\# Protect webadmin
Modify 'main' permission group to protect the webadmin to the admin
Create 'apis' permission publicly accessible to make BMA and WS2P APIs
accessible to whole Internet and set --auth_header=false
\# Nginx misconfiguration
BMA is exposed on port 10901
The webadmin on port 9220
this explains why BMA was not accessible
because it was redirected to the webadmin
Was probably done to solve following problem with the CI
\# Move BMA to /bma and webadmin to root path '/'
Move the WebAdmin from '/webadmin' to '/' root path
Move BMA from '/' to '/bma/' path
In order to have passing access test on the root path with the CI
BMA returns a 502 HTTP error since no synchronization have been performed
therefore there is nothing to be displayed
Cesium and Silkaj support connection to BMA endpoint with a path in
\## TODOs in Duniter v1
There is no synchronization possible to duniter_ynh BMA api,
since Duniter doesn’t support specifying a path to 'sync' command
Can’t define a custom BMAS endpoint with /bma path in
The endpoint doesn’t stay, it seems its overwritten by the fact that when
specifying port 443, BMAS endpoint get created and overwrites this one
ynh_exec_as duniter duniter config --addep "BMAS $domain 443 /bma"
This is not as important as having a correct WS2P endpoint defined
for inter-node connection
Nice to have for BMA endpoint discovery
\# Clean Nginx config
Define once by moving WS, and SSOwat panel support to the common part
Remove /modules path, not really used anymore
Replace 127.0.0.1 by localhost
Requires YnH v4.1 which implements this new permission system
Use ynh_permission_create helper
Set Duniter admin interface accessible to the selected admin
BMA is set as accessible to visitors by default
Remove / −> /webui redirection, since this change adds a tile to the admin
Remove deprecated permission system settings
Re-enable the web admin since it is protected again
Rename f() name
- Install: add check to install only on root path, comment sed line
- Nginx conf: remove path choice sed
- Manifest: set root path as default, add explaination.
- Update upstream to 0.22.0a7 which handle proxy with https for webadmin
- Update readme: add information about webadmin on root path and how to access api.
-
