mirror of
https://github.com/iiab/iiab.git
synced 2025-03-09 15:40:17 +00:00
Cull nextcloud_allow_public_ips
This commit is contained in:
parent
6081df7168
commit
2d31a56ff6
3 changed files with 17 additions and 12 deletions
|
@ -68,7 +68,7 @@
|
|||
template:
|
||||
src: nextcloud.conf.j2
|
||||
dest: "/etc/{{ apache_conf_dir }}/nextcloud.conf" # apache2/sites-available on debuntu
|
||||
when: apache_installed | bool
|
||||
when: apache_install | bool
|
||||
|
||||
|
||||
# RECORD Nextcloud AS INSTALLED
|
||||
|
|
|
@ -16,17 +16,17 @@ Alias {{ nextcloud_url }} {{ nextcloud_prefix }}/nextcloud
|
|||
# 2019-09-04 commenting out towards future removal
|
||||
#Require host localhost
|
||||
|
||||
{% if nextcloud_allow_public_ips %}
|
||||
# PERMIT ACCESS FROM ALL IPv4 ADDRESSES:
|
||||
#{% if CONDITION %} {# where CONDITION was nextcloud_allow_public_ips #}
|
||||
# # PERMIT ACCESS FROM ALL IPv4 ADDRESSES:
|
||||
Require all granted
|
||||
# PERMIT ACCESS FROM THESE IPv4 ADDRESS RANGES ONLY:
|
||||
#Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} 192.168 10
|
||||
{% else %}
|
||||
# PERMIT ACCESS FROM ALL IPv4 ADDRESSES:
|
||||
#Require all granted
|
||||
# PERMIT ACCESS FROM THESE IPv4 ADDRESS RANGES ONLY:
|
||||
Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} 192.168 10
|
||||
{% endif %}
|
||||
# # PERMIT ACCESS FROM THESE IPv4 ADDRESS RANGES ONLY:
|
||||
# #Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} 192.168 10
|
||||
#{% else %}
|
||||
# # PERMIT ACCESS FROM ALL IPv4 ADDRESSES:
|
||||
# #Require all granted
|
||||
# # PERMIT ACCESS FROM THESE IPv4 ADDRESS RANGES ONLY:
|
||||
# Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} 192.168 10
|
||||
#{% endif %}
|
||||
{# Reminder that {{ lan_ip }}/{{ lan_netmask }} is 172.18.96.1/255.255.224.0 #}
|
||||
# AVOID THIS LINE AS IT OVERLY RESTRICTS SCHOOLS W/ 192.168.1.x, 10.x.y.z:
|
||||
#Require ip 127.0.0.1 {{ lan_ip }}/{{ lan_netmask }} {{ nextcloud_required_ip }} {{ openvpn_server_virtual_ip }}/255.255.255.0
|
||||
|
|
|
@ -9,9 +9,14 @@
|
|||
|
||||
- include_tasks: php-stem.yml
|
||||
|
||||
- name: Install php-fpm (FastCGI Process Manager) if nextcloud_install or pbx_install
|
||||
package:
|
||||
name: php-fpm
|
||||
when: nextcloud_install or pbx_install
|
||||
|
||||
# COMPARE apache_allow_sudo @ roles/www_front_end/tasks/main.yml
|
||||
|
||||
# For schools that use WordPress/Nextcloud/Moodle intensively. iiab/iiab#1147
|
||||
# For schools that use WordPress/Nextcloud/Moodle intensively.
|
||||
# WARNING: Enabling this might cause excess use of RAM/disk or other resources!
|
||||
- name: Enact high limits in /etc/php/{{ php_version }}/fpm/php.ini if using WordPress/Nextcloud/Moodle intensively
|
||||
lineinfile:
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue