search

govCMS / audit-site

govCMS site audit and remediation tool. Used to verify all sites built in, and for GovCMS SaaS meet the minimum requirements.
4 stars 4 forks source link

Site Audit issues with latest Distro #22

Open OPCIT opened 6 years ago

OPCIT commented 6 years ago

Getting the following issues that don't seem to have any way of rectifying. Hoping answers here will assist others.

1.The following modules are not enabled: govcms_tweaks. There is no module called 'govcms_tweaks' as at 7-x-2.20

  1. Page cache max-age is not set above 300 seconds. Currently set to 0. Where is this set and how can it be changed?

  2. Robots.txt is not set correctly, currently set to # As previously discussed, how can this by fixed?

  3. Compress cached pages (page_compression) is enabled. Only things compressed are CSS and Javascript. How can this be fixed?

  4. Could not determine missing modules. What module is missing (maybe the govcms_tweak module)?

  5. Search is using the database. Currently 51 nodes in 1 database index. Correct, so what is wrong?

Can a site audit be submitted with errors, even when there are false negative issues?

OPCIT commented 6 years ago

and now....after trying to address the issues listed in the site audit report and closing down the browser session, we are no longer able to login to the site using our admin account.

Getting: The website encountered an unexpected error. Please try again later.

URL is this: /acsf-openid-factory/login?destination=user

Needed to run 'drush dis acsf' in order to get access back.

tobybellwood commented 6 years ago

Sorry - The audit script is much in need of an overhaul. If you can send us a copy of the failed script, I can help debug...

In short -

  1. the ACSF modules (and govcms_tweaks) are implemented once the site reached site factory
  2. you can set the page_cache_maximum_age variable
  3. Robots is controlled by SiteFactory for SaaS sites
  4. you can set the page_compression variable
  5. The missing modules isn't working properly
  6. That's ok - we'd recommend larger users to use Solr, bu DB is ok for 51 nodes.

I'm guessing the error is generated by the acsf modules being present in a non-acsf environment.

OPCIT commented 6 years ago

Thanks Toby. For anyone reading this getting the same errors in the audit report:

2. Page cache max-age is not set above 300 seconds. Currently set to 0. On page /admin/config/development/performance, set the 'Expiration of cached pages' to a minimum of '10 min'

_4. Compress cached pages (pagecompression) is enabled. On the same page, if you have 'Cache pages for anonymous users' turned off but get this error, you need to enable this option and Save configuration.

The 'Compress cached pages.' will then show, Disable and Save configuration. Then disable the 'Cache pages for anonymous users' again and Save configuration.