Mise à jour des fichiers de configuration pour SOC-SFRV2-REC01
This commit is contained in:
parent
35214ddbf8
commit
f0323d517c
|
@ -0,0 +1,9 @@
|
|||
# socle_supervision rotate
|
||||
/home/socle_sup/logs/socle-supervision.log {
|
||||
daily
|
||||
dateext
|
||||
rotate 30
|
||||
copytruncate
|
||||
missingok
|
||||
compress
|
||||
delaycompress
|
|
@ -0,0 +1,136 @@
|
|||
# PostgreSQL Client Authentication Configuration File
|
||||
# ===================================================
|
||||
#
|
||||
# Refer to the "Client Authentication" section in the PostgreSQL
|
||||
# documentation for a complete description of this file. A short
|
||||
# synopsis follows.
|
||||
#
|
||||
# This file controls: which hosts are allowed to connect, how clients
|
||||
# are authenticated, which PostgreSQL user names they can use, which
|
||||
# databases they can access. Records take one of these forms:
|
||||
#
|
||||
# local DATABASE USER METHOD [OPTIONS]
|
||||
# host DATABASE USER ADDRESS METHOD [OPTIONS]
|
||||
# hostssl DATABASE USER ADDRESS METHOD [OPTIONS]
|
||||
# hostnossl DATABASE USER ADDRESS METHOD [OPTIONS]
|
||||
# hostgssenc DATABASE USER ADDRESS METHOD [OPTIONS]
|
||||
# hostnogssenc DATABASE USER ADDRESS METHOD [OPTIONS]
|
||||
#
|
||||
# (The uppercase items must be replaced by actual values.)
|
||||
#
|
||||
# The first field is the connection type:
|
||||
# - "local" is a Unix-domain socket
|
||||
# - "host" is a TCP/IP socket (encrypted or not)
|
||||
# - "hostssl" is a TCP/IP socket that is SSL-encrypted
|
||||
# - "hostnossl" is a TCP/IP socket that is not SSL-encrypted
|
||||
# - "hostgssenc" is a TCP/IP socket that is GSSAPI-encrypted
|
||||
# - "hostnogssenc" is a TCP/IP socket that is not GSSAPI-encrypted
|
||||
#
|
||||
# DATABASE can be "all", "sameuser", "samerole", "replication", a
|
||||
# database name, or a comma-separated list thereof. The "all"
|
||||
# keyword does not match "replication". Access to replication
|
||||
# must be enabled in a separate record (see example below).
|
||||
#
|
||||
# USER can be "all", a user name, a group name prefixed with "+", or a
|
||||
# comma-separated list thereof. In both the DATABASE and USER fields
|
||||
# you can also write a file name prefixed with "@" to include names
|
||||
# from a separate file.
|
||||
#
|
||||
# ADDRESS specifies the set of hosts the record matches. It can be a
|
||||
# host name, or it is made up of an IP address and a CIDR mask that is
|
||||
# an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that
|
||||
# specifies the number of significant bits in the mask. A host name
|
||||
# that starts with a dot (.) matches a suffix of the actual host name.
|
||||
# Alternatively, you can write an IP address and netmask in separate
|
||||
# columns to specify the set of hosts. Instead of a CIDR-address, you
|
||||
# can write "samehost" to match any of the server's own IP addresses,
|
||||
# or "samenet" to match any address in any subnet that the server is
|
||||
# directly connected to.
|
||||
#
|
||||
# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
|
||||
# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".
|
||||
# Note that "password" sends passwords in clear text; "md5" or
|
||||
# "scram-sha-256" are preferred since they send encrypted passwords.
|
||||
#
|
||||
# OPTIONS are a set of options for the authentication in the format
|
||||
# NAME=VALUE. The available options depend on the different
|
||||
# authentication methods -- refer to the "Client Authentication"
|
||||
# section in the documentation for a list of which options are
|
||||
# available for which authentication methods.
|
||||
#
|
||||
# Database and user names containing spaces, commas, quotes and other
|
||||
# special characters must be quoted. Quoting one of the keywords
|
||||
# "all", "sameuser", "samerole" or "replication" makes the name lose
|
||||
# its special character, and just match a database or username with
|
||||
# that name.
|
||||
#
|
||||
# This file is read on server startup and when the server receives a
|
||||
# SIGHUP signal. If you edit the file on a running system, you have to
|
||||
# SIGHUP the server for the changes to take effect, run "pg_ctl reload",
|
||||
# or execute "SELECT pg_reload_conf()".
|
||||
#
|
||||
# Put your actual configuration here
|
||||
# ----------------------------------
|
||||
#
|
||||
# If you want to allow non-local connections, you need to add more
|
||||
# "host" records. In that case you will also need to make PostgreSQL
|
||||
# listen on a non-local interface via the listen_addresses
|
||||
# configuration parameter, or via the -i or -h command line switches.
|
||||
|
||||
|
||||
|
||||
|
||||
# DO NOT DISABLE!
|
||||
# If you change this first entry you will need to make sure that the
|
||||
# database superuser can access the database using some other method.
|
||||
# Noninteractive access to all databases is required during automatic
|
||||
# maintenance (custom daily cronjobs, replication, and similar tasks).
|
||||
#
|
||||
# Database administrative login by Unix domain socket
|
||||
local all postgres peer
|
||||
|
||||
# TYPE DATABASE USER ADDRESS METHOD
|
||||
|
||||
# "local" is for Unix domain socket connections only
|
||||
local all all peer
|
||||
# IPv4 local connections:
|
||||
host all all 127.0.0.1/32 md5
|
||||
host all all 172.28.235.0/24 md5
|
||||
|
||||
# WEB
|
||||
host all socleng-sfr 10.106.101.147/32 md5
|
||||
|
||||
# REPORTING
|
||||
host all prelytisng-sfr 10.106.101.147/32 md5
|
||||
|
||||
# SOCLE_sup
|
||||
host all socle_sup 10.106.101.147/32 md5
|
||||
|
||||
# IP DE TELSERVER REC
|
||||
host socleng-sfr socleng-sfr 10.106.100.150/32 md5
|
||||
|
||||
# IP de COGRDPABC
|
||||
host all all 10.105.35.68/32 md5
|
||||
|
||||
# Jobs Talend
|
||||
host all socleng-sfr 10.106.67.22/32 trust
|
||||
host all socleng-sfr 10.106.71.7/32 trust
|
||||
# Axyus
|
||||
host all all 10.107.27.33/32 md5
|
||||
|
||||
# IP serveur Power BI On Premise
|
||||
host socleng-sfr_report socleng-sfr 10.106.101.97/32 md5
|
||||
|
||||
# IP serveur de développement Power BI
|
||||
host socleng-sfr_report socleng-sfr 10.107.27.48/32 md5
|
||||
|
||||
# IPv6 local connections:
|
||||
host all all ::1/128 scram-sha-256
|
||||
# Allow replication connections from localhost, by a user with the
|
||||
# replication privilege.
|
||||
local replication all peer
|
||||
host replication all 127.0.0.1/32 scram-sha-256
|
||||
host replication all ::1/128 scram-sha-256
|
||||
# DUMP BDD REC vers BDD PROD - Benoist
|
||||
host all postgres 10.106.101.145/32 md5
|
||||
host all socleng-sfr 10.106.101.145/32 md5
|
|
@ -0,0 +1,14 @@
|
|||
[Unit]
|
||||
Description=Echange
|
||||
After=syslog.target
|
||||
|
||||
[Service]
|
||||
User=socleng-sfr
|
||||
# StandardOutput=append:/home/socleng-xxx/logs/echange.log
|
||||
# StandardError=append:/home/socleng-xxx/logs/echange-err.log
|
||||
# ExecStart=/home/socleng-xxx/echange/socle-module-echange.jar
|
||||
ExecStart=/home/socleng-sfr/echange/startup_echange.sh
|
||||
SuccessExitStatus=143
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
|
@ -0,0 +1,23 @@
|
|||
[Unit]
|
||||
Description=Tomcat socle
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=forking
|
||||
|
||||
User=socleng-sfr
|
||||
Group=socleng-sfr
|
||||
UMask=007
|
||||
|
||||
Environment=JAVA_HOME=/usr/lib/jvm/java-1.17.0-openjdk-amd64
|
||||
|
||||
ExecStart=/home/socleng-sfr/tomcat/bin/startup.sh
|
||||
ExecStop=/home/socleng-sfr/tomcat/bin/shutdown.sh
|
||||
|
||||
Restart=on-failure
|
||||
|
||||
# Configures the time to wait before service is stopped forcefully.
|
||||
TimeoutStopSec=300
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
|
@ -0,0 +1,12 @@
|
|||
[Unit]
|
||||
Description=Socle supervision
|
||||
After=syslog.target
|
||||
|
||||
[Service]
|
||||
Environment=JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64
|
||||
Environment=PATH=/usr/lib/jvm/java-1.17.5-openjdk-amd64/bin:$PATH
|
||||
ExecStart=/home/socle_sup/socle_supervision/startup_sup.sh
|
||||
SuccessExitStatus=143
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
|
@ -0,0 +1,39 @@
|
|||
# ~/.profile: executed by the command interpreter for login shells.
|
||||
# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
|
||||
# exists.
|
||||
# see /usr/share/doc/bash/examples/startup-files for examples.
|
||||
# the files are located in the bash-doc package.
|
||||
|
||||
# the default umask is set in /etc/profile; for setting the umask
|
||||
# for ssh logins, install and configure the libpam-umask package.
|
||||
#umask 022
|
||||
|
||||
# if running bash
|
||||
if [ -n "$BASH_VERSION" ]; then
|
||||
# include .bashrc if it exists
|
||||
if [ -f "$HOME/.bashrc" ]; then
|
||||
. "$HOME/.bashrc"
|
||||
fi
|
||||
fi
|
||||
|
||||
# set PATH so it includes user's private bin if it exists
|
||||
if [ -d "$HOME/bin" ] ; then
|
||||
PATH="$HOME/bin:$PATH"
|
||||
fi
|
||||
|
||||
# === BEGIN ANSIBLE MANAGED BLOCK socle_supervision ===
|
||||
alias socle_sup_start="systemctl --user start socle_supervision"
|
||||
alias socle_sup_stop="systemctl --user stop socle_supervision"
|
||||
alias socle_sup_restart="systemctl --user restart socle_supervision"
|
||||
alias socle_sup_status="systemctl --user status socle_supervision"
|
||||
export XDG_RUNTIME_DIR="/run/user/$UID"
|
||||
export DBUS_SESSION_BUS_ADDRESS="unix:path=${XDG_RUNTIME_DIR}/bus"
|
||||
export JAVA_HOME="/usr/lib/jvm/java-1.17.0-openjdk-amd64"
|
||||
export PATH=$JAVA_HOME/bin:$PATH
|
||||
# === END ANSIBLE MANAGED BLOCK socle_supervision ===
|
||||
|
||||
|
||||
# set PATH so it includes user's private bin if it exists
|
||||
if [ -d "$HOME/.local/bin" ] ; then
|
||||
PATH="$HOME/.local/bin:$PATH"
|
||||
fi
|
|
@ -0,0 +1,33 @@
|
|||
# Infos de connexion a la base de donnees
|
||||
spring.datasource.url=jdbc:postgresql://10.106.101.147:5432/socle_sup
|
||||
spring.datasource.username=socle_sup
|
||||
spring.datasource.password=RT5G-p87SFR87
|
||||
server.servlet.context-path=/SFR_BT_ws_sup
|
||||
|
||||
# Configuration du pool
|
||||
spring.datasource.hikari.maximumPoolSize=5
|
||||
spring.datasource.hikari.connectionTimeout=20000
|
||||
#spring.datasource.hikari.minimumIdle=1
|
||||
#spring.datasource.hikari.idleTimeout=30000
|
||||
#spring.datasource.hikari.maxLifetime=2000000
|
||||
#spring.datasource.hikari.poolName=SocleSupervisionPool
|
||||
|
||||
# Context path de l'application
|
||||
# server.servlet.context-path=/module_supervision
|
||||
|
||||
# Port d'ecoute du serveur tomcat embarque
|
||||
server.port=8484
|
||||
|
||||
# Parametrage du niveau de LOG
|
||||
#logging.level.root=DEBUG
|
||||
|
||||
|
||||
# Configuration du module de supervision
|
||||
## Intervalle en minutes pour l'aggregation des donnees sur l'axe journalier (defaut : 30)
|
||||
# supervision.timeAxisStep=30
|
||||
## Clef secrete pour la validation du jeton JWT.
|
||||
## Cette clef doit etre identique e la valeur de propriete "supervision.authenticationSecret" du SOCLE (fichier socle.properties)
|
||||
# supervision.authenticationSecret=__SocleSupervisionJWTSecretKey
|
||||
|
||||
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
JAVA_OPTS=-Xmx2048M
|
||||
# The location of the java executable (executable file at $JAVA_HOME/bin/java)
|
||||
JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64
|
|
@ -0,0 +1,6 @@
|
|||
#!/bin/sh
|
||||
|
||||
export JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64
|
||||
export PATH=/usr/lib/jvm/java-1.17.5-openjdk-amd64/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
|
||||
|
||||
/home/socle_sup/socle_supervision/socle-supervision.jar >> /home/socle_sup/logs/socle-supervision.log
|
|
@ -0,0 +1,21 @@
|
|||
#Configuration installeur SOCLE
|
||||
#Fri Nov 22 08:38:25 CET 2024
|
||||
log.directory=/home/socleng-sfr/logs
|
||||
report.database.server=10.106.101.147
|
||||
database.user=socleng-sfr
|
||||
batch.archive.directory=/home/socleng-sfr/archive
|
||||
installation.target.purpose=recette
|
||||
report.database.port=5432
|
||||
webapp.tomcat.home=/home/socleng-sfr/tomcat
|
||||
database.name=socleng-sfr
|
||||
webapp.tomcat.script=sudo service socle
|
||||
database.port=5432
|
||||
report.database.passwd=Pwd4socleng-sfr
|
||||
database.server=10.106.101.147
|
||||
batch.deploy.destination=/home/socleng-sfr/batch
|
||||
report.database.user=socleng-sfr
|
||||
report.batch.deploy.destination=/home/socleng-sfr/batchtbx
|
||||
report.database.name=socleng-sfr_report
|
||||
database.passwd=Pwd4socleng-sfr
|
||||
batch.configuration.directory=/home/socleng-sfr/conf/batch
|
||||
report.batch.configuration.directory=/home/socleng-sfr/conf/batchtbx
|
|
@ -0,0 +1,48 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Arrete le socle, Nettoie les fichiers temporaire et logs
|
||||
|
||||
# Nombre de jour de conservation
|
||||
SOCLE_LOG_KEEP=30
|
||||
TOMCAT_LOG_KEEP=5
|
||||
|
||||
# Chemin des dossiers
|
||||
TOMCAT_TEMP=~/tomcat/temp/
|
||||
TOMCAT_LOGS=~/tomcat/logs/
|
||||
SOCLE_LOGS=~/logs/
|
||||
|
||||
# Les variables ci dessus sont écrasés si le fichier .exploit_vars existe dans le home et les variables redéfis
|
||||
test -f ~/.exploit_vars && source ~/.exploit_vars
|
||||
|
||||
# On arrete le socle
|
||||
sudo systemctl stop socle
|
||||
|
||||
sleep 20
|
||||
|
||||
# on nettoie
|
||||
# fichiers et dossiers temp du tomcat
|
||||
find "${TOMCAT_TEMP}" -mindepth 1 -type f -delete -print
|
||||
find "${TOMCAT_TEMP}" -mindepth 1 -type d -delete -print
|
||||
|
||||
# fichier logs du tomcat a l'arret
|
||||
gzip -S ".$(date +%Y%m%d).gz" ${TOMCAT_LOGS}/catalina.out
|
||||
find "${TOMCAT_LOGS}" -name "*.log" -mtime +${TOMCAT_LOG_KEEP} -delete -print
|
||||
find "${TOMCAT_LOGS}" -name "*.txt" -mtime +${TOMCAT_LOG_KEEP} -delete -print
|
||||
find "${TOMCAT_LOGS}" -name "*.gz" -mtime +${TOMCAT_LOG_KEEP} -delete -print
|
||||
|
||||
# fichiers logs de l'application socle
|
||||
find "${SOCLE_LOGS}" -name "*.log*" -mtime +${SOCLE_LOG_KEEP} -delete -print
|
||||
|
||||
# Recherche et compression des fichiers de logs non compressés
|
||||
YMD=$(date +%y%m%d -d "1 days ago")
|
||||
for xfile in $(find "${SOCLE_LOGS}" -name "*.log*" -mtime +2 -type f | grep -v ".gz")
|
||||
do
|
||||
echo "Compression de : $xfile"
|
||||
gzip --suffix=_$YMD.gz $xfile
|
||||
done
|
||||
|
||||
# Suppression des répertoires vides
|
||||
find ${SOCLE_LOGS} -empty -mtime +${SOCLE_LOG_KEEP} -type d -delete
|
||||
|
||||
# on redemarre le socle
|
||||
sudo systemctl start socle
|
|
@ -0,0 +1,49 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!--
|
||||
Licensed to the Apache Software Foundation (ASF) under one or more
|
||||
contributor license agreements. See the NOTICE file distributed with
|
||||
this work for additional information regarding copyright ownership.
|
||||
The ASF licenses this file to You under the Apache License, Version 2.0
|
||||
(the "License"); you may not use this file except in compliance with
|
||||
the License. You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
-->
|
||||
<!-- The contents of this file will be loaded for each web application -->
|
||||
<Context>
|
||||
|
||||
<!-- Default set of monitored resources. If one of these changes, the -->
|
||||
<!-- web application will be reloaded. -->
|
||||
<WatchedResource>WEB-INF/web.xml</WatchedResource>
|
||||
<WatchedResource>${catalina.base}/conf/web.xml</WatchedResource>
|
||||
|
||||
<!-- Uncomment this to disable session persistence across Tomcat restarts -->
|
||||
<!--
|
||||
<Manager pathname="" />
|
||||
-->
|
||||
|
||||
<CookieProcessor className="org.apache.tomcat.util.http.LegacyCookieProcessor" />
|
||||
<!--Environment name="log4jConfiguration" value="file:///home/socleng-sfr/tomcat/conf/log4j2.xml" type="java.net.URL" /-->
|
||||
<Environment name="socle.datasource.jndi-name" value="jdbc/SOCLE_REC_POOL" type="java.lang.String" />
|
||||
<Environment name="elasticsearch.url" type="java.net.URL" value="http://10.106.101.147:9200/"/>
|
||||
|
||||
<Resource
|
||||
auth="Container"
|
||||
driverClassName="org.postgresql.Driver"
|
||||
maxTotal="20"
|
||||
maxIdle="10"
|
||||
maxWaitMillis="-1"
|
||||
name="jdbc/SOCLE_REC_POOL"
|
||||
password="Pwd4socleng-sfr"
|
||||
type="javax.sql.DataSource"
|
||||
url="jdbc:postgresql://10.106.101.147:5432/socleng-sfr"
|
||||
username="socleng-sfr"
|
||||
defaultAutoCommit="false"/>
|
||||
|
||||
</Context>
|
|
@ -0,0 +1,172 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!--
|
||||
Licensed to the Apache Software Foundation (ASF) under one or more
|
||||
contributor license agreements. See the NOTICE file distributed with
|
||||
this work for additional information regarding copyright ownership.
|
||||
The ASF licenses this file to You under the Apache License, Version 2.0
|
||||
(the "License"); you may not use this file except in compliance with
|
||||
the License. You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
-->
|
||||
<!-- Note: A "Server" is not itself a "Container", so you may not
|
||||
define subcomponents such as "Valves" at this level.
|
||||
Documentation at /docs/config/server.html
|
||||
-->
|
||||
<Server port="8005" shutdown="SHUTDOWN">
|
||||
<Listener className="org.apache.catalina.startup.VersionLoggerListener" />
|
||||
<!-- Security listener. Documentation at /docs/config/listeners.html
|
||||
<Listener className="org.apache.catalina.security.SecurityListener" />
|
||||
-->
|
||||
<!--APR library loader. Documentation at /docs/apr.html -->
|
||||
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
|
||||
<!-- Prevent memory leaks due to use of particular java/javax APIs-->
|
||||
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
|
||||
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
|
||||
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
|
||||
|
||||
<!-- Global JNDI resources
|
||||
Documentation at /docs/jndi-resources-howto.html
|
||||
-->
|
||||
<GlobalNamingResources>
|
||||
<!-- Editable user database that can also be used by
|
||||
UserDatabaseRealm to authenticate users
|
||||
-->
|
||||
<Resource name="UserDatabase" auth="Container"
|
||||
type="org.apache.catalina.UserDatabase"
|
||||
description="User database that can be updated and saved"
|
||||
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
|
||||
pathname="conf/tomcat-users.xml" />
|
||||
</GlobalNamingResources>
|
||||
|
||||
<!-- A "Service" is a collection of one or more "Connectors" that share
|
||||
a single "Container" Note: A "Service" is not itself a "Container",
|
||||
so you may not define subcomponents such as "Valves" at this level.
|
||||
Documentation at /docs/config/service.html
|
||||
-->
|
||||
<Service name="Catalina">
|
||||
|
||||
<!--The connectors can use a shared executor, you can define one or more named thread pools-->
|
||||
<!--
|
||||
<Executor name="tomcatThreadPool" namePrefix="catalina-exec-"
|
||||
maxThreads="150" minSpareThreads="4"/>
|
||||
-->
|
||||
|
||||
|
||||
<!-- A "Connector" represents an endpoint by which requests are received
|
||||
and responses are returned. Documentation at :
|
||||
Java HTTP Connector: /docs/config/http.html
|
||||
Java AJP Connector: /docs/config/ajp.html
|
||||
APR (HTTP/AJP) Connector: /docs/apr.html
|
||||
Define a non-SSL/TLS HTTP/1.1 Connector on port 8080
|
||||
-->
|
||||
<Connector port="8080" protocol="HTTP/1.1"
|
||||
connectionTimeout="20000"
|
||||
maxPostSize="-1"
|
||||
redirectPort="8443" />
|
||||
<!-- A "Connector" using the shared thread pool-->
|
||||
<!--
|
||||
<Connector executor="tomcatThreadPool"
|
||||
port="8080" protocol="HTTP/1.1"
|
||||
connectionTimeout="20000"
|
||||
redirectPort="8443" />
|
||||
-->
|
||||
<!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443
|
||||
This connector uses the NIO implementation. The default
|
||||
SSLImplementation will depend on the presence of the APR/native
|
||||
library and the useOpenSSL attribute of the
|
||||
AprLifecycleListener.
|
||||
Either JSSE or OpenSSL style configuration may be used regardless of
|
||||
the SSLImplementation selected. JSSE style configuration is used below.
|
||||
-->
|
||||
<!--
|
||||
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
|
||||
maxThreads="150" SSLEnabled="true">
|
||||
<SSLHostConfig>
|
||||
<Certificate certificateKeystoreFile="conf/localhost-rsa.jks"
|
||||
type="RSA" />
|
||||
</SSLHostConfig>
|
||||
</Connector>
|
||||
-->
|
||||
<!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443 with HTTP/2
|
||||
This connector uses the APR/native implementation which always uses
|
||||
OpenSSL for TLS.
|
||||
Either JSSE or OpenSSL style configuration may be used. OpenSSL style
|
||||
configuration is used below.
|
||||
-->
|
||||
<!--
|
||||
<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
|
||||
maxThreads="150" SSLEnabled="true" >
|
||||
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
|
||||
<SSLHostConfig>
|
||||
<Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
|
||||
certificateFile="conf/localhost-rsa-cert.pem"
|
||||
certificateChainFile="conf/localhost-rsa-chain.pem"
|
||||
type="RSA" />
|
||||
</SSLHostConfig>
|
||||
</Connector>
|
||||
-->
|
||||
|
||||
<!-- Define an AJP 1.3 Connector on port 8009 -->
|
||||
<!--
|
||||
<Connector protocol="AJP/1.3"
|
||||
address="::1"
|
||||
port="8009"
|
||||
redirectPort="8443" />
|
||||
-->
|
||||
|
||||
<!-- An Engine represents the entry point (within Catalina) that processes
|
||||
every request. The Engine implementation for Tomcat stand alone
|
||||
analyzes the HTTP headers included with the request, and passes them
|
||||
on to the appropriate Host (virtual host).
|
||||
Documentation at /docs/config/engine.html -->
|
||||
|
||||
<!-- You should set jvmRoute to support load-balancing via AJP ie :
|
||||
<Engine name="Catalina" defaultHost="localhost" jvmRoute="jvm1">
|
||||
-->
|
||||
<Engine name="Catalina" defaultHost="localhost">
|
||||
|
||||
<!--For clustering, please take a look at documentation at:
|
||||
/docs/cluster-howto.html (simple how to)
|
||||
/docs/config/cluster.html (reference documentation) -->
|
||||
<!--
|
||||
<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
|
||||
-->
|
||||
|
||||
<!-- Use the LockOutRealm to prevent attempts to guess user passwords
|
||||
via a brute-force attack -->
|
||||
<Realm className="org.apache.catalina.realm.LockOutRealm">
|
||||
<!-- This Realm uses the UserDatabase configured in the global JNDI
|
||||
resources under the key "UserDatabase". Any edits
|
||||
that are performed against this UserDatabase are immediately
|
||||
available for use by the Realm. -->
|
||||
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
|
||||
resourceName="UserDatabase"/>
|
||||
</Realm>
|
||||
|
||||
<Host name="localhost" appBase="webapps"
|
||||
unpackWARs="true" autoDeploy="true">
|
||||
|
||||
<!-- SingleSignOn valve, share authentication between web applications
|
||||
Documentation at: /docs/config/valve.html -->
|
||||
<!--
|
||||
<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
|
||||
-->
|
||||
|
||||
<!-- Access log processes all example.
|
||||
Documentation at: /docs/config/valve.html
|
||||
Note: The pattern used is equivalent to using pattern="common" -->
|
||||
<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
|
||||
prefix="localhost_access_log" suffix=".txt"
|
||||
pattern="%h %l %u %t "%r" %s %b" />
|
||||
|
||||
</Host>
|
||||
</Engine>
|
||||
</Service>
|
||||
</Server>
|
12
path_config
12
path_config
|
@ -14,7 +14,7 @@
|
|||
|
||||
### socle_echange ###
|
||||
/etc/systemd/system/echange.service
|
||||
/home/socleng-{CLIENT_NAME_HERE}/.profile ### A modifier
|
||||
/home/socleng-sfr/.profile ### A modifier
|
||||
/home/socleng-aigle/echange/config/application.properties
|
||||
/home/socleng-aigle/echange/socle-module-echange.conf
|
||||
|
||||
|
@ -24,14 +24,14 @@
|
|||
|
||||
### WEB ###
|
||||
/etc/systemd/system/socle.service
|
||||
/home/socleng-{CLIENT_NAME_HERE}/.install.properties
|
||||
/home/socleng-{CLIENT_NAME_HERE}/tomcat/conf/context.xml
|
||||
/home/socleng-{CLIENT_NAME_HERE}/tomcat/conf/server.xml
|
||||
/home/socleng-{CLIENT_NAME_HERE}/exploit_batch/clean_log.sh
|
||||
/home/socleng-sfr/.install.properties
|
||||
/home/socleng-sfr/tomcat/conf/context.xml
|
||||
/home/socleng-sfr/tomcat/conf/server.xml
|
||||
/home/socleng-sfr/exploit_batch/clean_log.sh
|
||||
|
||||
### VM Prelytis ###
|
||||
/home/prelytis-intersport/tomcat/conf/Catalina/localhost/SOCLE_CRM_REPORTING.xml
|
||||
/home/prelytis-intersport/tomcat/conf/server.xml
|
||||
|
||||
### APM ###
|
||||
/home/socleng-{CLIENT_NAME_HERE}/tomcat/webapps/{CLIENT_NAME_HERE}_FRONT/WEB-INF/views/main.jsp
|
||||
/home/socleng-sfr/tomcat/webapps/sfr_FRONT/WEB-INF/views/main.jsp
|
||||
|
|
|
@ -1,8 +1,8 @@
|
|||
#!/bin/bash
|
||||
|
||||
# Configuration des variables
|
||||
ORG="SysConf"
|
||||
BASE_URL="https://sysconfgit.linexos.eu"
|
||||
ORG="CONFIGS"
|
||||
BASE_URL="https://repolake.alc-crm.com"
|
||||
API_URL="$BASE_URL/api/v1"
|
||||
REPO_NAME=$(hostname)
|
||||
REPO_URL="$BASE_URL/$ORG/$REPO_NAME.git"
|
||||
|
|
Loading…
Reference in New Issue