Compare commits
105 Commits
aps-aims
...
ext-jscons
Author | SHA1 | Date | |
---|---|---|---|
093e38af9c | |||
b86dd34b55 | |||
b4995e00d8 | |||
50ad4a380b | |||
23b3057329 | |||
b009fa9219 | |||
57af0a20b1 | |||
76e4287aa1 | |||
936e6ad134 | |||
1e1667c039 | |||
6e6f38e9e4 | |||
fcd1262721 | |||
d7de714eeb | |||
8e3301877a | |||
8b4e45c2e2 | |||
29f254a68e | |||
cbbf9c8c9a | |||
fa1c51c08c | |||
aeb3fe5b62 | |||
4ff7371d19 | |||
|
70f756f66e | ||
|
8b22f7cbdc | ||
|
49c3ddcdb1 | ||
|
a41c084c9f | ||
|
228e930caa | ||
|
bf09b85448 | ||
|
40c3a3c019 | ||
6bce626075 | |||
3dd7309a4e | |||
1829253edd | |||
85d3b45097 | |||
f49ea55a48 | |||
fa515e4984 | |||
3ef69c527b | |||
6261f8b7ab | |||
ebd6c503bd | |||
512c51e5ac | |||
e582744e6c | |||
4afdf95b44 | |||
2e3990c8ff | |||
31eaf8c7c2 | |||
89ffe20aee | |||
4d5a486d16 | |||
58e4543d0f | |||
14a4c09f4d | |||
5a12f3a6e0 | |||
f2ac689f85 | |||
1d5624496d | |||
3a6b5c4850 | |||
2367651a7e | |||
b8b267d4c5 | |||
c0c6dcd1ce | |||
68fcb3cbef | |||
4381a2d350 | |||
3cb24f7587 | |||
6579a5a0c9 | |||
1ead7a8d16 | |||
63aa212ccb | |||
6d396a640f | |||
8e697651c8 | |||
486ff23ce4 | |||
f2f0eecccc | |||
b6ff1bb4d2 | |||
843f9ec293 | |||
ce4ce17c92 | |||
5546bab430 | |||
bdef8c6b7f | |||
8467968c92 | |||
4b9900a7fd | |||
9720bd7fa6 | |||
32b8e047fb | |||
b9f0597020 | |||
119c6643bd | |||
18839c8019 | |||
a30f423c44 | |||
3a5d21f5e7 | |||
8a29bded24 | |||
4650110b96 | |||
7dadd3b910 | |||
8348af9dfa | |||
f54efe3082 | |||
795b032e14 | |||
cb04027103 | |||
893f9cf7a8 | |||
24114c2604 | |||
ff5442c869 | |||
4cb5100065 | |||
46bbeeef30 | |||
6b0c103d75 | |||
faee3aaa48 | |||
beb87dd97a | |||
db6a1e148c | |||
ab396f7656 | |||
b65d3d301f | |||
6332985ebd | |||
010149e6b6 | |||
c084972d39 | |||
79a1644530 | |||
5cfee3d18f | |||
72f7960369 | |||
6c665fab04 | |||
00e0a17249 | |||
bfa65c999e | |||
0f36dd1943 | |||
b81ce2e2c9 |
8
.env
8
.env
@@ -4,10 +4,8 @@ ALFRESCO_LICENSE_DIR=~/alfresco/license
|
|||||||
PROXY_PROTOCOL=http
|
PROXY_PROTOCOL=http
|
||||||
PROXY_HOST=localhost
|
PROXY_HOST=localhost
|
||||||
PROXY_PORT=8080
|
PROXY_PORT=8080
|
||||||
IDENTITY_SERVICE_PROTOCOL=http
|
|
||||||
IDENTITY_SERVICE_HOST=auth.example.org
|
|
||||||
IDENTITY_SERVICE_PORT=8080
|
|
||||||
|
|
||||||
APS_TAG=2.4.1
|
ACS_TAG=7.4.1.1
|
||||||
AIS_TAG=1.8.0.1
|
AAMQ_TAG=latest
|
||||||
POSTGRES_TAG=13
|
POSTGRES_TAG=13
|
||||||
|
ACS_SHARE_TAG=7.4.1.2
|
||||||
|
@@ -3,10 +3,3 @@
|
|||||||
|
|
||||||
This Git Repository intends to represent environments in Docker Compose. All environments are effectively a derivative of other environments. The original environment is the environment represented by the `base` branch. All derivative environments are represented by other branches. Those branches are named in the format `{core}.{parent}`.
|
This Git Repository intends to represent environments in Docker Compose. All environments are effectively a derivative of other environments. The original environment is the environment represented by the `base` branch. All derivative environments are represented by other branches. Those branches are named in the format `{core}.{parent}`.
|
||||||
|
|
||||||
## Licensing
|
|
||||||
|
|
||||||
This version of Alfresco requires licensing.
|
|
||||||
|
|
||||||
### APS
|
|
||||||
|
|
||||||
APS requires a license file for it to work. For licensing to work, you must place your license file in the following directory relative to the user home directory that runs the Docker Compose command: `alfresco/license/aps`. The filename must be `activiti.lic`. You can use symbolic linking if desired.
|
|
||||||
|
17
alfresco-content-repository/docker/Dockerfile
Normal file
17
alfresco-content-repository/docker/Dockerfile
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
ARG ACS_TAG=inject-it
|
||||||
|
FROM alfresco/alfresco-content-repository-community:${ACS_TAG}
|
||||||
|
|
||||||
|
ARG USERNAME=alfresco
|
||||||
|
ARG TOMCAT_DIR=/usr/local/tomcat
|
||||||
|
|
||||||
|
USER root
|
||||||
|
|
||||||
|
COPY catalina.policy /tmp/catalina.policy.ext
|
||||||
|
COPY tomcat-platform-context.xml ${TOMCAT_DIR}/conf/Catalina/localhost/alfresco.xml
|
||||||
|
COPY *.amp ${TOMCAT_DIR}/amps/
|
||||||
|
|
||||||
|
RUN java -jar ${TOMCAT_DIR}/alfresco-mmt/alfresco-mmt*.jar install ${TOMCAT_DIR}/amps ${TOMCAT_DIR}/webapps/alfresco -nobackup -directory && \
|
||||||
|
mkdir -p ${TOMCAT_DIR}/modules/platform && \
|
||||||
|
cat /tmp/catalina.policy.ext >> ${TOMCAT_DIR}/conf/catalina.policy
|
||||||
|
|
||||||
|
USER ${USERNAME}
|
3
alfresco-content-repository/docker/README.md
Normal file
3
alfresco-content-repository/docker/README.md
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
## Usage
|
||||||
|
|
||||||
|
Download all AMP files needed into this directory. All of them will be copied into a new Docker image and installed into the Alfresco Platform web application.
|
4
alfresco-content-repository/docker/catalina.policy
Normal file
4
alfresco-content-repository/docker/catalina.policy
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
grant codeBase "file:${catalina.base}/modules/-" {
|
||||||
|
permission java.security.AllPermission;
|
||||||
|
};
|
||||||
|
|
@@ -0,0 +1,6 @@
|
|||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<Context>
|
||||||
|
<Resources>
|
||||||
|
<PreResources base="${catalina.base}/modules/platform" className="org.apache.catalina.webresources.DirResourceSet" webAppMount="/WEB-INF/lib" readOnly="true" />
|
||||||
|
</Resources>
|
||||||
|
</Context>
|
3
alfresco-content-repository/modules/README.md
Normal file
3
alfresco-content-repository/modules/README.md
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
## Usage
|
||||||
|
|
||||||
|
Download all JAR module files needed into this directory. All of them will be dynamically loaded into the Docker container and loaded into the Alfresco Platform web application.
|
11
alfresco-share/docker/Dockerfile
Normal file
11
alfresco-share/docker/Dockerfile
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
ARG ACS_SHARE_TAG=inject-it
|
||||||
|
FROM alfresco/alfresco-share:${ACS_SHARE_TAG}
|
||||||
|
|
||||||
|
ARG TOMCAT_DIR=/usr/local/tomcat
|
||||||
|
|
||||||
|
COPY tomcat-share-context.xml ${TOMCAT_DIR}/conf/Catalina/localhost/share.xml
|
||||||
|
COPY *.amp ${TOMCAT_DIR}/amps_share/
|
||||||
|
|
||||||
|
RUN java -jar ${TOMCAT_DIR}/alfresco-mmt/alfresco-mmt*.jar install ${TOMCAT_DIR}/amps_share ${TOMCAT_DIR}/webapps/share -nobackup -directory && \
|
||||||
|
mkdir -p ${TOMCAT_DIR}/modules/share
|
||||||
|
|
3
alfresco-share/docker/README.md
Normal file
3
alfresco-share/docker/README.md
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
## Usage
|
||||||
|
|
||||||
|
Download all AMP files needed into this directory. All of them will be copied into a new Docker image and installed into the Alfresco Share web application.
|
6
alfresco-share/docker/tomcat-share-context.xml
Normal file
6
alfresco-share/docker/tomcat-share-context.xml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<Context>
|
||||||
|
<Resources>
|
||||||
|
<PreResources base="${catalina.base}/modules/share" className="org.apache.catalina.webresources.DirResourceSet" webAppMount="/WEB-INF/lib" readOnly="true" />
|
||||||
|
</Resources>
|
||||||
|
</Context>
|
3
alfresco-share/modules/README.md
Normal file
3
alfresco-share/modules/README.md
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
## Usage
|
||||||
|
|
||||||
|
Download all JAR module files needed into this directory. All of them will be dynamically loaded into the Docker container and loaded into the Alfresco Share web application.
|
@@ -4,82 +4,71 @@ version: "3"
|
|||||||
|
|
||||||
services:
|
services:
|
||||||
|
|
||||||
activiti-app:
|
platform:
|
||||||
image: quay.io/alfresco/alfresco-process-services:${APS_TAG}
|
build:
|
||||||
|
context: ./alfresco-content-repository/docker
|
||||||
|
args:
|
||||||
|
ACS_TAG: ${ACS_TAG}
|
||||||
|
image: local/alfresco-content-repository:latest
|
||||||
environment:
|
environment:
|
||||||
ACTIVITI_DATASOURCE_USERNAME: alfresco
|
JAVA_TOOL_OPTIONS: "
|
||||||
ACTIVITI_DATASOURCE_PASSWORD: alfresco
|
-Dencryption.keystore.type=JCEKS
|
||||||
ACTIVITI_DATASOURCE_DRIVER: org.postgresql.Driver
|
-Dencryption.cipherAlgorithm=DESede/CBC/PKCS5Padding
|
||||||
ACTIVITI_HIBERNATE_DIALECT: org.hibernate.dialect.PostgreSQLDialect
|
-Dencryption.keyAlgorithm=DESede
|
||||||
ACTIVITI_DATASOURCE_URL: 'jdbc:postgresql://postgres-aps:5432/activiti?characterEncoding=UTF-8'
|
-Dencryption.keystore.location=/usr/local/tomcat/shared/classes/alfresco/extension/keystore/keystore
|
||||||
IDENTITY_SERVICE_ENABLED: "true"
|
-Dmetadata-keystore.password=mp6yc0UD9e
|
||||||
IDENTITY_SERVICE_AUTH: http://identity:8080/auth
|
-Dmetadata-keystore.aliases=metadata
|
||||||
IDENTITY_SERVICE_CONTENT_SSO_REDIRECT_URI: ${PROXY_PROTOCOL}://${PROXY_HOST}:${PROXY_PORT}/activiti-app/app/rest/integration/sso/confirm-auth-request
|
-Dmetadata-keystore.metadata.password=oKIWzVdEdA
|
||||||
JAVA_OPTS: "-Xms128m -Xmx256m"
|
-Dmetadata-keystore.metadata.algorithm=DESede"
|
||||||
|
JAVA_OPTS: "
|
||||||
|
-Ddb.driver=org.postgresql.Driver
|
||||||
|
-Ddb.url=jdbc:postgresql://postgres-acs:5432/alfresco
|
||||||
|
-Dshare.host=${PROXY_HOST}
|
||||||
|
-Dshare.port=${PROXY_PORT}
|
||||||
|
-Dshare.protocol=${PROXY_PROTOCOL}
|
||||||
|
-Dalfresco.host=${PROXY_HOST}
|
||||||
|
-Dalfresco.port=${PROXY_PORT}
|
||||||
|
-Dalfresco.protocol=${PROXY_PROTOCOL}
|
||||||
|
-Dmessaging.broker.url=\"failover:(nio://activemq:61616)?timeout=3000&jms.useCompression=true\"
|
||||||
|
"
|
||||||
depends_on:
|
depends_on:
|
||||||
- postgres-aps
|
- postgres-acs
|
||||||
|
- activemq
|
||||||
volumes:
|
volumes:
|
||||||
- "$ALFRESCO_LICENSE_DIR/aps:/home/alfresco/.activiti/enterprise-license:ro"
|
- "./alfresco-content-repository/modules:/usr/local/tomcat/modules/platform:ro"
|
||||||
|
|
||||||
activiti-admin:
|
share:
|
||||||
image: quay.io/alfresco/alfresco-process-services-admin:${APS_TAG}
|
build:
|
||||||
|
context: ./alfresco-share/docker
|
||||||
|
args:
|
||||||
|
ACS_SHARE_TAG: ${ACS_SHARE_TAG}
|
||||||
|
image: local/alfresco-share:latest
|
||||||
environment:
|
environment:
|
||||||
ACTIVITI_ADMIN_DATASOURCE_USERNAME: alfresco
|
REPO_HOST: "platform"
|
||||||
ACTIVITI_ADMIN_DATASOURCE_PASSWORD: alfresco
|
CSRF_FILTER_REFERER: "${PROXY_PROTOCOL}://${PROXY_HOST}(:${PROXY_PORT})?/?.*"
|
||||||
ACTIVITI_ADMIN_DATASOURCE_DRIVER: org.postgresql.Driver
|
CSRF_FILTER_ORIGIN: "${PROXY_PROTOCOL}://${PROXY_HOST}(:${PROXY_PORT})?"
|
||||||
ACTIVITI_ADMIN_HIBERNATE_DIALECT: org.hibernate.dialect.PostgreSQLDialect
|
JAVA_OPTS: "
|
||||||
ACTIVITI_ADMIN_DATASOURCE_URL: 'jdbc:postgresql://postgres-aps-admin:5432/activiti-admin?characterEncoding=UTF-8'
|
-Dshare.host=${PROXY_HOST}
|
||||||
ACTIVITI_ADMIN_REST_APP_HOST: http://activiti-app
|
-Dshare.port=${PROXY_PORT}
|
||||||
ACTIVITI_ADMIN_REST_APP_PORT: 8080
|
-Dshare.protocol=${PROXY_PROTOCOL}
|
||||||
JAVA_OPTS: "-Xms64m -Xmx128m"
|
-Dalfresco.host=${PROXY_HOST}
|
||||||
depends_on:
|
-Dalfresco.port=${PROXY_PORT}
|
||||||
- postgres-aps-admin
|
-Dalfresco.protocol=${PROXY_PROTOCOL}
|
||||||
- activiti-app
|
"
|
||||||
|
|
||||||
postgres-aps:
|
|
||||||
image: postgres:${POSTGRES_TAG}
|
|
||||||
environment:
|
|
||||||
POSTGRES_DB: activiti
|
|
||||||
POSTGRES_USER: alfresco
|
|
||||||
POSTGRES_PASSWORD: alfresco
|
|
||||||
command: postgres -c max_connections=300 -c log_min_messages=LOG
|
|
||||||
|
|
||||||
postgres-aps-admin:
|
|
||||||
image: postgres:${POSTGRES_TAG}
|
|
||||||
environment:
|
|
||||||
POSTGRES_DB: activiti-admin
|
|
||||||
POSTGRES_USER: alfresco
|
|
||||||
POSTGRES_PASSWORD: alfresco
|
|
||||||
command: postgres -c max_connections=50 -c log_min_messages=LOG
|
|
||||||
|
|
||||||
identity:
|
|
||||||
image: alfresco/alfresco-identity-service:${AIS_TAG}
|
|
||||||
user: jboss
|
|
||||||
environment:
|
|
||||||
KEYCLOAK_USER: admin
|
|
||||||
KEYCLOAK_PASSWORD: admin
|
|
||||||
KEYCLOAK_FRONTEND_URL: ${IDENTITY_SERVICE_PROTOCOL}://${IDENTITY_SERVICE_HOST}:${IDENTITY_SERVICE_PORT}/auth
|
|
||||||
KEYCLOAK_IMPORT: /tmp/keycloak-alfresco-realm.json
|
|
||||||
KEYCLOAK_STATISTICS: enabled
|
|
||||||
networks:
|
|
||||||
default:
|
|
||||||
aliases:
|
|
||||||
- "${IDENTITY_SERVICE_HOST}"
|
|
||||||
healthcheck:
|
|
||||||
test: ["CMD", "curl", "-f", "http://localhost:8080/auth/realms/alfresco"]
|
|
||||||
interval: 10s
|
|
||||||
timeout: 10s
|
|
||||||
# Really long startup times on Windows
|
|
||||||
retries: 18
|
|
||||||
volumes:
|
volumes:
|
||||||
- ./keycloak-alfresco-realm.json:/tmp/keycloak-alfresco-realm.json:ro
|
- "./alfresco-share/modules:/usr/local/tomcat/modules/share:ro"
|
||||||
|
|
||||||
|
postgres-acs:
|
||||||
|
image: postgres:${POSTGRES_TAG}
|
||||||
|
|
||||||
|
activemq:
|
||||||
|
image: alfresco/alfresco-activemq:${AAMQ_TAG}
|
||||||
|
|
||||||
proxy:
|
proxy:
|
||||||
build: ./nginx-ingress
|
build: ./nginx-ingress
|
||||||
image: local/nginx-ingress:aps-aims
|
image: local/nginx-ingress:acs-share
|
||||||
ports:
|
ports:
|
||||||
- 8080:8080
|
- 8080:8080
|
||||||
depends_on:
|
depends_on:
|
||||||
- activiti-app
|
- platform
|
||||||
- activiti-admin
|
- share
|
||||||
- identity
|
|
||||||
|
16
download-jsconsole.ps1
Normal file
16
download-jsconsole.ps1
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
# Usage: .\download-jsconsole.ps1
|
||||||
|
$THISDIR=$PSScriptRoot
|
||||||
|
|
||||||
|
$GITHUB_TAG="v0.6.0-rc1"
|
||||||
|
$MAVEN_VERSION="0.6.0"
|
||||||
|
$BASEURL="https://github.com/share-extras/js-console/releases/download"
|
||||||
|
|
||||||
|
$FILENAME="javascript-console-repo-${MAVEN_VERSION}.amp"
|
||||||
|
$URL="${BASEURL}/${GITHUB_TAG}/${FILENAME}"
|
||||||
|
$PATH="${THISDIR}/alfresco-content-repository/docker/${FILENAME}"
|
||||||
|
Invoke-Expression "& '${THISDIR}\scripts\download-url.ps1' '${URL}' '${PATH}'"
|
||||||
|
|
||||||
|
$FILENAME="javascript-console-share-${MAVEN_VERSION}.amp"
|
||||||
|
$URL="${BASEURL}/${GITHUB_TAG}/${FILENAME}"
|
||||||
|
$PATH="${THISDIR}/alfresco-share/docker/${FILENAME}"
|
||||||
|
Invoke-Expression "& '${THISDIR}\scripts\download-url.ps1' '${URL}' '${PATH}'"
|
17
download-jsconsole.sh
Normal file
17
download-jsconsole.sh
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download-jsconsole.sh
|
||||||
|
THISDIR=`dirname "$(readlink -f "$0")"`
|
||||||
|
|
||||||
|
GITHUB_TAG=v0.6.0-rc1
|
||||||
|
MAVEN_VERSION=0.6.0
|
||||||
|
BASEURL=https://github.com/share-extras/js-console/releases/download
|
||||||
|
|
||||||
|
FILENAME=javascript-console-repo-${MAVEN_VERSION}.amp
|
||||||
|
URL=${BASEURL}/${GITHUB_TAG}/${FILENAME}
|
||||||
|
PATH=${THISDIR}/alfresco-content-repository/docker/${FILENAME}
|
||||||
|
${THISDIR}/scripts/download-url.sh "${URL}" "${PATH}"
|
||||||
|
|
||||||
|
FILENAME=javascript-console-share-${MAVEN_VERSION}.amp
|
||||||
|
URL=${BASEURL}/${GITHUB_TAG}/${FILENAME}
|
||||||
|
PATH=${THISDIR}/alfresco-share/docker/${FILENAME}
|
||||||
|
${THISDIR}/scripts/download-url.sh "${URL}" "${PATH}"
|
@@ -1,47 +0,0 @@
|
|||||||
{
|
|
||||||
"realm": "alfresco",
|
|
||||||
"enabled": true,
|
|
||||||
"sslRequired": "external",
|
|
||||||
"registrationAllowed": false,
|
|
||||||
"roles": {
|
|
||||||
"realm": [ {
|
|
||||||
"name": "user",
|
|
||||||
"description": "User privileges"
|
|
||||||
}, {
|
|
||||||
"name": "admin",
|
|
||||||
"description": "Administrator privileges"
|
|
||||||
} ]
|
|
||||||
},
|
|
||||||
"clients": [
|
|
||||||
{
|
|
||||||
"clientId": "alfresco",
|
|
||||||
"name": "Alfresco Products",
|
|
||||||
"enabled": true,
|
|
||||||
"alwaysDisplayInConsole": false,
|
|
||||||
"redirectUris": [ "*" ],
|
|
||||||
"standardFlowEnabled": true,
|
|
||||||
"implicitFlowEnabled": true,
|
|
||||||
"directAccessGrantsEnabled": false,
|
|
||||||
"publicClient": true,
|
|
||||||
"protocol": "openid-connect",
|
|
||||||
"attributes": {
|
|
||||||
"login_theme": "alfresco"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"requiredCredentials": [ "password" ],
|
|
||||||
"users": [
|
|
||||||
{
|
|
||||||
"username": "admin",
|
|
||||||
"email": "admin@app.activiti.com",
|
|
||||||
"enabled": true,
|
|
||||||
"credentials" : [
|
|
||||||
{
|
|
||||||
"type" : "password",
|
|
||||||
"value" : "admin"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"realmRoles": [ "user", "admin" ]
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
@@ -1,15 +1,11 @@
|
|||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
|
|
||||||
if [[ $APS_APP_URL ]]; then
|
if [[ $ACS_PLATFORM_URL ]]; then
|
||||||
sed -i s%http:\/\/activiti-app:8080%"$APS_APP_URL"%g /etc/nginx/nginx.conf
|
sed -i s%http:\/\/platform:8080%"$ACS_PLATFORM_URL"%g /etc/nginx/nginx.conf
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [[ $APS_ADMIN_URL ]]; then
|
if [[ $ACS_SHARE_URL ]]; then
|
||||||
sed -i s%http:\/\/activiti-admin:8080%"$APS_ADMIN_URL"%g /etc/nginx/nginx.conf
|
sed -i s%http:\/\/share:8080%"$ACS_SHARE_URL"%g /etc/nginx/nginx.conf
|
||||||
fi
|
|
||||||
|
|
||||||
if [[ $AIMS_URL ]]; then
|
|
||||||
sed -i s%http:\/\/identity:8080%"$AIMS_URL"%g /etc/nginx/nginx.conf
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [[ $ACCESS_LOG ]]; then
|
if [[ $ACCESS_LOG ]]; then
|
||||||
|
@@ -19,10 +19,7 @@ http {
|
|||||||
|
|
||||||
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
|
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
|
||||||
proxy_redirect off;
|
proxy_redirect off;
|
||||||
# proxy_buffering off;
|
proxy_buffering off;
|
||||||
proxy_buffer_size 64k;
|
|
||||||
proxy_buffers 4 256k;
|
|
||||||
proxy_busy_buffers_size 256k;
|
|
||||||
proxy_set_header Host $http_host;
|
proxy_set_header Host $http_host;
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
@@ -42,25 +39,18 @@ http {
|
|||||||
location ~ ^(/.*/s/prometheus)$ {return 403;}
|
location ~ ^(/.*/s/prometheus)$ {return 403;}
|
||||||
|
|
||||||
location / {
|
location / {
|
||||||
return 301 $scheme://$http_host/activiti-app;
|
proxy_pass http://platform:8080;
|
||||||
}
|
}
|
||||||
|
|
||||||
location /activiti-app/ {
|
location /alfresco/ {
|
||||||
proxy_pass http://activiti-app:8080;
|
proxy_pass http://platform:8080;
|
||||||
|
|
||||||
# If using external proxy / load balancer (for initial redirect if no trailing slash)
|
# If using external proxy / load balancer (for initial redirect if no trailing slash)
|
||||||
absolute_redirect off;
|
absolute_redirect off;
|
||||||
}
|
}
|
||||||
|
|
||||||
location /activiti-admin/ {
|
location /share/ {
|
||||||
proxy_pass http://activiti-admin:8080;
|
proxy_pass http://share:8080;
|
||||||
|
|
||||||
# If using external proxy / load balancer (for initial redirect if no trailing slash)
|
|
||||||
absolute_redirect off;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /auth/ {
|
|
||||||
proxy_pass http://identity:8080;
|
|
||||||
|
|
||||||
# If using external proxy / load balancer (for initial redirect if no trailing slash)
|
# If using external proxy / load balancer (for initial redirect if no trailing slash)
|
||||||
absolute_redirect off;
|
absolute_redirect off;
|
||||||
|
8
scripts/download-maven-alfresco-private.bat
Normal file
8
scripts/download-maven-alfresco-private.bat
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
REM Usage: .\download-maven-alfresco-private.bat org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
@echo off
|
||||||
|
set THISDIR_REL=%~dp0
|
||||||
|
set THISDIR=%THISDIR_REL:~0,-1%
|
||||||
|
|
||||||
|
set MAVEN_BASEURL=https://artifacts.alfresco.com/nexus/content/groups/private
|
||||||
|
|
||||||
|
call "%THISDIR%\download-maven.bat" %MAVEN_BASEURL% %*
|
6
scripts/download-maven-alfresco-private.ps1
Normal file
6
scripts/download-maven-alfresco-private.ps1
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
# Usage: .\download-maven-alfresco-private.ps1 org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
$THISDIR=$PSScriptRoot
|
||||||
|
|
||||||
|
$MAVEN_BASEURL="https://artifacts.alfresco.com/nexus/content/groups/private"
|
||||||
|
|
||||||
|
Invoke-Expression "& '${THISDIR}\download-maven.ps1' '${MAVEN_BASEURL}' $args"
|
7
scripts/download-maven-alfresco-private.sh
Executable file
7
scripts/download-maven-alfresco-private.sh
Executable file
@@ -0,0 +1,7 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download-maven-alfresco-private.sh org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
THISDIR=`dirname "$(readlink -f "$0")"`
|
||||||
|
|
||||||
|
MAVEN_BASEDIR="https://artifacts.alfresco.com/nexus/content/groups/private"
|
||||||
|
|
||||||
|
${THISDIR}/download-maven.sh "${MAVEN_BASEDIR}" $*
|
8
scripts/download-maven-alfresco-public.bat
Normal file
8
scripts/download-maven-alfresco-public.bat
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
REM Usage: .\download-maven-alfresco-public.bat org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
@echo off
|
||||||
|
set THISDIR_REL=%~dp0
|
||||||
|
set THISDIR=%THISDIR_REL:~0,-1%
|
||||||
|
|
||||||
|
set MAVEN_BASEURL=https://artifacts.alfresco.com/nexus/content/groups/public
|
||||||
|
|
||||||
|
call "%THISDIR%\download-maven.bat" %MAVEN_BASEURL% %*
|
6
scripts/download-maven-alfresco-public.ps1
Normal file
6
scripts/download-maven-alfresco-public.ps1
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
# Usage: .\download-maven-alfresco-public.ps1 org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
$THISDIR=$PSScriptRoot
|
||||||
|
|
||||||
|
$MAVEN_BASEURL="https://artifacts.alfresco.com/nexus/content/groups/public"
|
||||||
|
|
||||||
|
Invoke-Expression "& '${THISDIR}\download-maven.ps1' '${MAVEN_BASEURL}' $args"
|
7
scripts/download-maven-alfresco-public.sh
Executable file
7
scripts/download-maven-alfresco-public.sh
Executable file
@@ -0,0 +1,7 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download-maven-alfresco-public.sh org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
THISDIR=`dirname "$(readlink -f "$0")"`
|
||||||
|
|
||||||
|
MAVEN_BASEDIR="https://artifacts.alfresco.com/nexus/content/groups/public"
|
||||||
|
|
||||||
|
${THISDIR}/download-maven.sh "${MAVEN_BASEDIR}" $*
|
7
scripts/download-maven-inteligr8-private.sh
Executable file
7
scripts/download-maven-inteligr8-private.sh
Executable file
@@ -0,0 +1,7 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download-maven-inteligr8-private.sh org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
THISDIR=`dirname "$(readlink -f "$0")"`
|
||||||
|
|
||||||
|
MAVEN_BASEURL="http://repos.yateslong.us/nexus/repository/inteligr8"
|
||||||
|
|
||||||
|
${THISDIR}/download-maven.sh "${MAVEN_BASEURL}" $*
|
7
scripts/download-maven-inteligr8-public.sh
Executable file
7
scripts/download-maven-inteligr8-public.sh
Executable file
@@ -0,0 +1,7 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download-maven-inteligr8-public.sh org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
THISDIR=`dirname "$(readlink -f "$0")"`
|
||||||
|
|
||||||
|
MAVEN_BASEURL="http://repos.yateslong.us/nexus/repositories/inteligr8-public"
|
||||||
|
|
||||||
|
${THISDIR}/download-maven.sh "${MAVEN_BASEURL}" $*
|
18
scripts/download-maven.bat
Normal file
18
scripts/download-maven.bat
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
REM Usage: .\download-maven.bat https://repo1.maven.org/maven2 org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
REM Usage: .\download-maven.bat https://repo1.maven.org/maven2 org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
@echo off
|
||||||
|
set THISDIR_REL=%~dp0
|
||||||
|
set THISDIR=%THISDIR_REL:~0,-1%
|
||||||
|
|
||||||
|
set MAVEN_BASEURL=%1
|
||||||
|
set MAVEN_GROUP_PATH=%2
|
||||||
|
set MAVEN_ARTIFACT_ID=%3
|
||||||
|
set MAVEN_ARTIFACT_VERSION=%4
|
||||||
|
set MAVEN_PACKAGING=%5
|
||||||
|
set HTTP_USERNAME=%6
|
||||||
|
set HTTP_PASSWORD=%7
|
||||||
|
|
||||||
|
set MAVEN_ARTIFACT_FILENAME=%MAVEN_ARTIFACT_ID%-%MAVEN_ARTIFACT_VERSION%.%MAVEN_PACKAGING%
|
||||||
|
set MAVEN_URL=%MAVEN_BASEURL%/%MAVEN_GROUP_PATH%/%MAVEN_ARTIFACT_ID%/%MAVEN_ARTIFACT_VERSION%/%MAVEN_ARTIFACT_FILENAME%
|
||||||
|
|
||||||
|
call "%THISDIR%\download-url.bat" %MAVEN_URL% %MAVEN_ARTIFACT_FILENAME% %HTTP_USERNAME% %HTTP_PASSWORD%
|
16
scripts/download-maven.ps1
Normal file
16
scripts/download-maven.ps1
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
# Usage: .\download-maven.ps1 https://repo1.maven.org/maven2 org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
# Usage: .\download-maven.ps1 https://repo1.maven.org/maven2 org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
$THISDIR=$PSScriptRoot
|
||||||
|
|
||||||
|
$MAVEN_BASEURL=$args[0]
|
||||||
|
$MAVEN_GROUP_PATH=$args[1]
|
||||||
|
$MAVEN_ARTIFACT_ID=$args[2]
|
||||||
|
$MAVEN_ARTIFACT_VERSION=$args[3]
|
||||||
|
$MAVEN_PACKAGING=$args[4]
|
||||||
|
$HTTP_USERNAME=$args[5]
|
||||||
|
$HTTP_PASSWORD=$args[6]
|
||||||
|
|
||||||
|
$MAVEN_ARTIFACT_FILENAME="${MAVEN_ARTIFACT_ID}-${MAVEN_ARTIFACT_VERSION}.${MAVEN_PACKAGING}"
|
||||||
|
$MAVEN_URL="${MAVEN_BASEURL}/${MAVEN_GROUP_PATH}/${MAVEN_ARTIFACT_ID}/${MAVEN_ARTIFACT_VERSION}/${MAVEN_ARTIFACT_FILENAME}"
|
||||||
|
|
||||||
|
Invoke-Expression "& '${THISDIR}\download-url.ps1' '${MAVEN_URL}' '${MAVEN_ARTIFACT_FILENAME}' '${HTTP_USERNAME}' '${HTTP_PASSWORD}'"
|
18
scripts/download-maven.sh
Executable file
18
scripts/download-maven.sh
Executable file
@@ -0,0 +1,18 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download-maven.sh https://repo1.maven.org/maven2 org/maven/group/path maven-artifact-id 1.2.3 jar
|
||||||
|
# Usage: ./download-maven.sh https://repo1.maven.org/maven2 org/maven/group/path maven-artifact-id 1.2.3 jar a_username a_password
|
||||||
|
THISDIR=`dirname "$(readlink -f "$0")"`
|
||||||
|
|
||||||
|
MAVEN_BASEURL=$1
|
||||||
|
MAVEN_GROUP_PATH=$2
|
||||||
|
MAVEN_ARTIFACT_ID=$3
|
||||||
|
MAVEN_ARTIFACT_VERSION=$4
|
||||||
|
MAVEN_PACKAGING=$5
|
||||||
|
HTTP_USERNAME=$6
|
||||||
|
HTTP_PASSWORD=$7
|
||||||
|
|
||||||
|
MAVEN_ARTIFACT_FILENAME=${MAVEN_ARTIFACT_ID}-${MAVEN_ARTIFACT_VERSION}.${MAVEN_PACKAGING}
|
||||||
|
MAVEN_URL=${MAVEN_BASEURL}/${MAVEN_GROUP_PATH}/${MAVEN_ARTIFACT_ID}/${MAVEN_ARTIFACT_VERSION}/${MAVEN_ARTIFACT_FILENAME}
|
||||||
|
echo $MAVEN_URL
|
||||||
|
|
||||||
|
${THISDIR}/download-url.sh "${MAVEN_URL}" "${MAVEN_ARTIFACT_FILENAME}" "${HTTP_USERNAME}" "${HTTP_PASSWORD}"
|
13
scripts/download-url.bat
Normal file
13
scripts/download-url.bat
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
REM Usage: .\download.bat https://www.a.url/to/download filename_for_downloaded.file
|
||||||
|
REM Usage: .\download.bat https://www.a.url/to/download filename_for_downloaded.file a_username a_password
|
||||||
|
@echo off
|
||||||
|
set URL=%1
|
||||||
|
set FILENAME=%2
|
||||||
|
|
||||||
|
if NOT "%~3" == "" (
|
||||||
|
set USERNAME=%3
|
||||||
|
set PASSWORD=%4
|
||||||
|
curl -L -o %FILENAME% -u %USERNAME%:%PASSWORD% %URL%
|
||||||
|
) else (
|
||||||
|
curl -L -o %FILENAME% %URL%
|
||||||
|
)
|
16
scripts/download-url.ps1
Normal file
16
scripts/download-url.ps1
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
# Usage: .\download.ps1 https://www.a.url/to/download filename_for_downloaded.file
|
||||||
|
# Usage: .\download.ps1 https://www.a.url/to/download filename_for_downloaded.file a_username a_password
|
||||||
|
$URL=$args[0]
|
||||||
|
$FILENAME=$args[1]
|
||||||
|
|
||||||
|
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
|
||||||
|
if ($args.count -gt 2) {
|
||||||
|
$USERNAME=$args[2]
|
||||||
|
$PASSWORD=$args[3]
|
||||||
|
|
||||||
|
$AUTH_PAIR=[System.Convert]::ToBase64String([System.Text.Encoding]::ASCII.GetBytes("$($USERNAME):$($PASSWORD)"))
|
||||||
|
$AUTH_HEADERS=@{Authorization="Basic $AUTH_PAIR"}
|
||||||
|
Invoke-WebRequest -Uri "${URL}" -OutFile "${FILENAME}" -Headers ${AUTH_HEADERS}
|
||||||
|
} else {
|
||||||
|
Invoke-WebRequest -Uri "${URL}" -OutFile "${FILENAME}"
|
||||||
|
}
|
13
scripts/download-url.sh
Executable file
13
scripts/download-url.sh
Executable file
@@ -0,0 +1,13 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./download.sh https://www.a.url/to/download filename_for_downloaded.file
|
||||||
|
# Usage: ./download.sh https://www.a.url/to/download filename_for_downloaded.file a_username a_password
|
||||||
|
URL=$1
|
||||||
|
FILENAME=$2
|
||||||
|
|
||||||
|
if [ "$#" -gt 2 ]; then
|
||||||
|
USERNAME=$3
|
||||||
|
PASSWORD=$4
|
||||||
|
curl -L -o "${FILENAME}" -u "${USERNAME}:${PASSWORD}" ${URL}
|
||||||
|
else
|
||||||
|
curl -L -o "${FILENAME}" ${URL}
|
||||||
|
fi
|
11
scripts/unpack.bat
Normal file
11
scripts/unpack.bat
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
REM Usage: .\unpack.bat filename.zip
|
||||||
|
REM Usage: .\unpack.bat filename.zip c:\
|
||||||
|
@echo off
|
||||||
|
set FILENAME=%1
|
||||||
|
|
||||||
|
if NOT "%~2" == "" (
|
||||||
|
set DESTPATH=%2
|
||||||
|
powershell -command "Expand-Archive -Force -Path '%FILENAME%' -DestinationPath '%DESTPATH%'"
|
||||||
|
) else (
|
||||||
|
powershell -command "Expand-Archive -Force -Path '%FILENAME%' -DestinationPath '%~dp0'"
|
||||||
|
)
|
10
scripts/unpack.ps1
Normal file
10
scripts/unpack.ps1
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
# Usage: .\unpack.ps1 filename.zip
|
||||||
|
# Usage: .\unpack.ps1 filename.zip c:\
|
||||||
|
$FILENAME=$args[0]
|
||||||
|
|
||||||
|
if ($args.count -gt 1) {
|
||||||
|
$DESTPATH=$args[1]
|
||||||
|
Expand-Archive -Force -Path "${FILENAME}" -DestinationPath "${DESTPATH}"
|
||||||
|
} else {
|
||||||
|
Expand-Archive -Force -Path "${FILENAME}"
|
||||||
|
}
|
11
scripts/unpack.sh
Executable file
11
scripts/unpack.sh
Executable file
@@ -0,0 +1,11 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
# Usage: ./unpack.sh filename.zip
|
||||||
|
# Usage: ./unpack.sh filename.zip /home/user
|
||||||
|
FILENAME=$1
|
||||||
|
|
||||||
|
if [ "$#" -gt 1 ]; then
|
||||||
|
DESTPATH=$2
|
||||||
|
unzip -d ${DESTPATH} ${FILENAME}
|
||||||
|
else
|
||||||
|
unzip ${FILENAME}
|
||||||
|
fi
|
175
server.xml
175
server.xml
@@ -1,175 +0,0 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<!--
|
|
||||||
Licensed to the Apache Software Foundation (ASF) under one or more
|
|
||||||
contributor license agreements. See the NOTICE file distributed with
|
|
||||||
this work for additional information regarding copyright ownership.
|
|
||||||
The ASF licenses this file to You under the Apache License, Version 2.0
|
|
||||||
(the "License"); you may not use this file except in compliance with
|
|
||||||
the License. You may obtain a copy of the License at
|
|
||||||
|
|
||||||
http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
|
|
||||||
Unless required by applicable law or agreed to in writing, software
|
|
||||||
distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
See the License for the specific language governing permissions and
|
|
||||||
limitations under the License.
|
|
||||||
-->
|
|
||||||
<!-- Note: A "Server" is not itself a "Container", so you may not
|
|
||||||
define subcomponents such as "Valves" at this level.
|
|
||||||
Documentation at /docs/config/server.html
|
|
||||||
-->
|
|
||||||
<Server port="8005" shutdown="SHUTDOWN">
|
|
||||||
<Listener className="org.apache.catalina.startup.VersionLoggerListener" logArgs="false" />
|
|
||||||
<!-- Security listener. Documentation at /docs/config/listeners.html
|
|
||||||
<Listener className="org.apache.catalina.security.SecurityListener" />
|
|
||||||
-->
|
|
||||||
<!-- APR library loader. Documentation at /docs/apr.html -->
|
|
||||||
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
|
|
||||||
<!-- Prevent memory leaks due to use of particular java/javax APIs-->
|
|
||||||
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
|
|
||||||
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
|
|
||||||
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
|
|
||||||
|
|
||||||
<!-- Global JNDI resources
|
|
||||||
Documentation at /docs/jndi-resources-howto.html
|
|
||||||
-->
|
|
||||||
<GlobalNamingResources>
|
|
||||||
<!-- Editable user database that can also be used by
|
|
||||||
UserDatabaseRealm to authenticate users
|
|
||||||
-->
|
|
||||||
<Resource name="UserDatabase" auth="Container"
|
|
||||||
type="org.apache.catalina.UserDatabase"
|
|
||||||
description="User database that can be updated and saved"
|
|
||||||
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
|
|
||||||
pathname="conf/tomcat-users.xml" />
|
|
||||||
</GlobalNamingResources>
|
|
||||||
|
|
||||||
<!-- A "Service" is a collection of one or more "Connectors" that share
|
|
||||||
a single "Container" Note: A "Service" is not itself a "Container",
|
|
||||||
so you may not define subcomponents such as "Valves" at this level.
|
|
||||||
Documentation at /docs/config/service.html
|
|
||||||
-->
|
|
||||||
<Service name="Catalina">
|
|
||||||
|
|
||||||
<!--The connectors can use a shared executor, you can define one or more named thread pools-->
|
|
||||||
<!--
|
|
||||||
<Executor name="tomcatThreadPool" namePrefix="catalina-exec-"
|
|
||||||
maxThreads="150" minSpareThreads="4"/>
|
|
||||||
-->
|
|
||||||
|
|
||||||
|
|
||||||
<!-- A "Connector" represents an endpoint by which requests are received
|
|
||||||
and responses are returned. Documentation at :
|
|
||||||
Java HTTP Connector: /docs/config/http.html
|
|
||||||
Java AJP Connector: /docs/config/ajp.html
|
|
||||||
APR (HTTP/AJP) Connector: /docs/apr.html
|
|
||||||
Define a non-SSL/TLS HTTP/1.1 Connector on port 8080
|
|
||||||
-->
|
|
||||||
<Connector port="8080" protocol="HTTP/1.1"
|
|
||||||
Server=" "
|
|
||||||
connectionTimeout="20000"
|
|
||||||
redirectPort="8443"
|
|
||||||
proxyName="alfresco.inteligr8.com" proxyPort="443" />
|
|
||||||
<!-- A "Connector" using the shared thread pool-->
|
|
||||||
<!--
|
|
||||||
<Connector executor="tomcatThreadPool"
|
|
||||||
port="8080" protocol="HTTP/1.1"
|
|
||||||
connectionTimeout="20000"
|
|
||||||
redirectPort="8443"
|
|
||||||
proxyHost="alfresco.inteligr8.com" proxyPort="443" />
|
|
||||||
-->
|
|
||||||
<!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443
|
|
||||||
This connector uses the NIO implementation. The default
|
|
||||||
SSLImplementation will depend on the presence of the APR/native
|
|
||||||
library and the useOpenSSL attribute of the AprLifecycleListener.
|
|
||||||
Either JSSE or OpenSSL style configuration may be used regardless of
|
|
||||||
the SSLImplementation selected. JSSE style configuration is used below.
|
|
||||||
-->
|
|
||||||
<!--
|
|
||||||
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
|
|
||||||
maxThreads="150" SSLEnabled="true">
|
|
||||||
<SSLHostConfig>
|
|
||||||
<Certificate certificateKeystoreFile="conf/localhost-rsa.jks"
|
|
||||||
type="RSA" />
|
|
||||||
</SSLHostConfig>
|
|
||||||
</Connector>
|
|
||||||
-->
|
|
||||||
<!-- Define an SSL/TLS HTTP/1.1 Connector on port 8443 with HTTP/2
|
|
||||||
This connector uses the APR/native implementation which always uses
|
|
||||||
OpenSSL for TLS.
|
|
||||||
Either JSSE or OpenSSL style configuration may be used. OpenSSL style
|
|
||||||
configuration is used below.
|
|
||||||
-->
|
|
||||||
<!--
|
|
||||||
<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
|
|
||||||
maxThreads="150" SSLEnabled="true" >
|
|
||||||
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
|
|
||||||
<SSLHostConfig>
|
|
||||||
<Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
|
|
||||||
certificateFile="conf/localhost-rsa-cert.pem"
|
|
||||||
certificateChainFile="conf/localhost-rsa-chain.pem"
|
|
||||||
type="RSA" />
|
|
||||||
</SSLHostConfig>
|
|
||||||
</Connector>
|
|
||||||
-->
|
|
||||||
|
|
||||||
<!-- Define an AJP 1.3 Connector on port 8009 -->
|
|
||||||
<!--
|
|
||||||
<Connector protocol="AJP/1.3"
|
|
||||||
address="::1"
|
|
||||||
port="8009"
|
|
||||||
redirectPort="8443" />
|
|
||||||
-->
|
|
||||||
|
|
||||||
<!-- An Engine represents the entry point (within Catalina) that processes
|
|
||||||
every request. The Engine implementation for Tomcat stand alone
|
|
||||||
analyzes the HTTP headers included with the request, and passes them
|
|
||||||
on to the appropriate Host (virtual host).
|
|
||||||
Documentation at /docs/config/engine.html -->
|
|
||||||
|
|
||||||
<!-- You should set jvmRoute to support load-balancing via AJP ie :
|
|
||||||
<Engine name="Catalina" defaultHost="localhost" jvmRoute="jvm1">
|
|
||||||
-->
|
|
||||||
<Engine name="Catalina" defaultHost="localhost">
|
|
||||||
|
|
||||||
<!--For clustering, please take a look at documentation at:
|
|
||||||
/docs/cluster-howto.html (simple how to)
|
|
||||||
/docs/config/cluster.html (reference documentation) -->
|
|
||||||
<!--
|
|
||||||
<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
|
|
||||||
-->
|
|
||||||
|
|
||||||
<!-- Use the LockOutRealm to prevent attempts to guess user passwords
|
|
||||||
via a brute-force attack -->
|
|
||||||
<Realm className="org.apache.catalina.realm.LockOutRealm">
|
|
||||||
<!-- This Realm uses the UserDatabase configured in the global JNDI
|
|
||||||
resources under the key "UserDatabase". Any edits
|
|
||||||
that are performed against this UserDatabase are immediately
|
|
||||||
available for use by the Realm. -->
|
|
||||||
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
|
|
||||||
resourceName="UserDatabase"/>
|
|
||||||
</Realm>
|
|
||||||
|
|
||||||
<Host name="localhost" appBase="webapps"
|
|
||||||
unpackWARs="true" autoDeploy="true">
|
|
||||||
|
|
||||||
<!-- SingleSignOn valve, share authentication between web applications
|
|
||||||
Documentation at: /docs/config/valve.html -->
|
|
||||||
<!--
|
|
||||||
<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
|
|
||||||
-->
|
|
||||||
|
|
||||||
<!-- Access log processes all example.
|
|
||||||
Documentation at: /docs/config/valve.html
|
|
||||||
Note: The pattern used is equivalent to using pattern="common" -->
|
|
||||||
<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
|
|
||||||
prefix="localhost_access_log" suffix=".txt"
|
|
||||||
pattern="%h %l %u %t "%r" %s %b" />
|
|
||||||
|
|
||||||
<Valve className="org.apache.catalina.valves.RemoteIpValve" />
|
|
||||||
|
|
||||||
</Host>
|
|
||||||
</Engine>
|
|
||||||
</Service>
|
|
||||||
</Server>
|
|
Reference in New Issue
Block a user