Hello Alan,
> -Ursprüngliche Nachricht-
> Von: Alan F
> Gesendet: Freitag, 30. Juni 2023 12:35
> An: Tomcat Users List
> Betreff: RE: Tomcat Deployment scripts
>
> This is great thankyou Thomas. Just wondering how secure this is, prefer to
> be able to deploy with a non 'admin' account does this support a deploy only
> profile there?
>
As far as I know, there are only the default roles, described here:
https://tomcat.apache.org/tomcat-9.0-doc/manager-howto.html
What you can do for security:
- Create strong password
- Use SSL / https
- Harden SSL (>= TLS 1.2, ciphers etc.)
- Restrict IP-Access if possible (via Firewall or Valve)
- You can also restrict accessible URLs via web.xml
>
> -Original Message-
> From: Thomas Hoffmann (Speed4Trade GmbH)
>
> Sent: 29 June 2023 09:08
> To: Tomcat Users List
> Subject: AW: Tomcat Deployment scripts
>
> Hello Alan,
>
> > Von: Alan F
> > Gesendet: Mittwoch, 28. Juni 2023 18:24
> > An: users@tomcat.apache.org
> > Betreff: Tomcat Deployment scripts
> >
> > Anyone have an example deployment script or method used to deploy a
> simple war and context root, also with rollback preferably.
> >
> > Thanks
>
> you could use tomcat-manager.
> A war file can be deployed using curl for example:
> https://stackoverflow.com/questions/4432684/tomcat-manager-remote-
> deploy-script
>
> Greetings, Thomas
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
