20,9 +21,17 @@ eggs = ...@@ -20,9 +21,17 @@ eggs =
gunicorn # for WSGI HTTP Server gunicorn # for WSGI HTTP Server
futures futures
caucase # certificate authority caucase # certificate authority
${bcrypt:egg}
# are also required # are also required
plone.recipe.command plone.recipe.command
collective.recipe.template collective.recipe.template
slapos.toolbox
scripts =
slapos-kill
gunicorn
caucase
caucase-cli
caucase-cliweb
[template-ca-download-base] [template-ca-download-base]
recipe = hexagonit.recipe.download recipe = hexagonit.recipe.download
...@@ -37,6 +46,10 @@ mode = 0644 ...@@ -37,6 +46,10 @@ mode = 0644
[template-nginx-ca-conf] [template-nginx-ca-conf]
<= template-ca-download-base <= template-ca-download-base
[template-caucase]
<= template-ca-download-base
url = ${:_profile_base_location_}/${:filename}
[template-authenticated-server] [template-authenticated-server]
recipe = slapos.recipe.template:jinja2 recipe = slapos.recipe.template:jinja2
template = ${:_profile_base_location_}/${:filename} template = ${:_profile_base_location_}/${:filename}
...@@ -44,7 +57,7 @@ rendered = ${buildout:directory}/template-authenticated-server.cfg ...@@ -44,7 +57,7 @@ rendered = ${buildout:directory}/template-authenticated-server.cfg
context = context =
key apache_location apache:location key apache_location apache:location
key template_logrotate_base template-logrotate-base:rendered key template_logrotate_base template-logrotate-base:rendered
raw certificate_request_bin ${buildout:directory}/bin/ca-cliweb raw certificate_request_bin ${buildout:directory}/bin/caucase-cliweb
raw curl_executable_location ${curl:location}/bin/curl raw curl_executable_location ${curl:location}/bin/curl
raw dash_executable_location ${dash:location}/bin/dash raw dash_executable_location ${dash:location}/bin/dash
raw slapos_kill_bin ${buildout:directory}/bin/slapos-kill raw slapos_kill_bin ${buildout:directory}/bin/slapos-kill
...@@ -52,16 +65,19 @@ context = ...@@ -52,16 +65,19 @@ context =
raw openssl_executable_location ${openssl:location}/bin/openssl raw openssl_executable_location ${openssl:location}/bin/openssl
raw python_bin ${buildout:directory}/bin/${extra-eggs:interpreter} raw python_bin ${buildout:directory}/bin/${extra-eggs:interpreter}
[template-certificate-authority] [instance-caucase]
recipe = slapos.recipe.template:jinja2 recipe = slapos.recipe.template:jinja2
template = ${:_profile_base_location_}/${:filename} template = ${:_profile_base_location_}/${:filename}
rendered = ${buildout:directory}/template-certificate-authority.cfg rendered = ${buildout:directory}/template.cfg
context = context =
key ngix_location nginx:location key develop_eggs_directory buildout:develop-eggs-directory
key eggs_directory buildout:eggs-directory
key nginx_location nginx:location
key template_logrotate_base template-logrotate-base:rendered key template_logrotate_base template-logrotate-base:rendered
raw caucase_template ${template-caucase:location}/${template-caucase:filename}
raw curl_executable_location ${curl:location}/bin/curl raw curl_executable_location ${curl:location}/bin/curl
raw certificate_authority_bin ${buildout:directory}/bin/ca-bin raw caucase_bin ${buildout:directory}/bin/caucase
raw certificate_request_bin ${buildout:directory}/bin/ca-cliweb raw certificate_request_bin ${buildout:directory}/bin/caucase-cliweb
raw template_nginx_ca_conf ${template-nginx-ca-conf:location}/${template-nginx-ca-conf:filename} raw template_nginx_ca_conf ${template-nginx-ca-conf:location}/${template-nginx-ca-conf:filename}
raw dash_executable_location ${dash:location}/bin/dash raw dash_executable_location ${dash:location}/bin/dash
raw slapos_kill_bin ${buildout:directory}/bin/slapos-kill raw slapos_kill_bin ${buildout:directory}/bin/slapos-kill
...@@ -69,10 +85,11 @@ context = ...@@ -69,10 +85,11 @@ context =
raw openssl_executable_location ${openssl:location}/bin/openssl raw openssl_executable_location ${openssl:location}/bin/openssl
raw python_bin ${buildout:directory}/bin/${extra-eggs:interpreter} raw python_bin ${buildout:directory}/bin/${extra-eggs:interpreter}
[versions] [versions]
Flask-User = 0.6.11 Flask-User = 0.6.11
SQLAlchemy = 1.1.9 SQLAlchemy = 1.1.9
caucase = 0.1.1 caucase = 0.1.2
futures = 3.1.1 futures = 3.1.1
gunicorn = 19.7.1 gunicorn = 19.7.1
slapos.recipe.template = 2.10 slapos.recipe.template = 2.10
......
stack/certificate-authority/buildout.hash.cfg → stack/caucase/buildout.hash.cfg
View file @ c3794124
...@@ -26,6 +26,10 @@ md5sum = d8bebf1629aacffd619541f363687b4a ...@@ -26,6 +26,10 @@ md5sum = d8bebf1629aacffd619541f363687b4a
filename = instance-auth-server.cfg.jinja2.in filename = instance-auth-server.cfg.jinja2.in
md5sum = a317d2f948cd3d16c860d05cc07ecf42 md5sum = a317d2f948cd3d16c860d05cc07ecf42
[template-certificate-authority] [template-caucase]
filename = instance-certificate-authority.cfg.jinja2.in filename = instance-caucase.cfg.jinja2.in
md5sum = 5ed16bcece904dd4527210c7453c84ca md5sum = b801dfe4212ff97dc29191e4610df3a3
[instance-caucase]
filename = instance.cfg.in
md5sum = eb9d2ab646717d123b0472da5194d77f
stack/certificate-authority/instance-certificate-authority.cfg.jinja2.in → stack/caucase/instance-caucase.cfg.jinja2.in
View file @ c3794124
[buildout] {% set part_list = [] -%}
{% set ipv6 = (ipv6 | list)[0] -%}
extends = {% set default_subject = '/C=FR/O=Company/CN=SlapOS Certificate Authority/emailAddress=xx@example.com' -%}
{{ template_logrotate_base }} {% if slapparameter_dict is not defined -%}
{% set slapparameter_dict = {} -%}
parts = {% endif -%}
certificate-authority
certificate-authority-server [ca-parameters]
server-port = {{ slapparameter_dict.get('server-port', 8009) }}
[certificate-authority-parameters] server-https-port = {{ slapparameter_dict.get('server-https-port', 8010) }}
server-port = ${slap-configuration:configuration.ca-server-port} ipv6 = {{ ipv6 }}
server-https-port = ${slap-configuration:configuration.ca-server-https-port}
# Overrite this to set frontend or DNS URL (URL is used as CRL distribution point) # Overrite this to set frontend or DNS URL (URL is used as CRL distribution point)
# Please set http not HTTPS scheme # Please set http not HTTPS scheme
crl-external-url = http://[${slap-configuration:ipv6-random}]:${:server-port} crl-external-url = {{ slapparameter_dict.get('external-url', 'http://[${:ipv6}]:${:server-port}') }}
# /CN=XXX is required and should be unique
ca-subject = {{ slapparameter_dict.get('ca-subject', default_subject) }}
# Number of pending csr to accept
max-request-amount = {{ slapparameter_dict.get('max-request-amount', 10) }}
# one year (in seconds)
crt-life-time = {{ slapparameter_dict.get('crt-life-time', 31536000) }}
# crl-life-period correspond to about one week
crl-life-period = {{ slapparameter_dict.get('crl-life-period', 0.02) }}
# ca-life-period = ca-life-period * crt-life-time
ca-life-period = {{ slapparameter_dict.get('ca-life-period', 10) }}
# time before clean certificate on CA: 60*24*60*60
crt-keep-time = {{ slapparameter_dict.get('crt-keep-time', 5184000) }}
[directory] [directory]
recipe = slapos.cookbook:mkdirectory recipe = slapos.cookbook:mkdirectory
...@@ -34,26 +45,6 @@ fastcgi-temp-path = ${:ca-temp}/fastcgi_temp_path ...@@ -34,26 +45,6 @@ fastcgi-temp-path = ${:ca-temp}/fastcgi_temp_path
uwsgi-temp-path = ${:ca-temp}/uwsgi_temp_path uwsgi-temp-path = ${:ca-temp}/uwsgi_temp_path
scgi-temp-path = ${:ca-temp}/scgi_temp_path scgi-temp-path = ${:ca-temp}/scgi_temp_path
[ca-directory]
recipe = slapos.cookbook:mkdirectory
root = ${directory:srv}/ssl
requests = ${:root}/requests
private = ${:root}/private
certs = ${:root}/certs
newcerts = ${:root}/newcerts
crl = ${:root}/crl
[certificate-authority]
recipe = slapos.cookbook:certificate_authority
openssl-binary = {{ openssl_executable_location }}
ca-dir = ${ca-directory:root}
requests-directory = ${ca-directory:requests}
wrapper = ${directory:services}/certificate_authority
ca-private = ${ca-directory:private}
ca-certs = ${ca-directory:certs}
ca-newcerts = ${ca-directory:newcerts}
ca-crl = ${ca-directory:crl}
[nginx-certificate-request-base] [nginx-certificate-request-base]
recipe = slapos.cookbook:wrapper recipe = slapos.cookbook:wrapper
wrapper-path = ${directory:bin}/request-base-certificate wrapper-path = ${directory:bin}/request-base-certificate
...@@ -64,7 +55,7 @@ parameters-extra = true ...@@ -64,7 +55,7 @@ parameters-extra = true
command-line = {{ certificate_request_bin }} command-line = {{ certificate_request_bin }}
--crt-file ${:cert-file} --crt-file ${:cert-file}
--key-file ${:key-file} --key-file ${:key-file}
--ca-url http://[${slap-configuration:ipv6-random}]:${certificate-authority-parameters:server-port} --ca-url http://[${ca-parameters:ipv6}]:${ca-parameters:server-port}
--ca-crt-file ${:ca-cert} --ca-crt-file ${:ca-cert}
[nginx-certificate-request] [nginx-certificate-request]
...@@ -100,22 +91,22 @@ cert = ...@@ -100,22 +91,22 @@ cert =
key = key =
[ca-nginx-conf-parameter] [ca-nginx-conf-parameter]
ip = ${slap-configuration:ipv6-random} ip = ${ca-parameters:ipv6}
port = ${certificate-authority-parameters:server-port} port = ${ca-parameters:server-port}
https-port = ${certificate-authority-parameters:server-https-port} https-port = ${ca-parameters:server-https-port}
pid-file = ${directory:run}/nginx-ca.pid pid-file = ${directory:run}/nginx-ca.pid
access-log = ${directory:log}/nginx-ca-access.log access-log = ${directory:log}/nginx-ca-access.log
error-log = ${directory:log}/nginx-ca-error.log error-log = ${directory:log}/nginx-ca-error.log
cert-file = ${ca-nginx-ssl:cert} cert-file = ${ca-nginx-ssl:cert}
key-file = ${ca-nginx-ssl:key} key-file = ${ca-nginx-ssl:key}
ca-conf = ${certificate-authority-conf:output} ca-conf = ${caucase-conf:output}
workers-processes = 1 workers-processes = 1
client-body-temp-path = ${directory:client-body-temp-path} client-body-temp-path = ${directory:client-body-temp-path}
proxy-temp-path = ${directory:proxy-temp-path} proxy-temp-path = ${directory:proxy-temp-path}
fastcgi-temp-path = ${directory:fastcgi-temp-path} fastcgi-temp-path = ${directory:fastcgi-temp-path}
uwsgi-temp-path = ${directory:uwsgi-temp-path} uwsgi-temp-path = ${directory:uwsgi-temp-path}
scgi-temp-path = ${directory:scgi-temp-path} scgi-temp-path = ${directory:scgi-temp-path}
socket = ${certificate-authority-gunicorn:socket} socket = ${caucase-gunicorn:socket}
[ca-nginx-conf] [ca-nginx-conf]
recipe = slapos.recipe.template:jinja2 recipe = slapos.recipe.template:jinja2
...@@ -125,7 +116,7 @@ mode = 0700 ...@@ -125,7 +116,7 @@ mode = 0700
context = context =
section parameter_dict ca-nginx-conf-parameter section parameter_dict ca-nginx-conf-parameter
[certificate-authority-conf] [caucase-conf]
recipe = collective.recipe.template recipe = collective.recipe.template
# Values here are intended to be changed in your instance. override this section # Values here are intended to be changed in your instance. override this section
input = inline: input = inline:
...@@ -133,17 +124,17 @@ input = inline: ...@@ -133,17 +124,17 @@ input = inline:
# enable debug # enable debug
# debug # debug
# log-file ${directory:log}/ca-server.log # log-file ${directory:log}/ca-server.log
subject ${slap-configuration:configuration.ca-subject} subject ${ca-parameters:ca-subject}
max-request-amount ${slap-configuration:configuration.max-request-amount} max-request-amount ${ca-parameters:max-request-amount}
external-url ${certificate-authority-parameters:crl-external-url} external-url ${ca-parameters:crl-external-url}
# one year (in seconds) # one year (in seconds)
crt-life-time ${slap-configuration:configuration.crt-life-time} crt-life-time ${ca-parameters:crt-life-time}
# crl-life-period correspond to about one week # crl-life-period correspond to about one week
crl-life-period ${slap-configuration:configuration.crl-life-period} crl-life-period ${ca-parameters:crl-life-period}
# ca-life-time = ca-life-period * crt-life-time # ca-life-time = ca-life-period * crt-life-time
ca-life-period ${slap-configuration:configuration.ca-life-period} ca-life-period ${ca-parameters:ca-life-period}
# time before clean certificate on CA: 60*24*60*60 # time before clean certificate on CA: 60*24*60*60
crt-keep-time ${slap-configuration:configuration.crt-keep-time} crt-keep-time ${ca-parameters:crt-keep-time}
output = ${directory:etc}/ca.conf output = ${directory:etc}/ca.conf
mode = 700 mode = 700
...@@ -151,105 +142,83 @@ mode = 700 ...@@ -151,105 +142,83 @@ mode = 700
[ca-nginx-graceful] [ca-nginx-graceful]
recipe = collective.recipe.template recipe = collective.recipe.template
input = inline:#!{{ dash_executable_location }} input = inline:#!{{ dash_executable_location }}
kill -HUP $(cat ${ca-nginx-conf-parameter:pid-file}) kill -HUP "$(cat '${ca-nginx-conf-parameter:pid-file}')"
output = ${directory:scripts}/ca-server-graceful output = ${directory:scripts}/ca-server-graceful
mode = 700 mode = 700
[certificate-authority-gunicorn] [caucase-gunicorn]
recipe = slapos.cookbook:wrapper recipe = slapos.cookbook:wrapper
socket = ${directory:ca-dir}/ca.flaskserver.sock socket = ${directory:ca-dir}/ca.flaskserver.sock
command-line = {{ gunicorn_bin }} caucase.wsgi:app -b unix:${:socket} -e CA_CONFIGURATION_FILE=${certificate-authority-conf:output} --error-logfile ${:log-file} --pid ${:pid-file} --capture-output --timeout 60 --threads 2 --log-level error --preload command-line = {{ gunicorn_bin }} caucase.wsgi:app -b unix:${:socket} -e CA_CONFIGURATION_FILE=${caucase-conf:output} --error-logfile ${:log-file} --pid ${:pid-file} --capture-output --timeout 60 --threads 2 --log-level error --preload
log-file = ${directory:log}/ca-gunicorn-error.log log-file = ${directory:log}/ca-gunicorn-error.log
pid-file = ${directory:run}/ca-gunicorn.pid pid-file = ${directory:run}/ca-gunicorn.pid
wrapper-path = ${directory:services}/ca-gunicorn wrapper-path = ${directory:services}/ca-gunicorn
#environment = #PATH=$${environ:PATH}:${git:location}/bin/
# CA_CONFIGURATION_FILE=${certificate-authority-conf:output}
# LANG=en_GB.UTF-8
[certificate-authority-server] [caucase-server]
recipe = slapos.cookbook:wrapper recipe = slapos.cookbook:wrapper
command-line = {{ ngix_location }}/sbin/nginx -p ${directory:ca-dir} -c ${ca-nginx-conf:rendered} command-line = {{ nginx_location }}/sbin/nginx -p ${directory:ca-dir} -c ${ca-nginx-conf:rendered}
wrapper-path = ${directory:services}/ca-server wrapper-path = ${directory:services}/caucase-server
url = https://[${slap-configuration:ipv6-random}]:${certificate-authority-parameters:server-https-port} url = https://[${ca-parameters:ipv6}]:${ca-parameters:server-https-port}
insecure-url = ${certificate-authority-parameters:crl-external-url} http-url = ${ca-parameters:crl-external-url}
depends = depends =
${nginx-certificate-request:wrapper-path} ${nginx-certificate-request:wrapper-path}
${certificate-authority-server-promise:filename} ${caucase-server-promise:filename}
${certificate-authority-https-server-promise:filename} ${caucase-https-server-promise:filename}
${ca-nginx-graceful:output} ${ca-nginx-graceful:output}
${ca-certificate-renew-cron-entry:name} ${ca-certificate-renew-cron-entry:name}
${logrotate-ca-nginx:name} ${logrotate-ca-nginx:name}
[ca-server-certificate-renew]
recipe = collective.recipe.template
input = inline:
#!{{ dash_executable_location }}
d=$({{ openssl_executable_location }} x509 -enddate -noout -in ${nginx-certificate-request-base:cert-file} | cut -d'=' -f 2)
cert_time=$(date -d "$d" +"%s")
now=$(date +"%s")
thresold=2592000 # 30*24*60*60 equivalent to one month in seconds
remind=$(($cert_time - $now))
if [ $remind -lt $thresold ]; then
exec ${nginx-certificate-request-base:wrapper-path} --renew
# run nginx grancefull restart to reload renewed certificates
excec ${ca-nginx-graceful:output}
fi
output = ${directory:bin}/server-certificate-renew
mode = 700
[ca-certificate-renew-cron-entry] [ca-certificate-renew-cron-entry]
recipe = slapos.cookbook:cron.d recipe = slapos.cookbook:cron.d
cron-entries = ${cron:cron-entries} cron-entries = ${cron:cron-entries}
name = ca-server-certificate-auto-renew name = ca-server-certificate-auto-renew
# check renew every-week # check renew every-week
frequency = 5 4 * * 6 time = weekly
command = ${ca-server-certificate-renew:output} # 2592000 = 30*24*60*60 equivalent to one month in seconds
command = ${nginx-certificate-request-base:wrapper-path} --renew --threshold 2592000 --on-renew="${ca-nginx-graceful:output}"
[logrotate-ca-nginx] [logrotate-ca-nginx]
< = logrotate-entry-base < = logrotate-entry-base
name = certificate-authority-nginx-server name = caucase-nginx-server
log = ${ca-nginx-conf-parameter:access-log} ${ca-nginx-conf-parameter:access-log} log = ${ca-nginx-conf-parameter:access-log} ${ca-nginx-conf-parameter:access-log}
post = {{ slapos_kill_bin }} --pidfile ${ca-nginx-conf-parameter:pid-file} -s USR1 post = {{ slapos_kill_bin }} --pidfile ${ca-nginx-conf-parameter:pid-file} -s USR1
[certificate-authority-server-promise] [caucase-server-promise]
recipe = slapos.cookbook:check_url_available recipe = slapos.cookbook:check_url_available
path = ${directory:promises}/${:filename} path = ${directory:promises}/${:filename}
filename = certificate-authority-server-listening-on-tcp filename = caucase-server-listening-on-tcp
url = http://[${slap-configuration:ipv6-random}]:${certificate-authority-parameters:server-port} url = http://[${ca-parameters:ipv6}]:${ca-parameters:server-port}
dash_path = {{ dash_executable_location }} dash_path = {{ dash_executable_location }}
curl_path = {{ curl_executable_location }} curl_path = {{ curl_executable_location }}
[certificate-authority-https-server-promise] [caucase-https-server-promise]
recipe = slapos.cookbook:check_url_available recipe = slapos.cookbook:check_url_available
path = ${directory:promises}/${:filename} path = ${directory:promises}/${:filename}
filename = certificate-authority-server-https-on-${certificate-authority-parameters:server-https-port} filename = caucase-server-https-on-${ca-parameters:server-https-port}
url = https://[${slap-configuration:ipv6-random}]:${certificate-authority-parameters:server-https-port} url = https://[${ca-parameters:ipv6}]:${ca-parameters:server-https-port}
check-secure = 1 check-secure = 1
dash_path = {{ dash_executable_location }} dash_path = {{ dash_executable_location }}
curl_path = {{ curl_executable_location }} curl_path = {{ curl_executable_location }}
[slap-configuration] {% if publish_parameter is defined and publish_parameter == 'yes' -%}
recipe = slapos.cookbook:slapconfiguration.serialised [publish-connection-parameter]
computer = ${slap-connection:computer-id} recipe = slapos.cookbook:publish.serialised
partition = ${slap-connection:partition-id} http-url = ${caucase-server:http-url}
url = ${slap-connection:server-url} https-url = ${caucase-server:url}
key = ${slap-connection:key-file} {% do part_list.append('publish-connection-parameter') -%}
cert = ${slap-connection:cert-file} {% endif -%}
configuration.ca-server-port = 8009 [buildout]
configuration.ca-server-https-port = 8010
# /CN=XXX is required extends =
configuration.ca-subject = /C=Country/ST=State/L=City/OU=O-Unit/O=Company/CN=SlapOS Certificate Authority/emailAddress=xx@example.com {{ template_logrotate_base }}
configuration.max-request-amount = 10
# one year (in seconds) parts =
configuration.crt-life-time = 31536000 caucase-server
# crl-life-period correspond to about one week # Complete parts with sections
configuration.crl-life-period = 0.02 {{ part_list | join('\n ') }}
# ca-life-period = ca-life-period * crt-life-time
configuration.ca-life-period = 10 eggs-directory = {{ eggs_directory }}
# time before clean certificate on CA: 60*24*60*60 develop-eggs-directory = {{ develop_eggs_directory }}
configuration.crt-keep-time = 5184000 offline = true
\ No newline at end of file \ No newline at end of file
stack/caucase/instance.cfg.in 0 → 100644
View file @ c3794124
[buildout]
parts =
switch-softwaretype
eggs-directory = {{ eggs_directory }}
develop-eggs-directory = {{ develop_eggs_directory }}
offline = true
[slap-configuration]
recipe = slapos.cookbook:slapconfiguration.serialised
computer = ${slap-connection:computer-id}
partition = ${slap-connection:partition-id}
url = ${slap-connection:server-url}
key = ${slap-connection:key-file}
cert = ${slap-connection:cert-file}
[dynamic-template-caucase]
recipe = slapos.recipe.template:jinja2
filename = ${:_buildout_section_name_}.cfg
rendered = ${buildout:parts-directory}/${:_buildout_section_name_}/${:filename}
template = {{ caucase_template }}
extensions = jinja2.ext.do
extra-context =
context =
key ipv4 slap-configuration:ipv4
key ipv6 slap-configuration:ipv6
key develop_eggs_directory buildout:develop-eggs-directory
key eggs_directory buildout:eggs-directory
key slapparameter_dict slap-configuration:configuration
raw gunicorn_bin {{ gunicorn_bin }}
raw template_logrotate_base {{ template_logrotate_base }}
raw certificate_request_bin {{ certificate_request_bin }}
raw template_nginx_ca_conf {{ template_nginx_ca_conf }}
raw nginx_location {{ nginx_location }}
raw slapos_kill_bin {{ slapos_kill_bin }}
raw dash_executable_location {{ dash_executable_location }}
raw curl_executable_location {{ curl_executable_location }}
raw publish_parameter yes
[switch-softwaretype]
recipe = slapos.cookbook:softwaretype
default = ${dynamic-template-caucase:rendered}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7