nheron/kie-platform
nheron/kie-platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

work

Browse source
This commit is contained in:
Nicolas Héron 2018-09-11 22:46:18 +02:00
commit 078eebb4ea
5 changed files with 79 additions and 88 deletions
Download patch file Download diff file Expand all files Collapse all files

34
configuration/kie-wb/application-roles.properties
View file

@ -1,25 +1,19 @@
admin=admin,analyst,kiemgmt,admingroup,rest-all
krisv=admin,analyst
john=analyst,Accounting,PM
mary=analyst,HR
sales-rep=analyst,sales
jack=analyst,IT
katy=analyst,HR
salaboy=admin,analyst,IT,HR,Accounting
kieserver=kie-server,,rest-all
workbench=admin,kie-server
#pymma
nheron=admin,analyst,kiemgmt,admingroup,rest-all
pipo1=analyst,kiemgmt,IT
user1=group1,analyst
user11=group1,analyst
user2=group2,analyst
user22=group2,analyst
user3=group3,analyst
user33=group3,analyst
user4=group4,analyst
user44=group4,analyst
user5=group5,analyst
user55=group5,analyst
user6=group6,analyst
user66=group6,analyst
guillaume=analyst,kiemgmt,pymma,pymma
maxime=analyst,kiemgmt,pymma
donatienne=analyst,kiemgmt,pymma
#auchan
igor=analyst,auchan
florian=analyst,auchan
#oney
thomas=analyst,oney
christopheev=analyst,oney
#probtp
pascal=analyst,probtp

39
configuration/kie-wb/application-users.properties
View file

@ -1,26 +1,15 @@
jack=jack
pipo1=pipo1
john=john
katy=katy
krisv=krisv
nheron=pymma
mary=mary
salaboy=salaboy
sales-rep=sales-rep
admin=admin
admin=adminblqndine
kieserver=kieserver1!
user1=user1
user11=user11
user2=user2
user22=user22
user3=user3
user33=user33
user4=user4
user44=user44
user5=user5
user55=user55
user6=user6
user66=user66
#
#$REALM_NAME=null$ This line is used by the add-user utility to identify the realm name already used in this file.
#
#pymma
nheron=blqndine
guillaume=hochart
maxime=picault
donatienne=yovo
# auchan
igor=auchan
florian=auchan
# oney
thomas=oney
christopheev=oney
# probtp
pascal=probtp

76
configuration/nginx.kie-wb
View file

@ -1,40 +1,48 @@
server {
listen 443;
server_name kie-wb.pymma-software.com;
location / {
gzip off;
proxy_read_timeout 86400;
proxy_connect_timeout 86400;
proxy_max_temp_file_size 86400;
proxy_http_version 1.1;
proxy_pass http://192.168.1.184:8080;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect http://192.168.1.184:8080 https://kie-wb.pymma-software.com;
# Add servers for load balancing
upstream drools {
server 192.168.1.184:8080;
}
ssl_certificate /etc/letsencrypt/live/kie-wb.pymma-software.com/fullchain.pem; # managed by Certbot
# redirect all to https
server {
listen 80;
server_name kie-wb.pymma-software.com;
return 301 https://$server_name$request_uri;
}
server {
# Set log files.
error_log /var/log/nginx/kie-wb.pymma-software.com_error.log;
access_log /var/log/nginx/kie-wb.pymma-software.com_access.log;
# listen at 443 port, on any ip address.
listen 443;
# Server name
server_name kie-wb.pymma-software.com;
# disable any limits to avoid HTTP 413 for large image uploads
client_max_body_size 0;
# required to avoid HTTP 411: see Issue #1486 (https://github.com/docker/docker/issues/1486)
chunked_transfer_encoding on;
# SSL settings
ssl on;
ssl_certificate /etc/letsencrypt/live/kie-wb.pymma-software.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/kie-wb.pymma-software.com/privkey.pem; # managed by Certbot
}
https://developer.jboss.org/thread/267320
location / {
proxy_pass http://drools/;
server {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
roxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection “upgrade”;
listen 443;
server_name kie-test-client.pymma-software.com;
location / {
proxy_http_version 1.1;
proxy_pass http://192.168.1.184:10080;
proxy_read_timeout 90;
proxy_redirect http://192.168.1.184:10080 https://kie-test-client.pymma-software.com;
}
}
}
}