Project

General

Profile

tickets #121921

Set up domain for minio

Added by hellcp about 2 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
2022-12-13
Due date:
% Done:

0%

Estimated time:

Description

So minio is now kind of working, and I think I decided on s3.opensuse-project.net as the domain for it (that's what is used in https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/595, as we want to avoid potential xss issues), we need to set things up for that domain to work properly.

We need the following:

  • dns setup
  • ssl certificate
  • proxy setup

History

#1 Updated by pjessen about 2 months ago

  • Private changed from Yes to No

Just my opinion - we should really really avoid using any of the openSUSE ccTLDs, except maybe for minor/occasional testing. Some of the ccTLDs are used by national communities, e.g. opensuse.id, and I think it's best to leave it like that.

#2 Updated by hellcp about 2 months ago

Sure, that being said, I think if we are gonna have Turkish presence, I think we should instead have SUSE invest in opensuse.tr instead.

#3 Updated by hellcp about 2 months ago

After a discussion on in #opensuse-admin we are also considering s3.opensuse-project.net and s3.opensuse-project.com

#4 Updated by pjessen about 2 months ago

hellcp wrote:

After a discussion on in #opensuse-admin we are also considering s3.opensuse-project.net and s3.opensuse-project.com

Again, only my opinion - we really ought to stick to "opensuse.org". I think I saw Bernhard mention it on irc, why isn't it sufficient to use Content-Security-Policy ?

#5 Updated by hellcp about 2 months ago

CSP is per site policy, and we are both using old software that may not set those headers and we don't have access to the servers to change those headers.

#6 Updated by hellcp about 2 months ago

  • Description updated (diff)

#7 Updated by hellcp about 1 month ago

  • Status changed from New to Resolved

Also available in: Atom PDF