Move Dashboard sources out from /var/www
|Assignee:||Jesús García Crespo||% Done:|
|Target version:||Release 0.7|
|Google Code Legacy ID:||archivematica-298||Pull Request:|
Dashboard sources should be moved out from the virtualhost DocumentRoot /var/www for security reasons and update apache.default accordingly.
It does not matter where this directory is placed,
/var/archivematica/dashboard looks right to me.
[g] Legacy categories: Dashboard
#3 Updated by Austin Trask over 10 years ago
I was just looking over the debian web apps policy
If a web application supports using an alternate location for customized content, it should either follow the previously mentioned guidelines for configuration and customizable content or use a subdirectory of /usr/local/share/PACKAGE. Managing the latter is outside the scope of this document.
Ill move to /var/www /usr/local/share/archivematica-dashboard
does this work sevein?
#9 Updated by Jesús García Crespo over 10 years ago
- Status changed from In progress to Verified
Austin, unfortunately I forgot that the Django app directory must be named "dashboard" instead of "archivematica-dashboard", because that is the way that the project is called at the source code, and there are many references to it.
So current path is /usr/local/share/dashboard,
but /usr/local/share/archivematica/dashboard could be also valid.
My choose was the first option, but please feel free to modify it, :).
/p/archivematica/source/detail?r=982 fixed it and also updated the Apache WSGI wrapper.