Bug #1046
closedBugzilla: Add new domain for bugzilla attachments
0%
Description
Per https://bugs.documentfoundation.org/editparams.cgi?section=attachment
"If you would like additional security on attachments to avoid this, set this parameter [attachment_base] to an alternate URL for your Bugzilla that is not the same as urlbase or sslbase. That is, a different domain name that resolves to this exact same Bugzilla installation."
I'm currently using https://vm150.documentfoundation.org/, but that entry is tied to a particular VM
Updated by Robinson Tryon about 9 years ago
Robinson Tryon wrote:
I'm currently using https://vm150.documentfoundation.org/, but that entry is tied to a particular VM
I'm guessing that we'll want a separate domain here, but perhaps we change VMs so infrequently that this isn't a big deal? Let me know your thoughts.
Updated by Florian Effenberger about 9 years ago
Let's not tie to an individual VM
How about bugs.libreoffice.org, isn't this an alias anyways?
Updated by Christian Lohmaier about 9 years ago
- Status changed from New to Resolved
bugs.libreoffice.org is not a good idea - since it should also be possible to access bugzilla using that URL (it currently redirects) - so to make that one the attachment domain would mean to use exceptions in the rewrite-rule or similar.
I just went with an additional dns-entry of "bug-attachments.documentfoundation.org" (and also added back ipv6 for bugs.documentfoundation.org)
Wait a little before changing it though, to make sure dns has propagated.
Updated by Robinson Tryon about 9 years ago
- Category set to Bugzilla
- Status changed from Resolved to In Progress
- Assignee changed from Christian Lohmaier to Robinson Tryon
Christian Lohmaier wrote:
bugs.libreoffice.org is not a good idea - since it should also be possible to access bugzilla using that URL (it currently redirects) - so to make that one the attachment domain would mean to use exceptions in the rewrite-rule or similar.
ayup
I just went with an additional dns-entry of "bug-attachments.documentfoundation.org" (and also added back ipv6 for bugs.documentfoundation.org)
Sounds good.
Wait a little before changing it though, to make sure dns has propagated.
Sure, sure -- I'll make the change-over tomorrow.
(Reopening this bug and assigning it to me to finish up)
Updated by Robinson Tryon about 9 years ago
- Status changed from In Progress to Closed
Robinson Tryon wrote:
Christian Lohmaier wrote:
I just went with an additional dns-entry of "bug-attachments.documentfoundation.org" (and also added back ipv6 for bugs.documentfoundation.org)
Wait a little before changing it though, to make sure dns has propagated.
Sure, sure -- I'll make the change-over tomorrow.
Done -- on site and pushed to git