Bug #1046
closedBugzilla: Add new domain for bugzilla attachments
0%
Description
Per https://bugs.documentfoundation.org/editparams.cgi?section=attachment
"If you would like additional security on attachments to avoid this, set this parameter [attachment_base] to an alternate URL for your Bugzilla that is not the same as urlbase or sslbase. That is, a different domain name that resolves to this exact same Bugzilla installation."
I'm currently using https://vm150.documentfoundation.org/, but that entry is tied to a particular VM
Updated by Robinson Tryon almost 10 years ago
Robinson Tryon wrote:
I'm currently using https://vm150.documentfoundation.org/, but that entry is tied to a particular VM
I'm guessing that we'll want a separate domain here, but perhaps we change VMs so infrequently that this isn't a big deal? Let me know your thoughts.
Updated by Florian Effenberger almost 10 years ago
Let's not tie to an individual VM
How about bugs.libreoffice.org, isn't this an alias anyways?
Updated by Christian Lohmaier almost 10 years ago
- Status changed from New to Resolved
bugs.libreoffice.org is not a good idea - since it should also be possible to access bugzilla using that URL (it currently redirects) - so to make that one the attachment domain would mean to use exceptions in the rewrite-rule or similar.
I just went with an additional dns-entry of "bug-attachments.documentfoundation.org" (and also added back ipv6 for bugs.documentfoundation.org)
Wait a little before changing it though, to make sure dns has propagated.
Updated by Robinson Tryon almost 10 years ago
- Category set to Bugzilla
- Status changed from Resolved to In Progress
- Assignee changed from Christian Lohmaier to Robinson Tryon
Christian Lohmaier wrote:
bugs.libreoffice.org is not a good idea - since it should also be possible to access bugzilla using that URL (it currently redirects) - so to make that one the attachment domain would mean to use exceptions in the rewrite-rule or similar.
ayup
I just went with an additional dns-entry of "bug-attachments.documentfoundation.org" (and also added back ipv6 for bugs.documentfoundation.org)
Sounds good.
Wait a little before changing it though, to make sure dns has propagated.
Sure, sure -- I'll make the change-over tomorrow.
(Reopening this bug and assigning it to me to finish up)
Updated by Robinson Tryon almost 10 years ago
- Status changed from In Progress to Closed
Robinson Tryon wrote:
Christian Lohmaier wrote:
I just went with an additional dns-entry of "bug-attachments.documentfoundation.org" (and also added back ipv6 for bugs.documentfoundation.org)
Wait a little before changing it though, to make sure dns has propagated.
Sure, sure -- I'll make the change-over tomorrow.
Done -- on site and pushed to git