Compare commits
5 Commits
master
...
pkg/dev/ri
Author | SHA1 | Date |
---|---|---|
|
326f5b1591 | |
|
730845c861 | |
|
c2314b65ea | |
|
3590b96ea2 | |
|
19f2caedb7 |
|
@ -0,0 +1 @@
|
||||||
|
11
|
|
@ -0,0 +1,113 @@
|
||||||
|
Source: lemur
|
||||||
|
Section: admin
|
||||||
|
Priority: extra
|
||||||
|
Maintainer: Cadoles <contact@cadoles.com>
|
||||||
|
Build-depends: debhelper (>=11),
|
||||||
|
python3-all,
|
||||||
|
python3-setuptools,
|
||||||
|
dh-python,
|
||||||
|
npm
|
||||||
|
Standards-Version: 3.9.4
|
||||||
|
Homepage: https://forge.cadoles.com/Infra/lemur
|
||||||
|
|
||||||
|
Package: eole-lemur
|
||||||
|
Architecture: any
|
||||||
|
Depends: ${misc:Depends},
|
||||||
|
lemur,
|
||||||
|
lemur-static,
|
||||||
|
eole-postgresql,
|
||||||
|
# for PIP
|
||||||
|
python3-pip,
|
||||||
|
gcc,
|
||||||
|
python3-dev
|
||||||
|
Description: Lemur - eolisation
|
||||||
|
|
||||||
|
Package: lemur
|
||||||
|
Architecture: any
|
||||||
|
Pre-Depends: dpkg, python3, ${misc:Pre-Depends}
|
||||||
|
Depends: ${python:Depends}, ${misc:Depends},
|
||||||
|
python3-lemur
|
||||||
|
Description: Lemur
|
||||||
|
|
||||||
|
Package: python3-lemur
|
||||||
|
Architecture: any
|
||||||
|
Pre-Depends: dpkg, python3, ${misc:Pre-Depends}
|
||||||
|
Depends: python3-acme,
|
||||||
|
python3-alembic,
|
||||||
|
python3-amqp,
|
||||||
|
python3-aniso8601,
|
||||||
|
python3-arrow,
|
||||||
|
python3-bcrypt,
|
||||||
|
python3-bs4,
|
||||||
|
python3-billiard,
|
||||||
|
python3-blinker,
|
||||||
|
python3-boto3,
|
||||||
|
python3-botocore,
|
||||||
|
python3-celery,
|
||||||
|
python3-certifi,
|
||||||
|
python3-cffi,
|
||||||
|
python3-chardet,
|
||||||
|
python3-click,
|
||||||
|
python3-cloudflare,
|
||||||
|
python3-dnspython,
|
||||||
|
python3-flask-bcrypt,
|
||||||
|
python3-flask-cors,
|
||||||
|
python3-flask-mail,
|
||||||
|
python3-flask-migrate,
|
||||||
|
python3-flask-principal,
|
||||||
|
python3-flask-restful,
|
||||||
|
python3-flask-script,
|
||||||
|
python3-flask-sqlalchemy,
|
||||||
|
python3-flask,
|
||||||
|
python3-future,
|
||||||
|
python3-gunicorn,
|
||||||
|
python3-hvac,
|
||||||
|
python3-idna,
|
||||||
|
python3-inflection,
|
||||||
|
python3-itsdangerous,
|
||||||
|
python3-jinja2,
|
||||||
|
python3-jmespath,
|
||||||
|
python3-josepy,
|
||||||
|
python3-kombu,
|
||||||
|
python3-lockfile,
|
||||||
|
python3-mako,
|
||||||
|
python3-markupsafe,
|
||||||
|
python3-marshmallow-sqlalchemy,
|
||||||
|
python3-ndg-httpsclient,
|
||||||
|
python3-paramiko,
|
||||||
|
python3-pem,
|
||||||
|
python3-psycopg2,
|
||||||
|
python3-pyasn1-modules,
|
||||||
|
python3-pyasn1,
|
||||||
|
python3-pycparser,
|
||||||
|
python3-jwt,
|
||||||
|
python3-nacl,
|
||||||
|
python3-openssl,
|
||||||
|
python3-rfc3339,
|
||||||
|
python3-dateutil,
|
||||||
|
python3-editor,
|
||||||
|
python3-pythonjsonlogger,
|
||||||
|
python3-ldap,
|
||||||
|
python3-tz,
|
||||||
|
python3-yaml,
|
||||||
|
python3-redis,
|
||||||
|
python3-requests-toolbelt,
|
||||||
|
python3-requests,
|
||||||
|
python3-retrying,
|
||||||
|
python3-s3transfer,
|
||||||
|
python3-six,
|
||||||
|
python3-soupsieve,
|
||||||
|
python3-sqlalchemy-utils,
|
||||||
|
python3-sqlalchemy,
|
||||||
|
python3-tabulate,
|
||||||
|
python3-urllib3,
|
||||||
|
python3-vine,
|
||||||
|
python3-werkzeug,
|
||||||
|
python3-xmltodict
|
||||||
|
Description: Lemur - library part
|
||||||
|
|
||||||
|
Package: lemur-static
|
||||||
|
Architecture: any
|
||||||
|
Pre-Depends: ${misc:Pre-Depends}
|
||||||
|
Depends: ${misc:Depends}
|
||||||
|
Description: static HTML/JS/CSS file
|
|
@ -0,0 +1,10 @@
|
||||||
|
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
|
||||||
|
Upstream-Name: lemur
|
||||||
|
Upstream-Contact: Cadoles <contact@cadoles.com>
|
||||||
|
Source: https://forge.cadoles.com/Infra/lemur
|
||||||
|
|
||||||
|
Files: *
|
||||||
|
Copyright: Lemur
|
||||||
|
License: Apache-2.0 License
|
||||||
|
|
||||||
|
License: Apache-2.0 License
|
|
@ -0,0 +1,4 @@
|
||||||
|
dicos usr/share/eole/creole/
|
||||||
|
tmpl/* usr/share/eole/creole/distrib/
|
||||||
|
posttemplate/* usr/share/eole/posttemplate/
|
||||||
|
funcs/* usr/share/creole/funcs
|
|
@ -0,0 +1 @@
|
||||||
|
lemur/static/dist/* usr/share/lemur/static/
|
|
@ -0,0 +1,28 @@
|
||||||
|
#!/usr/bin/make -f
|
||||||
|
# See debhelper(7) (uncomment to enable)
|
||||||
|
# output every command that modifies files on the build system.
|
||||||
|
#DH_VERBOSE = 1
|
||||||
|
|
||||||
|
export PYBUILD_NAME = lemur
|
||||||
|
export PYBUILD_DISABLE_python3 = test
|
||||||
|
|
||||||
|
%:
|
||||||
|
# suppression requirements version of package
|
||||||
|
# only last version are supported by lemur
|
||||||
|
# but Ubuntu has not last version
|
||||||
|
sed -i "s/==\(\([[:digit:]]\)*\(\.\)*\)*//g" requirements.txt
|
||||||
|
dh $@ --with python3 --buildsystem=pybuild
|
||||||
|
|
||||||
|
override_dh_install:
|
||||||
|
rm -rf debian/python3-lemur/usr/lib/python*/dist-packages/lemur/static/
|
||||||
|
rm -rf debian/python3-lemur/usr/lib/python*/dist-packages/lemur/tests/
|
||||||
|
rm -rf debian/python3-lemur/usr/lib/python*/dist-packages/trustores
|
||||||
|
mkdir -p debian/lemur/usr
|
||||||
|
mv debian/python3-lemur/usr/bin debian/lemur/usr
|
||||||
|
dh_install
|
||||||
|
|
||||||
|
override_dh_auto_build:
|
||||||
|
npm install --unsafe-perm
|
||||||
|
node_modules/.bin/gulp build
|
||||||
|
node_modules/.bin/gulp package --urlContextPath=lemur
|
||||||
|
dh_auto_build
|
|
@ -0,0 +1 @@
|
||||||
|
3.0 (quilt)
|
|
@ -0,0 +1,27 @@
|
||||||
|
<?xml version="1.0" encoding="utf-8"?>
|
||||||
|
<creole>
|
||||||
|
<files>
|
||||||
|
<!--service>lemur</service-->
|
||||||
|
<file name='/etc/lemur/lemur.conf.py' mkdir='True'/>
|
||||||
|
<file name='/etc/eole/eole-db.d/lemur.yml'/>
|
||||||
|
<file name='/etc/nginx/web.d/lemur.conf' source='nginx-lemur.conf'/>
|
||||||
|
</files>
|
||||||
|
<variables>
|
||||||
|
<family name='lemur'>
|
||||||
|
<variable name='lemur_secret' type='password' description="Secret pour Lemur" auto_save="True"/>
|
||||||
|
<variable name='lemur_token_secret' type='password' description="Token secret pour Lemur" auto_save="True"/>
|
||||||
|
<variable name='lemur_encrypt_keys' type='password' description="Encrypt keys pour Lemur" auto_save="True"/>
|
||||||
|
<variable name='lemur_db_name' type='string' description="Nom de la base de donnée de Lemur" mode="expert">
|
||||||
|
<value>lemur</value>
|
||||||
|
</variable>
|
||||||
|
<variable name='lemur_db_user' type='string' description="Nom de l'utilisateur de la base de donnée de Lemur" mode="expert">
|
||||||
|
<value>lemur</value>
|
||||||
|
</variable>
|
||||||
|
</family>
|
||||||
|
</variables>
|
||||||
|
<constraints>
|
||||||
|
<fill name='gen_random_base64' target='lemur_secret'/>
|
||||||
|
<fill name='gen_random_base64' target='lemur_token_secret'/>
|
||||||
|
<fill name='gen_random_base64' target='lemur_encrypt_keys'/>
|
||||||
|
</constraints>
|
||||||
|
</creole>
|
|
@ -0,0 +1,6 @@
|
||||||
|
from secrets import token_bytes as _token_bytes
|
||||||
|
from base64 import urlsafe_b64encode as _urlsafe_b64encode
|
||||||
|
|
||||||
|
|
||||||
|
def gen_random_base64():
|
||||||
|
return _urlsafe_b64encode(_token_bytes(32)).decode()
|
|
@ -0,0 +1,8 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# install unrelease python modules
|
||||||
|
pip3 install alembic-autogenerate-enums==0.0.2 asyncpool==1.0 certsrv==2.1.1 cryptography==3.1.1 dnspython3==1.15.0 dyn==1.8.1 flask-replicated==1.4 javaobj-py3==0.4.0.1 jsonlines==1.2.0 logmatic-python==0.1.7 marshmallow==2.20.4 pycryptodomex==3.9.7 pyjks==20.0.0 raven[flask]==6.10.0 twofish==0.3.0
|
||||||
|
|
||||||
|
exit 0
|
|
@ -0,0 +1,90 @@
|
||||||
|
|
||||||
|
# This is just Python which means you can inherit and tweak settings
|
||||||
|
|
||||||
|
import os
|
||||||
|
_basedir = os.path.abspath(os.path.dirname(__file__))
|
||||||
|
|
||||||
|
THREADS_PER_PAGE = 8
|
||||||
|
|
||||||
|
# General
|
||||||
|
|
||||||
|
# These will need to be set to `True` if you are developing locally
|
||||||
|
CORS = False
|
||||||
|
debug = False
|
||||||
|
|
||||||
|
# this is the secret key used by flask session management
|
||||||
|
SECRET_KEY = '%%lemur_secret'
|
||||||
|
|
||||||
|
# You should consider storing these separately from your config
|
||||||
|
LEMUR_TOKEN_SECRET = '%%lemur_token_secret'
|
||||||
|
LEMUR_ENCRYPTION_KEYS = '%%lemur_encrypt_keys'
|
||||||
|
|
||||||
|
# List of domain regular expressions that non-admin users can issue
|
||||||
|
LEMUR_ALLOWED_DOMAINS = []
|
||||||
|
|
||||||
|
# Mail Server
|
||||||
|
|
||||||
|
LEMUR_EMAIL = ''
|
||||||
|
LEMUR_SECURITY_TEAM_EMAIL = []
|
||||||
|
|
||||||
|
# Certificate Defaults
|
||||||
|
|
||||||
|
LEMUR_DEFAULT_COUNTRY = ''
|
||||||
|
LEMUR_DEFAULT_STATE = ''
|
||||||
|
LEMUR_DEFAULT_LOCATION = ''
|
||||||
|
LEMUR_DEFAULT_ORGANIZATION = ''
|
||||||
|
LEMUR_DEFAULT_ORGANIZATIONAL_UNIT = ''
|
||||||
|
|
||||||
|
# Authentication Providers
|
||||||
|
ACTIVE_PROVIDERS = []
|
||||||
|
|
||||||
|
# Metrics Providers
|
||||||
|
METRIC_PROVIDERS = []
|
||||||
|
|
||||||
|
# Logging
|
||||||
|
|
||||||
|
LOG_LEVEL = "DEBUG"
|
||||||
|
LOG_FILE = "lemur.log"
|
||||||
|
|
||||||
|
|
||||||
|
# Database
|
||||||
|
|
||||||
|
# modify this if you are not using a local database
|
||||||
|
SQLALCHEMY_DATABASE_PASSWORD = 'replaceme'
|
||||||
|
SQLALCHEMY_DATABASE_URI = f'postgresql://%%lemur_db_user:{SQLALCHEMY_DATABASE_PASSWORD}@localhost:5432/%%lemur_db_name'
|
||||||
|
|
||||||
|
# AWS
|
||||||
|
|
||||||
|
#LEMUR_INSTANCE_PROFILE = 'Lemur'
|
||||||
|
|
||||||
|
# Issuers
|
||||||
|
|
||||||
|
# These will be dependent on which 3rd party that Lemur is
|
||||||
|
# configured to use.
|
||||||
|
|
||||||
|
# VERISIGN_URL = ''
|
||||||
|
# VERISIGN_PEM_PATH = ''
|
||||||
|
# VERISIGN_FIRST_NAME = ''
|
||||||
|
# VERISIGN_LAST_NAME = ''
|
||||||
|
# VERSIGN_EMAIL = ''
|
||||||
|
|
||||||
|
#FIXME
|
||||||
|
DIGICERT_CIS_API_KEY = ""
|
||||||
|
DIGICERT_CIS_URL = ""
|
||||||
|
DIGICERT_CIS_ROOTS = ''
|
||||||
|
DIGICERT_API_KEY = ''
|
||||||
|
DIGICERT_CIS_PROFILE_NAMES = ''
|
||||||
|
DIGICERT_URL = ''
|
||||||
|
DIGICERT_ORG_ID = ''
|
||||||
|
DIGICERT_ORDER_TYPE = ''
|
||||||
|
DIGICERT_ROOT = ''
|
||||||
|
|
||||||
|
ENTRUST_API_CERT = ''
|
||||||
|
ENTRUST_API_KEY = ''
|
||||||
|
ENTRUST_API_USER = ''
|
||||||
|
ENTRUST_API_PASS = ''
|
||||||
|
ENTRUST_URL = ''
|
||||||
|
ENTRUST_ROOT = ''
|
||||||
|
ENTRUST_NAME = ''
|
||||||
|
ENTRUST_EMAIL = ''
|
||||||
|
ENTRUST_PHONE = ''
|
|
@ -0,0 +1,16 @@
|
||||||
|
%set %%dbname = %%lemur_db_name
|
||||||
|
---
|
||||||
|
dbuser: %%lemur_db_user
|
||||||
|
dbuser_options:
|
||||||
|
- LOGIN
|
||||||
|
privileges:
|
||||||
|
%%{dbname}.public.*: 'ALL'
|
||||||
|
%%{dbname}.public: 'ALL'
|
||||||
|
%%{dbname}: 'ALL'
|
||||||
|
dbhost: %%risotto_db_address
|
||||||
|
dbport: 5432
|
||||||
|
dbtype: postgres
|
||||||
|
dbname: %%dbname
|
||||||
|
template: 'template0'
|
||||||
|
pwd_files:
|
||||||
|
- {'file': '/etc/lemur/lemur.conf.py', 'pattern': 'SQLALCHEMY_DATABASE_PASSWORD = "'}
|
|
@ -0,0 +1,15 @@
|
||||||
|
location /lemur/api {
|
||||||
|
proxy_pass http://127.0.0.1:8002/api;
|
||||||
|
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
|
||||||
|
proxy_redirect off;
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
}
|
||||||
|
|
||||||
|
location /lemur/ {
|
||||||
|
alias /usr/share/lemur/static/;
|
||||||
|
include mime.types;
|
||||||
|
index index.html;
|
||||||
|
}
|
Loading…
Reference in New Issue