Production upgrades - Githubissues

ryscher commented 5 years ago

Upgrade settings for servers where is_production==true

install an SSL virtuahost in Apache
install SSL certificates from S3
force most server interactions to use SSL
force API interactions to go through the API server
guarantee that external users cannot write to the SOLR index
change maven settings.xml to have the "real" values for production servers, rather than using test services and sending all email to admin
block bots and spiders that misbehave
force SOLR to search over archived items only

To test: create a new server using the is_production flag. Verify that configurations look as expected. (It's difficult to fully test these configurations unless you actually deploy a new production server.)

ryscher commented 5 years ago

@daisieh This is ready for re-review

daisieh commented 5 years ago

Looks good. When I set is_production to true, the settings are picked up and the ssl certs work. I can now use https on my test server.

datadryad / vagrant-dryad

Production upgrades #95