Przeglądaj źródła

Avoid insecure logins

Bob Mottram 11 lat temu
rodzic
commit
43a9d4b503
1 zmienionych plików z 12 dodań i 2 usunięć
  1. 12
    2
      beaglebone.txt

+ 12
- 2
beaglebone.txt Wyświetl plik

@@ -2490,7 +2490,7 @@ rm /var/www/$HOSTNAME/htdocs/install.php
2490 2490
 -- Larry Ellison
2491 2491
 #+END_VERSE
2492 2492
 
2493
-Owncloud will allow you to upload and download files, share photos, collaboratively edit documents, have a calendar and more.
2493
+Owncloud will allow you to upload and download files, share photos, collaboratively edit documents, have a calendar and more.  You should be warned that Owncloud runs quite slowly via an ordinary web browser, but it can be a convenient way to access and share your data from any location in a reasonably secure manner.
2494 2494
 
2495 2495
 *** Server Installation
2496 2496
 
@@ -2528,7 +2528,7 @@ export HOSTNAME=mydomainname.com
2528 2528
 emacs /etc/apache2/sites-available/$HOSTNAME
2529 2529
 #+END_SRC
2530 2530
 
2531
-And add the following, both to the 80 section and the 443 VirtualHost sections.
2531
+And add the following, to the 443 VirtualHost section.  Really we only will want to be using Owncloud with HTTPS to ensure some level of security and avoidance of dragnet surveillance.
2532 2532
 
2533 2533
 #+BEGIN_SRC: bash
2534 2534
   <Directory /var/www/mydomainname.com/htdocs/owncloud>
@@ -2539,6 +2539,14 @@ And add the following, both to the 80 section and the 443 VirtualHost sections.
2539 2539
   </Directory>
2540 2540
 #+END_SRC
2541 2541
 
2542
+To ensure that nobody logs in insecurely add the following to the 80 VirtualHost section.
2543
+
2544
+#+BEGIN_SRC: bash
2545
+  <Directory /var/www/mydomainname.com/htdocs/owncloud>
2546
+    deny from all
2547
+  </Directory>
2548
+#+END_SRC
2549
+
2542 2550
 Save and exit, then restart apache.
2543 2551
 
2544 2552
 #+BEGIN_SRC: bash
@@ -2595,6 +2603,8 @@ With a web browser visit your domain (mydomainname.com/owncloud) and enter an ad
2595 2603
 
2596 2604
 *** Owncloud on Android
2597 2605
 
2606
+First install [[https://f-droid.org/][F-Droid]] and then search for the current Owncloud app.  Once it's installed you'll then be able to log into the BBB with the URL https://mydomainname.com/opencloud, supplying your username and password.
2607
+
2598 2608
 ** Install Bitmessage
2599 2609
 
2600 2610
 #+BEGIN_VERSE