summaryrefslogtreecommitdiff
path: root/README
blob: 6554f3bf8a48e2eda22f90bc7a842c0397ac8d07 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
LICENSE
=======

#
#  rhwebimport
#
#  Copyright (C) 2014-2016 Christian Pointner <equinox@helsinki.at>
#  Copyright (C) 2015-2016 Peter Grassberger <petertheone@gmail.com>
#
#  This file is part of rhwebimport.
#
#  rhwebimport is free software: you can redistribute it and/or modify
#  it under the terms of the GNU Affero General Public License as published by
#  the Free Software Foundation, either version 3 of the License, or
#  any later version.
#
#  rhwebimport is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU Affero General Public License for more details.
#
#  You should have received a copy of the GNU Affero General Public License
#  along with rhwebimport. If not, see <http://www.gnu.org/licenses/>.
#
#  rhwebimport uses icons from iconfinder.com. The following image files
#  are from these authors:
#
#    /img/audio_file.png:   http://icons8.com/
#

Installation
============

# sudo aptitude install apache2 libapache2-mpm-itk libapache2-mod-perl2 libjson-maybexs-perl libxml-quote-perl librhrd-perl libjs-jquery libjs-bootstrap rivendell-server
# sudo a2enmod ssl authnz_ldap perl proxy_wstunnel
# sudo /etc/init.d/apache2 restart

add the following to /etc/apache2/mods-endabled/ldap.conf:

~~~snip~~~
LDAPTrustedGlobalCert CA_BASE64 /etc/ldap/ldapscert.pem
~~~/snip~~~

# sudo rm /etc/apache2/conf.d/rivendell

add the following to the virtualhost config:

~~~snip~~~
	Header always set Content-Security-Policy "default-src 'none'; connect-src 'self' wss://import.helsinki.at; img-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self';"

	AssignUserID rduser rivendell

	Include /etc/rivendell/apache-2.4.conf
	Include /etc/apache2/conf-available/javascript-common.conf

	Alias /rh-bin/ /var/www/rhwebimport/rh-bin/
	<Directory /var/www/rhwebimport/rh-bin/>
		SetHandler perl-script
		PerlResponseHandler ModPerl::Registry
		PerlOptions +ParseHeaders
		Options +ExecCGI

		Require all granted

		<Files authtoken.json>
			AuthName "Radio Helsinki - Automation Import"
			AuthType Basic
			AuthBasicProvider ldap
			AuthLDAPUrl ldap://ldap.helsinki.at/ou=People,dc=helsinki,dc=at?uid TLS

			Require all denied
			Require valid-user
		</Files>
	</Directory>

	ProxyPass "/ntp"  	"ws://localhost:3000/ntp"
	ProxyPass "/rhimportd"	"ws://localhost:4080/public/socket"
	ProxyPass "/upload/"	"http://localhost:4080/public/upload/"

	DocumentRoot /var/www/rhwebimport/www/
	<Directory /var/www/rhwebimport/>
		Options -Indexes -FollowSymLinks
		AllowOverride None

		Require all denied
	</Directory>
	<Directory /var/www/rhwebimport/www>
		Require all granted
	</Directory>
	AliasMatch "^/(js|img|styles)(.*)"  "/var/www/rhwebimport/www/$1$2"
	AliasMatch "^(.*)"  "/var/www/rhwebimport/www/index.html"
~~~/snip~~~

# ./build.sh


Pflichtenheft
=============

To generate to PDF from markdown use pandoc

# pandoc -o Pflichtenheft-Peter.pdf Pflichtenheft-Peter.md