xenofem/python-zulip-api
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
python-zulip-api/zulip/integrations/zephyr/zmirror_private.conf.template

12 lines
1.2 KiB
Plaintext
Raw Permalink Normal View History

Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 14:49:06 -04:00
[program:zmirror-USERNAME]
zephyr_mirror: Move stamp_path to not be based on root_path.
2017-10-05 15:37:49 -04:00
command=/home/zulip/python-zulip-api/zulip/integrations/zephyr/zephyr_mirror_backend.py --stamp-path=/home/zulip/zulip --user=USERNAME --log-path=/home/zulip/logs/mirror-log-%(program_name)s --use-sessions --session-path=/home/zulip/zephyr_sessions/%(program_name)s --api-key-file=/home/zulip/api-keys/%(program_name)s --ignore-expired-tickets --nagios-path=/home/zulip/mirror_status/%(program_name)s --nagios-class=zulip-mirror-nagios --site=https://zephyr.zulipchat.com
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 14:49:06 -04:00
priority=200 ; the relative start priority (default 999)
autostart=true ; start at supervisord start (default: true)
autorestart=true ; whether/when to restart (default: unexpected)
stopsignal=TERM ; signal used to kill process (default TERM)
stopwaitsecs=30 ; max num secs to wait b4 SIGKILL (default 10)
[manual] puppet: Rename humbug user to zulip. (imported from commit 90e517a4a657d2821b371c833e557c2003c9340c)
2013-10-04 14:23:48 -04:00
user=zulip ; setuid to this UNIX account to run the program
Add webathena authentication button for Zephyr users. This shows up when you're not running a Zephyr mirroring bot and lets you use Webathena to have us run it. Obviously needs more docs. Current problems include: * supervisorctl reload ends up recreating /var/run/supervisor.sock with the wrong permissions, so it only works once in a row before you need to chmod that. * /etc/supervisor/conf.d needs to be humbug-writeable; this is a clear local root vulnerability * This uses SSH and thus is kinda slow. (imported from commit 7029979615ffd50b10f126ce2cf9a85a5eefd7a2)
2013-08-23 14:49:06 -04:00
redirect_stderr=true ; redirect proc stderr to stdout (default false)
[manual] Write logs to /var/log/zulip rather than /var/log/humbug. This requires a puppet apply to update the supervisor configuration. (imported from commit f2836b6d9c53791af6f6ceb1650d0e0740df70ab)
2013-09-25 14:11:33 -04:00
stdout_logfile=/var/log/zulip/%(program_name)s.log ; stdout log path, NONE for none; default AUTO
[manual] puppet: Rename humbug user to zulip. (imported from commit 90e517a4a657d2821b371c833e557c2003c9340c)
2013-10-04 14:23:48 -04:00
environment=HOME="/home/zulip",USER="zulip",KRB5CCNAME="/home/zulip/ccache/%(program_name)s"
Reference in a new issue Copy permalink