1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/armadietto_ynh.git synced 2024-09-03 18:06:18 +02:00
armadietto_ynh/doc/DISCLAIMER.md

46 lines
2.4 KiB
Markdown
Raw Normal View History

2021-12-31 13:24:11 +01:00
## Disclaimers / important information
### :warning: WARNING
Armadietto_ynh still in develoment:
* The upgrade process is not yet operational
* Single sign-on or LDAP integration not working?
* Security considerations from [Armadietto](https://github.com/remotestorage/armadietto/) :
> Storage security
>
> In production, we recommend that you restrict access to the files managed by your armadietto server as much as possible. This is particularly true if you host your storage on a machine with other web applications; you need to protect your files in the event that one of those apps is exploited.
>
> You should take these steps to keep your storage safe:
>
> Pick a unique Unix user to run your server process; no other process on the box should run as this user: sudo useradd armadietto --system --no-create-home
>
> Do not run other applications as root, or as any user that could access files owned by your armadietto user
>
> Make sure the directory path/to/storage cannot be read, written or executed by anyone but this user: sudo chmod 0700 /path/to/storage && sudo chown armadietto /path/to/storage
>
> Do not run armadietto as root; if you need to bind to port 80 or 443 use a reverse proxy like nginx, Apache2, caddy, lighttpd or enable bind capability: setcap 'cap_net_bind_service=+ep' `which armadietto`
>
> Ideally, run your storage inside a container or on a dedicated machine
### Important Notes
- RemoteStorage requires a dedicated domain, so obtain one and add it using the YunoHost admin panel. **Domains -> Add domain**.
- As RemoteStorage uses the full domain and is installed on the root, you can create a subdomain such as remote.domain.tld.
- Don't forget to update your DNS if you manage them manually.
- RemoteStorage requires browser-approved SSL certificates. If you have certificates not issued by [Let's Encrypt](https://letsencrypt.org/), install them manually as usual.
2021-12-18 14:56:34 +01:00
## TODO
2021-12-31 13:24:11 +01:00
* Any known limitations, constraints or non-functioning elements, such as (but not limited to) :
* Unsupported architectures?
* Single sign-on or LDAP integration not working?
2021-12-17 11:38:57 +01:00
* etc...
2021-12-31 13:24:11 +01:00
* Other information that people should know, such as. :
* any specific steps to be performed after installation (like manually terminating the installation, specific admin credentials, ...)
* How to configure / administer the application if it is not obvious.
* Specifics, things to know?