Mise à jour des fichiers de configuration pour SOC-SFRV2-REC01
This commit is contained in:
		
							parent
							
								
									35214ddbf8
								
							
						
					
					
						commit
						f0323d517c
					
				|  | @ -0,0 +1,9 @@ | |||
| # socle_supervision rotate | ||||
| /home/socle_sup/logs/socle-supervision.log { | ||||
|     daily | ||||
|     dateext | ||||
|     rotate 30 | ||||
|     copytruncate | ||||
|     missingok | ||||
|     compress | ||||
|     delaycompress | ||||
|  | @ -0,0 +1,136 @@ | |||
| # PostgreSQL Client Authentication Configuration File | ||||
| # =================================================== | ||||
| # | ||||
| # Refer to the "Client Authentication" section in the PostgreSQL | ||||
| # documentation for a complete description of this file.  A short | ||||
| # synopsis follows. | ||||
| # | ||||
| # This file controls: which hosts are allowed to connect, how clients | ||||
| # are authenticated, which PostgreSQL user names they can use, which | ||||
| # databases they can access.  Records take one of these forms: | ||||
| # | ||||
| # local         DATABASE  USER  METHOD  [OPTIONS] | ||||
| # host          DATABASE  USER  ADDRESS  METHOD  [OPTIONS] | ||||
| # hostssl       DATABASE  USER  ADDRESS  METHOD  [OPTIONS] | ||||
| # hostnossl     DATABASE  USER  ADDRESS  METHOD  [OPTIONS] | ||||
| # hostgssenc    DATABASE  USER  ADDRESS  METHOD  [OPTIONS] | ||||
| # hostnogssenc  DATABASE  USER  ADDRESS  METHOD  [OPTIONS] | ||||
| # | ||||
| # (The uppercase items must be replaced by actual values.) | ||||
| # | ||||
| # The first field is the connection type: | ||||
| # - "local" is a Unix-domain socket | ||||
| # - "host" is a TCP/IP socket (encrypted or not) | ||||
| # - "hostssl" is a TCP/IP socket that is SSL-encrypted | ||||
| # - "hostnossl" is a TCP/IP socket that is not SSL-encrypted | ||||
| # - "hostgssenc" is a TCP/IP socket that is GSSAPI-encrypted | ||||
| # - "hostnogssenc" is a TCP/IP socket that is not GSSAPI-encrypted | ||||
| # | ||||
| # DATABASE can be "all", "sameuser", "samerole", "replication", a | ||||
| # database name, or a comma-separated list thereof. The "all" | ||||
| # keyword does not match "replication". Access to replication | ||||
| # must be enabled in a separate record (see example below). | ||||
| # | ||||
| # USER can be "all", a user name, a group name prefixed with "+", or a | ||||
| # comma-separated list thereof.  In both the DATABASE and USER fields | ||||
| # you can also write a file name prefixed with "@" to include names | ||||
| # from a separate file. | ||||
| # | ||||
| # ADDRESS specifies the set of hosts the record matches.  It can be a | ||||
| # host name, or it is made up of an IP address and a CIDR mask that is | ||||
| # an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that | ||||
| # specifies the number of significant bits in the mask.  A host name | ||||
| # that starts with a dot (.) matches a suffix of the actual host name. | ||||
| # Alternatively, you can write an IP address and netmask in separate | ||||
| # columns to specify the set of hosts.  Instead of a CIDR-address, you | ||||
| # can write "samehost" to match any of the server's own IP addresses, | ||||
| # or "samenet" to match any address in any subnet that the server is | ||||
| # directly connected to. | ||||
| # | ||||
| # METHOD can be "trust", "reject", "md5", "password", "scram-sha-256", | ||||
| # "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert". | ||||
| # Note that "password" sends passwords in clear text; "md5" or | ||||
| # "scram-sha-256" are preferred since they send encrypted passwords. | ||||
| # | ||||
| # OPTIONS are a set of options for the authentication in the format | ||||
| # NAME=VALUE.  The available options depend on the different | ||||
| # authentication methods -- refer to the "Client Authentication" | ||||
| # section in the documentation for a list of which options are | ||||
| # available for which authentication methods. | ||||
| # | ||||
| # Database and user names containing spaces, commas, quotes and other | ||||
| # special characters must be quoted.  Quoting one of the keywords | ||||
| # "all", "sameuser", "samerole" or "replication" makes the name lose | ||||
| # its special character, and just match a database or username with | ||||
| # that name. | ||||
| # | ||||
| # This file is read on server startup and when the server receives a | ||||
| # SIGHUP signal.  If you edit the file on a running system, you have to | ||||
| # SIGHUP the server for the changes to take effect, run "pg_ctl reload", | ||||
| # or execute "SELECT pg_reload_conf()". | ||||
| # | ||||
| # Put your actual configuration here | ||||
| # ---------------------------------- | ||||
| # | ||||
| # If you want to allow non-local connections, you need to add more | ||||
| # "host" records.  In that case you will also need to make PostgreSQL | ||||
| # listen on a non-local interface via the listen_addresses | ||||
| # configuration parameter, or via the -i or -h command line switches. | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| # DO NOT DISABLE! | ||||
| # If you change this first entry you will need to make sure that the | ||||
| # database superuser can access the database using some other method. | ||||
| # Noninteractive access to all databases is required during automatic | ||||
| # maintenance (custom daily cronjobs, replication, and similar tasks). | ||||
| # | ||||
| # Database administrative login by Unix domain socket | ||||
| local   all             postgres                                peer | ||||
| 
 | ||||
| # TYPE  DATABASE        USER            ADDRESS                 METHOD | ||||
| 
 | ||||
| # "local" is for Unix domain socket connections only | ||||
| local   all             all                                     peer | ||||
| # IPv4 local connections: | ||||
| host    all             all             127.0.0.1/32            md5 | ||||
| host    all             all             172.28.235.0/24         md5 | ||||
| 
 | ||||
| # WEB | ||||
| host    all     socleng-sfr           10.106.101.147/32        md5 | ||||
| 
 | ||||
| # REPORTING | ||||
| host    all     prelytisng-sfr        10.106.101.147/32        md5 | ||||
| 
 | ||||
| # SOCLE_sup | ||||
| host    all     socle_sup             10.106.101.147/32        md5 | ||||
| 
 | ||||
| # IP DE TELSERVER REC | ||||
| host    socleng-sfr     socleng-sfr    10.106.100.150/32        md5 | ||||
| 
 | ||||
| # IP de COGRDPABC | ||||
| host    all             all             10.105.35.68/32         md5 | ||||
| 
 | ||||
| # Jobs Talend | ||||
| host    all     socleng-sfr      10.106.67.22/32        trust | ||||
| host    all     socleng-sfr      10.106.71.7/32        trust | ||||
| # Axyus | ||||
| host    all             all        10.107.27.33/32              md5 | ||||
| 
 | ||||
| # IP serveur Power BI On Premise | ||||
| host    socleng-sfr_report  socleng-sfr 10.106.101.97/32        md5 | ||||
| 
 | ||||
| # IP serveur de développement Power BI | ||||
| host    socleng-sfr_report     socleng-sfr       10.107.27.48/32       md5 | ||||
| 
 | ||||
| # IPv6 local connections: | ||||
| host    all             all             ::1/128                 scram-sha-256 | ||||
| # Allow replication connections from localhost, by a user with the | ||||
| # replication privilege. | ||||
| local   replication     all                                     peer | ||||
| host    replication     all             127.0.0.1/32            scram-sha-256 | ||||
| host    replication     all             ::1/128                 scram-sha-256 | ||||
| # DUMP BDD REC vers BDD PROD - Benoist	 | ||||
| host    all     postgres              10.106.101.145/32       md5 | ||||
| host    all     socleng-sfr           10.106.101.145/32       md5 | ||||
|  | @ -0,0 +1,14 @@ | |||
| [Unit] | ||||
| Description=Echange | ||||
| After=syslog.target | ||||
| 
 | ||||
| [Service] | ||||
| User=socleng-sfr | ||||
| # StandardOutput=append:/home/socleng-xxx/logs/echange.log | ||||
| # StandardError=append:/home/socleng-xxx/logs/echange-err.log | ||||
| # ExecStart=/home/socleng-xxx/echange/socle-module-echange.jar | ||||
| ExecStart=/home/socleng-sfr/echange/startup_echange.sh | ||||
| SuccessExitStatus=143 | ||||
| 
 | ||||
| [Install] | ||||
| WantedBy=default.target | ||||
|  | @ -0,0 +1,23 @@ | |||
| [Unit] | ||||
| Description=Tomcat socle | ||||
| After=network-online.target | ||||
| 
 | ||||
| [Service] | ||||
| Type=forking | ||||
| 
 | ||||
| User=socleng-sfr | ||||
| Group=socleng-sfr | ||||
| UMask=007 | ||||
| 
 | ||||
| Environment=JAVA_HOME=/usr/lib/jvm/java-1.17.0-openjdk-amd64 | ||||
| 
 | ||||
| ExecStart=/home/socleng-sfr/tomcat/bin/startup.sh | ||||
| ExecStop=/home/socleng-sfr/tomcat/bin/shutdown.sh | ||||
| 
 | ||||
| Restart=on-failure | ||||
| 
 | ||||
| # Configures the time to wait before service is stopped forcefully. | ||||
| TimeoutStopSec=300 | ||||
| 
 | ||||
| [Install] | ||||
| WantedBy=multi-user.target | ||||
|  | @ -0,0 +1,12 @@ | |||
| [Unit] | ||||
| Description=Socle supervision | ||||
| After=syslog.target | ||||
| 
 | ||||
| [Service] | ||||
| Environment=JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64 | ||||
| Environment=PATH=/usr/lib/jvm/java-1.17.5-openjdk-amd64/bin:$PATH | ||||
| ExecStart=/home/socle_sup/socle_supervision/startup_sup.sh | ||||
| SuccessExitStatus=143 | ||||
| 
 | ||||
| [Install] | ||||
| WantedBy=default.target | ||||
|  | @ -0,0 +1,39 @@ | |||
| # ~/.profile: executed by the command interpreter for login shells. | ||||
| # This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login | ||||
| # exists. | ||||
| # see /usr/share/doc/bash/examples/startup-files for examples. | ||||
| # the files are located in the bash-doc package. | ||||
| 
 | ||||
| # the default umask is set in /etc/profile; for setting the umask | ||||
| # for ssh logins, install and configure the libpam-umask package. | ||||
| #umask 022 | ||||
| 
 | ||||
| # if running bash | ||||
| if [ -n "$BASH_VERSION" ]; then | ||||
|     # include .bashrc if it exists | ||||
|     if [ -f "$HOME/.bashrc" ]; then | ||||
| 	. "$HOME/.bashrc" | ||||
|     fi | ||||
| fi | ||||
| 
 | ||||
| # set PATH so it includes user's private bin if it exists | ||||
| if [ -d "$HOME/bin" ] ; then | ||||
|     PATH="$HOME/bin:$PATH" | ||||
| fi | ||||
| 
 | ||||
| # === BEGIN ANSIBLE MANAGED BLOCK socle_supervision === | ||||
| alias socle_sup_start="systemctl --user start socle_supervision" | ||||
| alias socle_sup_stop="systemctl --user stop socle_supervision" | ||||
| alias socle_sup_restart="systemctl --user restart socle_supervision" | ||||
| alias socle_sup_status="systemctl --user status socle_supervision" | ||||
| export XDG_RUNTIME_DIR="/run/user/$UID" | ||||
| export DBUS_SESSION_BUS_ADDRESS="unix:path=${XDG_RUNTIME_DIR}/bus" | ||||
| export JAVA_HOME="/usr/lib/jvm/java-1.17.0-openjdk-amd64" | ||||
| export PATH=$JAVA_HOME/bin:$PATH | ||||
| # === END ANSIBLE MANAGED BLOCK socle_supervision === | ||||
| 
 | ||||
| 
 | ||||
| # set PATH so it includes user's private bin if it exists | ||||
| if [ -d "$HOME/.local/bin" ] ; then | ||||
|     PATH="$HOME/.local/bin:$PATH" | ||||
| fi | ||||
|  | @ -0,0 +1,33 @@ | |||
| # Infos de connexion a la base de donnees | ||||
| spring.datasource.url=jdbc:postgresql://10.106.101.147:5432/socle_sup | ||||
| spring.datasource.username=socle_sup | ||||
| spring.datasource.password=RT5G-p87SFR87 | ||||
| server.servlet.context-path=/SFR_BT_ws_sup | ||||
| 
 | ||||
| # Configuration du pool | ||||
| spring.datasource.hikari.maximumPoolSize=5 | ||||
| spring.datasource.hikari.connectionTimeout=20000 | ||||
| #spring.datasource.hikari.minimumIdle=1 | ||||
| #spring.datasource.hikari.idleTimeout=30000 | ||||
| #spring.datasource.hikari.maxLifetime=2000000 | ||||
| #spring.datasource.hikari.poolName=SocleSupervisionPool | ||||
| 
 | ||||
| # Context path de l'application | ||||
| # server.servlet.context-path=/module_supervision | ||||
| 
 | ||||
| # Port d'ecoute du serveur tomcat embarque | ||||
| server.port=8484 | ||||
| 
 | ||||
| # Parametrage du niveau de LOG | ||||
| #logging.level.root=DEBUG | ||||
| 
 | ||||
| 
 | ||||
| # Configuration du module de supervision | ||||
| ## Intervalle en minutes pour l'aggregation des donnees sur l'axe journalier (defaut : 30) | ||||
| # supervision.timeAxisStep=30 | ||||
| ## Clef secrete pour la validation du jeton JWT. | ||||
| ## Cette clef doit etre identique e la valeur de propriete "supervision.authenticationSecret" du SOCLE (fichier socle.properties) | ||||
| # supervision.authenticationSecret=__SocleSupervisionJWTSecretKey | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
|  | @ -0,0 +1,3 @@ | |||
| JAVA_OPTS=-Xmx2048M | ||||
| # The location of the java executable (executable file at $JAVA_HOME/bin/java) | ||||
| JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64 | ||||
|  | @ -0,0 +1,6 @@ | |||
| #!/bin/sh | ||||
| 
 | ||||
| export JAVA_HOME=/usr/lib/jvm/java-1.17.5-openjdk-amd64 | ||||
| export PATH=/usr/lib/jvm/java-1.17.5-openjdk-amd64/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games | ||||
| 
 | ||||
| /home/socle_sup/socle_supervision/socle-supervision.jar >> /home/socle_sup/logs/socle-supervision.log | ||||
|  | @ -0,0 +1,21 @@ | |||
| #Configuration installeur SOCLE | ||||
| #Fri Nov 22 08:38:25 CET 2024 | ||||
| log.directory=/home/socleng-sfr/logs | ||||
| report.database.server=10.106.101.147 | ||||
| database.user=socleng-sfr | ||||
| batch.archive.directory=/home/socleng-sfr/archive | ||||
| installation.target.purpose=recette | ||||
| report.database.port=5432 | ||||
| webapp.tomcat.home=/home/socleng-sfr/tomcat | ||||
| database.name=socleng-sfr | ||||
| webapp.tomcat.script=sudo service socle | ||||
| database.port=5432 | ||||
| report.database.passwd=Pwd4socleng-sfr | ||||
| database.server=10.106.101.147 | ||||
| batch.deploy.destination=/home/socleng-sfr/batch | ||||
| report.database.user=socleng-sfr | ||||
| report.batch.deploy.destination=/home/socleng-sfr/batchtbx | ||||
| report.database.name=socleng-sfr_report | ||||
| database.passwd=Pwd4socleng-sfr | ||||
| batch.configuration.directory=/home/socleng-sfr/conf/batch | ||||
| report.batch.configuration.directory=/home/socleng-sfr/conf/batchtbx | ||||
|  | @ -0,0 +1,48 @@ | |||
| #!/bin/bash | ||||
| 
 | ||||
| # Arrete le socle, Nettoie les fichiers temporaire et logs | ||||
| 
 | ||||
| # Nombre de jour de conservation | ||||
| SOCLE_LOG_KEEP=30 | ||||
| TOMCAT_LOG_KEEP=5 | ||||
| 
 | ||||
| # Chemin des dossiers | ||||
| TOMCAT_TEMP=~/tomcat/temp/ | ||||
| TOMCAT_LOGS=~/tomcat/logs/ | ||||
| SOCLE_LOGS=~/logs/ | ||||
| 
 | ||||
| # Les variables ci dessus sont écrasés si le fichier .exploit_vars existe dans le home et les variables redéfis | ||||
| test -f ~/.exploit_vars && source ~/.exploit_vars | ||||
| 
 | ||||
| # On arrete le socle | ||||
| sudo systemctl stop socle | ||||
| 
 | ||||
| sleep 20 | ||||
| 
 | ||||
| # on nettoie | ||||
| # fichiers et dossiers temp du tomcat | ||||
| find "${TOMCAT_TEMP}" -mindepth 1 -type f -delete -print | ||||
| find "${TOMCAT_TEMP}" -mindepth 1 -type d -delete -print | ||||
| 
 | ||||
| # fichier logs du tomcat a l'arret | ||||
| gzip -S ".$(date +%Y%m%d).gz" ${TOMCAT_LOGS}/catalina.out | ||||
| find "${TOMCAT_LOGS}" -name "*.log" -mtime +${TOMCAT_LOG_KEEP} -delete -print | ||||
| find "${TOMCAT_LOGS}" -name "*.txt" -mtime +${TOMCAT_LOG_KEEP} -delete -print | ||||
| find "${TOMCAT_LOGS}" -name "*.gz" -mtime +${TOMCAT_LOG_KEEP} -delete -print | ||||
| 
 | ||||
| # fichiers logs de l'application socle | ||||
| find "${SOCLE_LOGS}"  -name "*.log*"  -mtime +${SOCLE_LOG_KEEP} -delete -print | ||||
| 
 | ||||
| # Recherche et compression des fichiers de logs non compressés | ||||
| YMD=$(date +%y%m%d -d "1 days ago") | ||||
| for xfile in $(find "${SOCLE_LOGS}" -name "*.log*" -mtime +2 -type f | grep -v ".gz") | ||||
| do | ||||
|         echo "Compression de : $xfile" | ||||
|         gzip --suffix=_$YMD.gz $xfile | ||||
| done | ||||
| 
 | ||||
| # Suppression des répertoires vides | ||||
| find ${SOCLE_LOGS} -empty -mtime +${SOCLE_LOG_KEEP} -type d -delete | ||||
| 
 | ||||
| # on redemarre le socle | ||||
| sudo systemctl start socle | ||||
|  | @ -0,0 +1,49 @@ | |||
| <?xml version="1.0" encoding="UTF-8"?> | ||||
| <!-- | ||||
|   Licensed to the Apache Software Foundation (ASF) under one or more | ||||
|   contributor license agreements.  See the NOTICE file distributed with | ||||
|   this work for additional information regarding copyright ownership. | ||||
|   The ASF licenses this file to You under the Apache License, Version 2.0 | ||||
|   (the "License"); you may not use this file except in compliance with | ||||
|   the License.  You may obtain a copy of the License at | ||||
| 
 | ||||
|       http://www.apache.org/licenses/LICENSE-2.0 | ||||
| 
 | ||||
|   Unless required by applicable law or agreed to in writing, software | ||||
|   distributed under the License is distributed on an "AS IS" BASIS, | ||||
|   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||||
|   See the License for the specific language governing permissions and | ||||
|   limitations under the License. | ||||
| --> | ||||
| <!-- The contents of this file will be loaded for each web application --> | ||||
| <Context> | ||||
| 
 | ||||
|     <!-- Default set of monitored resources. If one of these changes, the    --> | ||||
|     <!-- web application will be reloaded.                                   --> | ||||
|     <WatchedResource>WEB-INF/web.xml</WatchedResource> | ||||
|     <WatchedResource>${catalina.base}/conf/web.xml</WatchedResource> | ||||
| 
 | ||||
|     <!-- Uncomment this to disable session persistence across Tomcat restarts --> | ||||
|     <!-- | ||||
|     <Manager pathname="" /> | ||||
|     --> | ||||
| 
 | ||||
| <CookieProcessor className="org.apache.tomcat.util.http.LegacyCookieProcessor" /> | ||||
| <!--Environment name="log4jConfiguration" value="file:///home/socleng-sfr/tomcat/conf/log4j2.xml" type="java.net.URL" /--> | ||||
| <Environment name="socle.datasource.jndi-name" value="jdbc/SOCLE_REC_POOL" type="java.lang.String" /> | ||||
| <Environment name="elasticsearch.url" type="java.net.URL" value="http://10.106.101.147:9200/"/> | ||||
| 
 | ||||
| <Resource  | ||||
|         auth="Container"  | ||||
|         driverClassName="org.postgresql.Driver"  | ||||
|         maxTotal="20"  | ||||
|         maxIdle="10"  | ||||
|         maxWaitMillis="-1"  | ||||
|         name="jdbc/SOCLE_REC_POOL"  | ||||
|         password="Pwd4socleng-sfr"  | ||||
|         type="javax.sql.DataSource"  | ||||
|         url="jdbc:postgresql://10.106.101.147:5432/socleng-sfr"  | ||||
|         username="socleng-sfr" | ||||
| defaultAutoCommit="false"/> | ||||
| 
 | ||||
| </Context> | ||||
|  | @ -0,0 +1,172 @@ | |||
| <?xml version="1.0" encoding="UTF-8"?> | ||||
| <!-- | ||||
|   Licensed to the Apache Software Foundation (ASF) under one or more | ||||
|   contributor license agreements.  See the NOTICE file distributed with | ||||
|   this work for additional information regarding copyright ownership. | ||||
|   The ASF licenses this file to You under the Apache License, Version 2.0 | ||||
|   (the "License"); you may not use this file except in compliance with | ||||
|   the License.  You may obtain a copy of the License at | ||||
| 
 | ||||
|       http://www.apache.org/licenses/LICENSE-2.0 | ||||
| 
 | ||||
|   Unless required by applicable law or agreed to in writing, software | ||||
|   distributed under the License is distributed on an "AS IS" BASIS, | ||||
|   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||||
|   See the License for the specific language governing permissions and | ||||
|   limitations under the License. | ||||
| --> | ||||
| <!-- Note:  A "Server" is not itself a "Container", so you may not | ||||
|      define subcomponents such as "Valves" at this level. | ||||
|      Documentation at /docs/config/server.html | ||||
|  --> | ||||
| <Server port="8005" shutdown="SHUTDOWN"> | ||||
|   <Listener className="org.apache.catalina.startup.VersionLoggerListener" /> | ||||
|   <!-- Security listener. Documentation at /docs/config/listeners.html | ||||
|   <Listener className="org.apache.catalina.security.SecurityListener" /> | ||||
|   --> | ||||
|   <!--APR library loader. Documentation at /docs/apr.html --> | ||||
|   <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" /> | ||||
|   <!-- Prevent memory leaks due to use of particular java/javax APIs--> | ||||
|   <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" /> | ||||
|   <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" /> | ||||
|   <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" /> | ||||
| 
 | ||||
|   <!-- Global JNDI resources | ||||
|        Documentation at /docs/jndi-resources-howto.html | ||||
|   --> | ||||
|   <GlobalNamingResources> | ||||
|     <!-- Editable user database that can also be used by | ||||
|          UserDatabaseRealm to authenticate users | ||||
|     --> | ||||
|     <Resource name="UserDatabase" auth="Container" | ||||
|               type="org.apache.catalina.UserDatabase" | ||||
|               description="User database that can be updated and saved" | ||||
|               factory="org.apache.catalina.users.MemoryUserDatabaseFactory" | ||||
|               pathname="conf/tomcat-users.xml" /> | ||||
|   </GlobalNamingResources> | ||||
| 
 | ||||
|   <!-- A "Service" is a collection of one or more "Connectors" that share | ||||
|        a single "Container" Note:  A "Service" is not itself a "Container", | ||||
|        so you may not define subcomponents such as "Valves" at this level. | ||||
|        Documentation at /docs/config/service.html | ||||
|    --> | ||||
|   <Service name="Catalina"> | ||||
| 
 | ||||
|     <!--The connectors can use a shared executor, you can define one or more named thread pools--> | ||||
|     <!-- | ||||
|     <Executor name="tomcatThreadPool" namePrefix="catalina-exec-" | ||||
|         maxThreads="150" minSpareThreads="4"/> | ||||
|     --> | ||||
| 
 | ||||
| 
 | ||||
|     <!-- A "Connector" represents an endpoint by which requests are received | ||||
|          and responses are returned. Documentation at : | ||||
|          Java HTTP Connector: /docs/config/http.html | ||||
|          Java AJP  Connector: /docs/config/ajp.html | ||||
|          APR (HTTP/AJP) Connector: /docs/apr.html | ||||
|          Define a non-SSL/TLS HTTP/1.1 Connector on port 8080 | ||||
|     --> | ||||
|     <Connector port="8080" protocol="HTTP/1.1" | ||||
|                connectionTimeout="20000" | ||||
|                maxPostSize="-1" | ||||
|                redirectPort="8443" /> | ||||
|     <!-- A "Connector" using the shared thread pool--> | ||||
|     <!-- | ||||
|     <Connector executor="tomcatThreadPool" | ||||
|                port="8080" protocol="HTTP/1.1" | ||||
|                connectionTimeout="20000" | ||||
|                redirectPort="8443" /> | ||||
|     --> | ||||
|     <!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443 | ||||
|          This connector uses the NIO implementation. The default | ||||
|          SSLImplementation will depend on the presence of the APR/native | ||||
|          library and the useOpenSSL attribute of the | ||||
|          AprLifecycleListener. | ||||
|          Either JSSE or OpenSSL style configuration may be used regardless of | ||||
|          the SSLImplementation selected. JSSE style configuration is used below. | ||||
|     --> | ||||
|     <!-- | ||||
|     <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" | ||||
|                maxThreads="150" SSLEnabled="true"> | ||||
|         <SSLHostConfig> | ||||
|             <Certificate certificateKeystoreFile="conf/localhost-rsa.jks" | ||||
|                          type="RSA" /> | ||||
|         </SSLHostConfig> | ||||
|     </Connector> | ||||
|     --> | ||||
|     <!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443 with HTTP/2 | ||||
|          This connector uses the APR/native implementation which always uses | ||||
|          OpenSSL for TLS. | ||||
|          Either JSSE or OpenSSL style configuration may be used. OpenSSL style | ||||
|          configuration is used below. | ||||
|     --> | ||||
|     <!-- | ||||
|     <Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol" | ||||
|                maxThreads="150" SSLEnabled="true" > | ||||
|         <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" /> | ||||
|         <SSLHostConfig> | ||||
|             <Certificate certificateKeyFile="conf/localhost-rsa-key.pem" | ||||
|                          certificateFile="conf/localhost-rsa-cert.pem" | ||||
|                          certificateChainFile="conf/localhost-rsa-chain.pem" | ||||
|                          type="RSA" /> | ||||
|         </SSLHostConfig> | ||||
|     </Connector> | ||||
|     --> | ||||
| 
 | ||||
|     <!-- Define an AJP 1.3 Connector on port 8009 --> | ||||
|     <!-- | ||||
|     <Connector protocol="AJP/1.3" | ||||
|                address="::1" | ||||
|                port="8009" | ||||
|                redirectPort="8443" /> | ||||
|     --> | ||||
| 
 | ||||
|     <!-- An Engine represents the entry point (within Catalina) that processes | ||||
|          every request.  The Engine implementation for Tomcat stand alone | ||||
|          analyzes the HTTP headers included with the request, and passes them | ||||
|          on to the appropriate Host (virtual host). | ||||
|          Documentation at /docs/config/engine.html --> | ||||
| 
 | ||||
|     <!-- You should set jvmRoute to support load-balancing via AJP ie : | ||||
|     <Engine name="Catalina" defaultHost="localhost" jvmRoute="jvm1"> | ||||
|     --> | ||||
|     <Engine name="Catalina" defaultHost="localhost"> | ||||
| 
 | ||||
|       <!--For clustering, please take a look at documentation at: | ||||
|           /docs/cluster-howto.html  (simple how to) | ||||
|           /docs/config/cluster.html (reference documentation) --> | ||||
|       <!-- | ||||
|       <Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/> | ||||
|       --> | ||||
| 
 | ||||
|       <!-- Use the LockOutRealm to prevent attempts to guess user passwords | ||||
|            via a brute-force attack --> | ||||
|       <Realm className="org.apache.catalina.realm.LockOutRealm"> | ||||
|         <!-- This Realm uses the UserDatabase configured in the global JNDI | ||||
|              resources under the key "UserDatabase".  Any edits | ||||
|              that are performed against this UserDatabase are immediately | ||||
|              available for use by the Realm.  --> | ||||
|         <Realm className="org.apache.catalina.realm.UserDatabaseRealm" | ||||
|                resourceName="UserDatabase"/> | ||||
|       </Realm> | ||||
| 
 | ||||
|       <Host name="localhost"  appBase="webapps" | ||||
|             unpackWARs="true" autoDeploy="true"> | ||||
| 
 | ||||
|         <!-- SingleSignOn valve, share authentication between web applications | ||||
|              Documentation at: /docs/config/valve.html --> | ||||
|         <!-- | ||||
|         <Valve className="org.apache.catalina.authenticator.SingleSignOn" /> | ||||
|         --> | ||||
| 
 | ||||
|         <!-- Access log processes all example. | ||||
|              Documentation at: /docs/config/valve.html | ||||
|              Note: The pattern used is equivalent to using pattern="common" --> | ||||
|         <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" | ||||
|                prefix="localhost_access_log" suffix=".txt" | ||||
|                pattern="%h %l %u %t "%r" %s %b" /> | ||||
| 
 | ||||
|       </Host> | ||||
|     </Engine> | ||||
|   </Service> | ||||
| </Server> | ||||
							
								
								
									
										12
									
								
								path_config
								
								
								
								
							
							
						
						
									
										12
									
								
								path_config
								
								
								
								
							|  | @ -14,7 +14,7 @@ | |||
| 
 | ||||
| ### socle_echange ### | ||||
| /etc/systemd/system/echange.service | ||||
| /home/socleng-{CLIENT_NAME_HERE}/.profile   ### A modifier | ||||
| /home/socleng-sfr/.profile   ### A modifier | ||||
| /home/socleng-aigle/echange/config/application.properties | ||||
| /home/socleng-aigle/echange/socle-module-echange.conf | ||||
| 
 | ||||
|  | @ -24,14 +24,14 @@ | |||
| 
 | ||||
| ### WEB ### | ||||
| /etc/systemd/system/socle.service | ||||
| /home/socleng-{CLIENT_NAME_HERE}/.install.properties | ||||
| /home/socleng-{CLIENT_NAME_HERE}/tomcat/conf/context.xml | ||||
| /home/socleng-{CLIENT_NAME_HERE}/tomcat/conf/server.xml | ||||
| /home/socleng-{CLIENT_NAME_HERE}/exploit_batch/clean_log.sh | ||||
| /home/socleng-sfr/.install.properties | ||||
| /home/socleng-sfr/tomcat/conf/context.xml | ||||
| /home/socleng-sfr/tomcat/conf/server.xml | ||||
| /home/socleng-sfr/exploit_batch/clean_log.sh | ||||
| 
 | ||||
| ### VM Prelytis ### | ||||
| /home/prelytis-intersport/tomcat/conf/Catalina/localhost/SOCLE_CRM_REPORTING.xml | ||||
| /home/prelytis-intersport/tomcat/conf/server.xml | ||||
| 
 | ||||
| ### APM ### | ||||
| /home/socleng-{CLIENT_NAME_HERE}/tomcat/webapps/{CLIENT_NAME_HERE}_FRONT/WEB-INF/views/main.jsp | ||||
| /home/socleng-sfr/tomcat/webapps/sfr_FRONT/WEB-INF/views/main.jsp | ||||
|  |  | |||
|  | @ -1,8 +1,8 @@ | |||
| #!/bin/bash | ||||
| 
 | ||||
| # Configuration des variables | ||||
| ORG="SysConf" | ||||
| BASE_URL="https://sysconfgit.linexos.eu" | ||||
| ORG="CONFIGS" | ||||
| BASE_URL="https://repolake.alc-crm.com" | ||||
| API_URL="$BASE_URL/api/v1" | ||||
| REPO_NAME=$(hostname) | ||||
| REPO_URL="$BASE_URL/$ORG/$REPO_NAME.git" | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue