Re: [Freedombox-discuss] FYI - how to install Cockpit web (UI) service to fbx
Thank you Joseph for sharing. G Pascal Am 11.08.2017 um 14:01 schrieb Joseph Nuthalapati: > Since the community's showing interest in Cockpit, I'd like to point out > a few things. > > Cockpit works on a web socket combined with http/https interface. That's > the major problem with running cockpit behind Apache2 as a reverse proxy. > > Apache's websocket proxying support has been recently introduced. It > doesn't have a debian package yet which means it can't be installed like > any other package on FreedomBox. > > https://httpd.apache.org/docs/2.4/mod/mod_proxy_wstunnel.html > > Here is the Github issue for Cockpit, for your reference. > https://github.com/freedombox/Plinth/issues/838 > > -- > Thanks and regards, > Joseph Nuthalapati > > > > > ___ > Freedombox-discuss mailing list > Freedombox-discuss@lists.alioth.debian.org > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss > ___ Freedombox-discuss mailing list Freedombox-discuss@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
Re: [Freedombox-discuss] FYI - how to install Cockpit web (UI) service to fbx
On 10.08.2017 13:03, Pascal wrote: I will try that. Just copying another proxy file from apache. Some webapps only work on direkt Domains without subdir or alias behind it. But Im sure it will work. But reality told me it doesn't! One Mime-type error for the css file: Stylesheet http://freedombox.local/cockpit/static/branding.css wasnt'loaded, because MIME-Typ, "text/html", nis not "text/css". A JSON Error: SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data ProxyPass http://localhost:9090 Didn't work. Auth is no Problem. Cockpit uses system users like fbx or ldap users can also be used for accessSo SSO works out of the box also on port 9090 without apache. This experience and first impressions are very good. Without apache proxy, cockpit can be restricted for internal access only. With apache proxy in use I would like to have a fail2ban module for cockpit! G Pascal Am 10. August 2017 11:53:40 MESZ schrieb Daddy : Would be interesting to know if cockpit can run behind Apache under /cockpit. This would avoid having to meddle with the firewall and we can potentially do (SSO) authentication using Apache. Couldn't that be achieved (circumvented) by configuring reverse proxy setting for cockpit in apache? So it would still technically run on its own port, but Apache would be forwarding requests from /subdir to it. ___ Freedombox-discuss mailing list Freedombox-discuss@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
Re: [Freedombox-discuss] FYI - how to install Cockpit web (UI) service to fbx
I will try that. Just copying another proxy file from apache. Some webapps only work on direkt Domains without subdir or alias behind it. But Im sure it will work. Auth is no Problem. Cockpit uses system users like fbx or ldap users can also be used for access. So SSO works out of the box also on port 9090 without apache. This experience and first impressions are very good. Without apache proxy, cockpit can be restricted for internal access only. With apache proxy in use I would like to have a fail2ban module for cockpit! G Pascal Am 10. August 2017 11:53:40 MESZ schrieb Daddy : > >> Would be interesting to know if cockpit can run behind Apache under >> /cockpit. This would avoid having to meddle with the firewall and we >> can potentially do (SSO) authentication using Apache. > >Couldn't that be achieved (circumvented) by configuring reverse proxy >setting for cockpit in apache? So it would still technically run on its >own port, but Apache would be forwarding requests from /subdir to it. > Sry deleted to mutch with K9 from my mobile ___ Freedombox-discuss mailing list Freedombox-discuss@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
Re: [Freedombox-discuss] FYI - how to install Cockpit web (UI) service to fbx
> Would be interesting to know if cockpit can run behind Apache under > /cockpit. This would avoid having to meddle with the firewall and we > can potentially do (SSO) authentication using Apache. Couldn't that be achieved (circumvented) by configuring reverse proxy setting for cockpit in apache? So it would still technically run on its own port, but Apache would be forwarding requests from /subdir to it. D. ___ Freedombox-discuss mailing list Freedombox-discuss@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
Re: [Freedombox-discuss] FYI - how to install Cockpit web (UI) service to fbx
On Wednesday 09 August 2017 01:59 PM, heynmoeller wrote: [...] > Reload of firewalld seems to be needed to know/recognize cockpit as a > service! Ouch. firewalld does not seem to read new files placed in its services directory automatically. If necessary we can take care of this when we write Plinth application for cockpit. However, if we are able to run cockpit under /cockpit (like we do for many other services) then we won't have to deal with opening up the port. [...] > At the moment there is no integration into Freedombox (as a Service) yet. > A Plinth-Module needs to be build for further integration; if needed/wanted! Quite a few of us were interested to see cockpit integrated in FreedomBox. > > Features I like to use with cockpit: web-console and viewing logs (with > filters), administrate, managing and have a look to my NAS. > > Maybe someone find it useful Thanks for the report. It is helpful and confirms that Plinth app creation is straight forward. Would be interesting to know if cockpit can run behind Apache under /cockpit. This would avoid having to meddle with the firewall and we can potentially do (SSO) authentication using Apache. Let us know if you happen to try out something like that. -- Sunil signature.asc Description: OpenPGP digital signature ___ Freedombox-discuss mailing list Freedombox-discuss@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
