Mise à jour des fichiers de configuration pour SOC-SFRV2-REC01

ConfigSysRepo/etc/logrotate.d/socle_sup

@@ -0,0 +1,9 @@
+# socle_supervision rotate
+/home/socle_sup/logs/socle-supervision.log {
+    daily
+    dateext
+    rotate 30
+    copytruncate
+    missingok
+    compress
+    delaycompress

ConfigSysRepo/etc/postgresql/14/main/pg_hba.conf

@@ -0,0 +1,136 @@
+# PostgreSQL Client Authentication Configuration File
+# ===================================================
+#
+# Refer to the "Client Authentication" section in the PostgreSQL
+# documentation for a complete description of this file.  A short
+# synopsis follows.
+#
+# This file controls: which hosts are allowed to connect, how clients
+# are authenticated, which PostgreSQL user names they can use, which
+# databases they can access.  Records take one of these forms:
+#
+# local         DATABASE  USER  METHOD  [OPTIONS]
+# host          DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostssl       DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostnossl     DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostgssenc    DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostnogssenc  DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+#
+# (The uppercase items must be replaced by actual values.)
+#
+# The first field is the connection type:
+# - "local" is a Unix-domain socket
+# - "host" is a TCP/IP socket (encrypted or not)
+# - "hostssl" is a TCP/IP socket that is SSL-encrypted
+# - "hostnossl" is a TCP/IP socket that is not SSL-encrypted
+# - "hostgssenc" is a TCP/IP socket that is GSSAPI-encrypted
+# - "hostnogssenc" is a TCP/IP socket that is not GSSAPI-encrypted
+#
+# DATABASE can be "all", "sameuser", "samerole", "replication", a
+# database name, or a comma-separated list thereof. The "all"
+# keyword does not match "replication". Access to replication
+# must be enabled in a separate record (see example below).
+#
+# USER can be "all", a user name, a group name prefixed with "+", or a
+# comma-separated list thereof.  In both the DATABASE and USER fields
+# you can also write a file name prefixed with "@" to include names
+# from a separate file.
+#
+# ADDRESS specifies the set of hosts the record matches.  It can be a
+# host name, or it is made up of an IP address and a CIDR mask that is
+# an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that
+# specifies the number of significant bits in the mask.  A host name
+# that starts with a dot (.) matches a suffix of the actual host name.
+# Alternatively, you can write an IP address and netmask in separate
+# columns to specify the set of hosts.  Instead of a CIDR-address, you
+# can write "samehost" to match any of the server's own IP addresses,
+# or "samenet" to match any address in any subnet that the server is
+# directly connected to.
+#
+# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
+# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".
+# Note that "password" sends passwords in clear text; "md5" or
+# "scram-sha-256" are preferred since they send encrypted passwords.
+#
+# OPTIONS are a set of options for the authentication in the format
+# NAME=VALUE.  The available options depend on the different
+# authentication methods -- refer to the "Client Authentication"
+# section in the documentation for a list of which options are
+# available for which authentication methods.
+#
+# Database and user names containing spaces, commas, quotes and other
+# special characters must be quoted.  Quoting one of the keywords
+# "all", "sameuser", "samerole" or "replication" makes the name lose
+# its special character, and just match a database or username with
+# that name.
+#
+# This file is read on server startup and when the server receives a
+# SIGHUP signal.  If you edit the file on a running system, you have to
+# SIGHUP the server for the changes to take effect, run "pg_ctl reload",
+# or execute "SELECT pg_reload_conf()".
+#
+# Put your actual configuration here
+# ----------------------------------
+#
+# If you want to allow non-local connections, you need to add more
+# "host" records.  In that case you will also need to make PostgreSQL
+# listen on a non-local interface via the listen_addresses
+# configuration parameter, or via the -i or -h command line switches.
+
+
+
+
+# DO NOT DISABLE!
+# If you change this first entry you will need to make sure that the
+# database superuser can access the database using some other method.
+# Noninteractive access to all databases is required during automatic
+# maintenance (custom daily cronjobs, replication, and similar tasks).
+#
+# Database administrative login by Unix domain socket
+local   all             postgres                                peer
+
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+
+# "local" is for Unix domain socket connections only
+local   all             all                                     peer
+# IPv4 local connections:
+host    all             all             127.0.0.1/32            md5
+host    all             all             172.28.235.0/24         md5
+
+# WEB
+host    all     socleng-sfr           10.106.101.147/32        md5
+
+# REPORTING
+host    all     prelytisng-sfr        10.106.101.147/32        md5
+
+# SOCLE_sup
+host    all     socle_sup             10.106.101.147/32        md5
+
+# IP DE TELSERVER REC
+host    socleng-sfr     socleng-sfr    10.106.100.150/32        md5
+
+# IP de COGRDPABC
+host    all             all             10.105.35.68/32         md5
+
+# Jobs Talend
+host    all     socleng-sfr      10.106.67.22/32        trust
+host    all     socleng-sfr      10.106.71.7/32        trust
+# Axyus
+host    all             all        10.107.27.33/32              md5
+
+# IP serveur Power BI On Premise
+host    socleng-sfr_report  socleng-sfr 10.106.101.97/32        md5
+
+# IP serveur de développement Power BI
+host    socleng-sfr_report     socleng-sfr       10.107.27.48/32       md5
+
+# IPv6 local connections:
+host    all             all             ::1/128                 scram-sha-256
+# Allow replication connections from localhost, by a user with the
+# replication privilege.
+local   replication     all                                     peer
+host    replication     all             127.0.0.1/32            scram-sha-256
+host    replication     all             ::1/128                 scram-sha-256
+# DUMP BDD REC vers BDD PROD - Benoist	
+host    all     postgres              10.106.101.145/32       md5
+host    all     socleng-sfr           10.106.101.145/32       md5

ConfigSysRepo/etc/systemd/system/echange.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Echange
+After=syslog.target
+
+[Service]
+User=socleng-sfr
+# StandardOutput=append:/home/socleng-xxx/logs/echange.log
+# StandardError=append:/home/socleng-xxx/logs/echange-err.log
+# ExecStart=/home/socleng-xxx/echange/socle-module-echange.jar
+ExecStart=/home/socleng-sfr/echange/startup_echange.sh
+SuccessExitStatus=143
+
+[Install]
+WantedBy=default.target

ConfigSysRepo/etc/systemd/system/socle.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=Tomcat socle
+After=network-online.target
+
+[Service]
+Type=forking
+
+User=socleng-sfr
+Group=socleng-sfr
+UMask=007
+
+Environment=JAVA_HOME=/usr/lib/jvm/java-1.17.0-openjdk-amd64
+
+ExecStart=/home/socleng-sfr/tomcat/bin/startup.sh
+ExecStop=/home/socleng-sfr/tomcat/bin/shutdown.sh
+
+Restart=on-failure
+
+# Configures the time to wait before service is stopped forcefully.
+TimeoutStopSec=300
+
+[Install]
+WantedBy=multi-user.target

ConfigSysRepo/home/socle_sup/.config/systemd/user/socle_supervision.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Socle supervision
+After=syslog.target
+
+[Service]
+Environment=JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64
+Environment=PATH=/usr/lib/jvm/java-1.17.5-openjdk-amd64/bin:$PATH
+ExecStart=/home/socle_sup/socle_supervision/startup_sup.sh
+SuccessExitStatus=143
+
+[Install]
+WantedBy=default.target

ConfigSysRepo/home/socle_sup/.profile

@@ -0,0 +1,39 @@
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+# see /usr/share/doc/bash/examples/startup-files for examples.
+# the files are located in the bash-doc package.
+
+# the default umask is set in /etc/profile; for setting the umask
+# for ssh logins, install and configure the libpam-umask package.
+#umask 022
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+	. "$HOME/.bashrc"
+    fi
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi
+
+# === BEGIN ANSIBLE MANAGED BLOCK socle_supervision ===
+alias socle_sup_start="systemctl --user start socle_supervision"
+alias socle_sup_stop="systemctl --user stop socle_supervision"
+alias socle_sup_restart="systemctl --user restart socle_supervision"
+alias socle_sup_status="systemctl --user status socle_supervision"
+export XDG_RUNTIME_DIR="/run/user/$UID"
+export DBUS_SESSION_BUS_ADDRESS="unix:path=${XDG_RUNTIME_DIR}/bus"
+export JAVA_HOME="/usr/lib/jvm/java-1.17.0-openjdk-amd64"
+export PATH=$JAVA_HOME/bin:$PATH
+# === END ANSIBLE MANAGED BLOCK socle_supervision ===
+
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi

ConfigSysRepo/home/socle_sup/socle_supervision/config/application.properties

@@ -0,0 +1,33 @@
+# Infos de connexion a la base de donnees
+spring.datasource.url=jdbc:postgresql://10.106.101.147:5432/socle_sup
+spring.datasource.username=socle_sup
+spring.datasource.password=RT5G-p87SFR87
+server.servlet.context-path=/SFR_BT_ws_sup
+
+# Configuration du pool
+spring.datasource.hikari.maximumPoolSize=5
+spring.datasource.hikari.connectionTimeout=20000
+#spring.datasource.hikari.minimumIdle=1
+#spring.datasource.hikari.idleTimeout=30000
+#spring.datasource.hikari.maxLifetime=2000000
+#spring.datasource.hikari.poolName=SocleSupervisionPool
+
+# Context path de l'application
+# server.servlet.context-path=/module_supervision
+
+# Port d'ecoute du serveur tomcat embarque
+server.port=8484
+
+# Parametrage du niveau de LOG
+#logging.level.root=DEBUG
+
+
+# Configuration du module de supervision
+## Intervalle en minutes pour l'aggregation des donnees sur l'axe journalier (defaut : 30)
+# supervision.timeAxisStep=30
+## Clef secrete pour la validation du jeton JWT.
+## Cette clef doit etre identique e la valeur de propriete "supervision.authenticationSecret" du SOCLE (fichier socle.properties)
+# supervision.authenticationSecret=__SocleSupervisionJWTSecretKey
+
+
+

ConfigSysRepo/home/socle_sup/socle_supervision/socle-supervision.conf

@@ -0,0 +1,3 @@
+JAVA_OPTS=-Xmx2048M
+# The location of the java executable (executable file at $JAVA_HOME/bin/java)
+JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64

ConfigSysRepo/home/socle_sup/socle_supervision/startup_sup.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+
+export JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64
+export PATH=/usr/lib/jvm/java-1.17.5-openjdk-amd64/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
+
+/home/socle_sup/socle_supervision/socle-supervision.jar >> /home/socle_sup/logs/socle-supervision.log

ConfigSysRepo/home/socleng-sfr/.install.properties

@@ -0,0 +1,21 @@
+#Configuration installeur SOCLE
+#Fri Nov 22 08:38:25 CET 2024
+log.directory=/home/socleng-sfr/logs
+report.database.server=10.106.101.147
+database.user=socleng-sfr
+batch.archive.directory=/home/socleng-sfr/archive
+installation.target.purpose=recette
+report.database.port=5432
+webapp.tomcat.home=/home/socleng-sfr/tomcat
+database.name=socleng-sfr
+webapp.tomcat.script=sudo service socle
+database.port=5432
+report.database.passwd=Pwd4socleng-sfr
+database.server=10.106.101.147
+batch.deploy.destination=/home/socleng-sfr/batch
+report.database.user=socleng-sfr
+report.batch.deploy.destination=/home/socleng-sfr/batchtbx
+report.database.name=socleng-sfr_report
+database.passwd=Pwd4socleng-sfr
+batch.configuration.directory=/home/socleng-sfr/conf/batch
+report.batch.configuration.directory=/home/socleng-sfr/conf/batchtbx

ConfigSysRepo/home/socleng-sfr/exploit_batch/clean_log.sh

@@ -0,0 +1,48 @@
+#!/bin/bash
+
+# Arrete le socle, Nettoie les fichiers temporaire et logs
+
+# Nombre de jour de conservation
+SOCLE_LOG_KEEP=30
+TOMCAT_LOG_KEEP=5
+
+# Chemin des dossiers
+TOMCAT_TEMP=~/tomcat/temp/
+TOMCAT_LOGS=~/tomcat/logs/
+SOCLE_LOGS=~/logs/
+
+# Les variables ci dessus sont écrasés si le fichier .exploit_vars existe dans le home et les variables redéfis
+test -f ~/.exploit_vars && source ~/.exploit_vars
+
+# On arrete le socle
+sudo systemctl stop socle
+
+sleep 20
+
+# on nettoie
+# fichiers et dossiers temp du tomcat
+find "${TOMCAT_TEMP}" -mindepth 1 -type f -delete -print
+find "${TOMCAT_TEMP}" -mindepth 1 -type d -delete -print
+
+# fichier logs du tomcat a l'arret
+gzip -S ".$(date +%Y%m%d).gz" ${TOMCAT_LOGS}/catalina.out
+find "${TOMCAT_LOGS}" -name "*.log" -mtime +${TOMCAT_LOG_KEEP} -delete -print
+find "${TOMCAT_LOGS}" -name "*.txt" -mtime +${TOMCAT_LOG_KEEP} -delete -print
+find "${TOMCAT_LOGS}" -name "*.gz" -mtime +${TOMCAT_LOG_KEEP} -delete -print
+
+# fichiers logs de l'application socle
+find "${SOCLE_LOGS}"  -name "*.log*"  -mtime +${SOCLE_LOG_KEEP} -delete -print
+
+# Recherche et compression des fichiers de logs non compressés
+YMD=$(date +%y%m%d -d "1 days ago")
+for xfile in $(find "${SOCLE_LOGS}" -name "*.log*" -mtime +2 -type f | grep -v ".gz")
+do
+        echo "Compression de : $xfile"
+        gzip --suffix=_$YMD.gz $xfile
+done
+
+# Suppression des répertoires vides
+find ${SOCLE_LOGS} -empty -mtime +${SOCLE_LOG_KEEP} -type d -delete
+
+# on redemarre le socle
+sudo systemctl start socle

ConfigSysRepo/home/socleng-sfr/tomcat/conf/context.xml

@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements.  See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version 2.0
+  (the "License"); you may not use this file except in compliance with
+  the License.  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+-->
+<!-- The contents of this file will be loaded for each web application -->
+<Context>
+
+    <!-- Default set of monitored resources. If one of these changes, the    -->
+    <!-- web application will be reloaded.                                   -->
+    <WatchedResource>WEB-INF/web.xml</WatchedResource>
+    <WatchedResource>${catalina.base}/conf/web.xml</WatchedResource>
+
+    <!-- Uncomment this to disable session persistence across Tomcat restarts -->
+    <!--
+    <Manager pathname="" />
+    -->
+
+<CookieProcessor className="org.apache.tomcat.util.http.LegacyCookieProcessor" />
+<!--Environment name="log4jConfiguration" value="file:///home/socleng-sfr/tomcat/conf/log4j2.xml" type="java.net.URL" /-->
+<Environment name="socle.datasource.jndi-name" value="jdbc/SOCLE_REC_POOL" type="java.lang.String" />
+<Environment name="elasticsearch.url" type="java.net.URL" value="http://10.106.101.147:9200/"/>
+
+<Resource 
+        auth="Container" 
+        driverClassName="org.postgresql.Driver" 
+        maxTotal="20" 
+        maxIdle="10" 
+        maxWaitMillis="-1" 
+        name="jdbc/SOCLE_REC_POOL" 
+        password="Pwd4socleng-sfr" 
+        type="javax.sql.DataSource" 
+        url="jdbc:postgresql://10.106.101.147:5432/socleng-sfr" 
+        username="socleng-sfr"
+defaultAutoCommit="false"/>
+
+</Context>

ConfigSysRepo/home/socleng-sfr/tomcat/conf/server.xml

@@ -0,0 +1,172 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements.  See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version 2.0
+  (the "License"); you may not use this file except in compliance with
+  the License.  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+-->
+<!-- Note:  A "Server" is not itself a "Container", so you may not
+     define subcomponents such as "Valves" at this level.
+     Documentation at /docs/config/server.html
+ -->
+<Server port="8005" shutdown="SHUTDOWN">
+  <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
+  <!-- Security listener. Documentation at /docs/config/listeners.html
+  <Listener className="org.apache.catalina.security.SecurityListener" />
+  -->
+  <!--APR library loader. Documentation at /docs/apr.html -->
+  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
+  <!-- Prevent memory leaks due to use of particular java/javax APIs-->
+  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
+  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
+  <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
+
+  <!-- Global JNDI resources
+       Documentation at /docs/jndi-resources-howto.html
+  -->
+  <GlobalNamingResources>
+    <!-- Editable user database that can also be used by
+         UserDatabaseRealm to authenticate users
+    -->
+    <Resource name="UserDatabase" auth="Container"
+              type="org.apache.catalina.UserDatabase"
+              description="User database that can be updated and saved"
+              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
+              pathname="conf/tomcat-users.xml" />
+  </GlobalNamingResources>
+
+  <!-- A "Service" is a collection of one or more "Connectors" that share
+       a single "Container" Note:  A "Service" is not itself a "Container",
+       so you may not define subcomponents such as "Valves" at this level.
+       Documentation at /docs/config/service.html
+   -->
+  <Service name="Catalina">
+
+    <!--The connectors can use a shared executor, you can define one or more named thread pools-->
+    <!--
+    <Executor name="tomcatThreadPool" namePrefix="catalina-exec-"
+        maxThreads="150" minSpareThreads="4"/>
+    -->
+
+
+    <!-- A "Connector" represents an endpoint by which requests are received
+         and responses are returned. Documentation at :
+         Java HTTP Connector: /docs/config/http.html
+         Java AJP  Connector: /docs/config/ajp.html
+         APR (HTTP/AJP) Connector: /docs/apr.html
+         Define a non-SSL/TLS HTTP/1.1 Connector on port 8080
+    -->
+    <Connector port="8080" protocol="HTTP/1.1"
+               connectionTimeout="20000"
+               maxPostSize="-1"
+               redirectPort="8443" />
+    <!-- A "Connector" using the shared thread pool-->
+    <!--
+    <Connector executor="tomcatThreadPool"
+               port="8080" protocol="HTTP/1.1"
+               connectionTimeout="20000"
+               redirectPort="8443" />
+    -->
+    <!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443
+         This connector uses the NIO implementation. The default
+         SSLImplementation will depend on the presence of the APR/native
+         library and the useOpenSSL attribute of the
+         AprLifecycleListener.
+         Either JSSE or OpenSSL style configuration may be used regardless of
+         the SSLImplementation selected. JSSE style configuration is used below.
+    -->
+    <!--
+    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
+               maxThreads="150" SSLEnabled="true">
+        <SSLHostConfig>
+            <Certificate certificateKeystoreFile="conf/localhost-rsa.jks"
+                         type="RSA" />
+        </SSLHostConfig>
+    </Connector>
+    -->
+    <!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443 with HTTP/2
+         This connector uses the APR/native implementation which always uses
+         OpenSSL for TLS.
+         Either JSSE or OpenSSL style configuration may be used. OpenSSL style
+         configuration is used below.
+    -->
+    <!--
+    <Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
+               maxThreads="150" SSLEnabled="true" >
+        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
+        <SSLHostConfig>
+            <Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
+                         certificateFile="conf/localhost-rsa-cert.pem"
+                         certificateChainFile="conf/localhost-rsa-chain.pem"
+                         type="RSA" />
+        </SSLHostConfig>
+    </Connector>
+    -->
+
+    <!-- Define an AJP 1.3 Connector on port 8009 -->
+    <!--
+    <Connector protocol="AJP/1.3"
+               address="::1"
+               port="8009"
+               redirectPort="8443" />
+    -->
+
+    <!-- An Engine represents the entry point (within Catalina) that processes
+         every request.  The Engine implementation for Tomcat stand alone
+         analyzes the HTTP headers included with the request, and passes them
+         on to the appropriate Host (virtual host).
+         Documentation at /docs/config/engine.html -->
+
+    <!-- You should set jvmRoute to support load-balancing via AJP ie :
+    <Engine name="Catalina" defaultHost="localhost" jvmRoute="jvm1">
+    -->
+    <Engine name="Catalina" defaultHost="localhost">
+
+      <!--For clustering, please take a look at documentation at:
+          /docs/cluster-howto.html  (simple how to)
+          /docs/config/cluster.html (reference documentation) -->
+      <!--
+      <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
+      -->
+
+      <!-- Use the LockOutRealm to prevent attempts to guess user passwords
+           via a brute-force attack -->
+      <Realm className="org.apache.catalina.realm.LockOutRealm">
+        <!-- This Realm uses the UserDatabase configured in the global JNDI
+             resources under the key "UserDatabase".  Any edits
+             that are performed against this UserDatabase are immediately
+             available for use by the Realm.  -->
+        <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
+               resourceName="UserDatabase"/>
+      </Realm>
+
+      <Host name="localhost"  appBase="webapps"
+            unpackWARs="true" autoDeploy="true">
+
+        <!-- SingleSignOn valve, share authentication between web applications
+             Documentation at: /docs/config/valve.html -->
+        <!--
+        <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
+        -->
+
+        <!-- Access log processes all example.
+             Documentation at: /docs/config/valve.html
+             Note: The pattern used is equivalent to using pattern="common" -->
+        <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
+               prefix="localhost_access_log" suffix=".txt"
+               pattern="%h %l %u %t &quot;%r&quot; %s %b" />
+
+      </Host>
+    </Engine>
+  </Service>
+</Server>

path_config

@@ -14,7 +14,7 @@
 
 ### socle_echange ###
 /etc/systemd/system/echange.service
-/home/socleng-{CLIENT_NAME_HERE}/.profile   ### A modifier
+/home/socleng-sfr/.profile   ### A modifier
 /home/socleng-aigle/echange/config/application.properties
 /home/socleng-aigle/echange/socle-module-echange.conf
 
@@ -24,14 +24,14 @@
 
 ### WEB ###
 /etc/systemd/system/socle.service
-/home/socleng-{CLIENT_NAME_HERE}/.install.properties
+/home/socleng-sfr/.install.properties
-/home/socleng-{CLIENT_NAME_HERE}/tomcat/conf/context.xml
+/home/socleng-sfr/tomcat/conf/context.xml
-/home/socleng-{CLIENT_NAME_HERE}/tomcat/conf/server.xml
+/home/socleng-sfr/tomcat/conf/server.xml
-/home/socleng-{CLIENT_NAME_HERE}/exploit_batch/clean_log.sh
+/home/socleng-sfr/exploit_batch/clean_log.sh
 
 ### VM Prelytis ###
 /home/prelytis-intersport/tomcat/conf/Catalina/localhost/SOCLE_CRM_REPORTING.xml
 /home/prelytis-intersport/tomcat/conf/server.xml
 
 ### APM ###
-/home/socleng-{CLIENT_NAME_HERE}/tomcat/webapps/{CLIENT_NAME_HERE}_FRONT/WEB-INF/views/main.jsp
+/home/socleng-sfr/tomcat/webapps/sfr_FRONT/WEB-INF/views/main.jsp

recuperation_config.sh

@@ -1,8 +1,8 @@
 #!/bin/bash
 
 # Configuration des variables
-ORG="SysConf"
+ORG="CONFIGS"
-BASE_URL="https://sysconfgit.linexos.eu"
+BASE_URL="https://repolake.alc-crm.com"
 API_URL="$BASE_URL/api/v1"
 REPO_NAME=$(hostname)
 REPO_URL="$BASE_URL/$ORG/$REPO_NAME.git"