search

platform-coop-toolkit / coop-map-directory-index

The Map/Directory/Index component of the Platform Cooperative Development Kit.
https://directory.platform.coop
BSD 3-Clause "New" or "Revised" License
1 stars 3 forks source link

Let's talk about domain names and guest access via basic auth #12

Closed erictheise closed 4 years ago

erictheise commented 4 years ago

It's very likely we'll demo some aspects of the system next Monday, 9 March, during the design crit and two things would be nice to have:

As I type this site is open at http://ec2-44-228-52-43.us-west-2.compute.amazonaws.com/, revealing a subset of data from the ioo.coop import that's already accessible via the Internet. But tonight I'll push the account creation mechanism and before the week is over I will add more data from Danny and Travis' spreadsheet.

We're using a stage convention elsewhere. My shorthand for the project has been MDI – the name of the Django project behind the scenes, for map/directory/index – so alpha.mdi.platform.coop or demo.mdi.platform.coop make sense to me. alpha.directory.platform.coop or demo.directory.platform.coop are probably better candidates. I don't have a strong opinion, I'd just like to have something teammates and early birds could easily type and say out loud.

@greatislander you'd be the one to request this from the ISP once we decide?

There's a simple Django module that throws a basic auth password in front of everything and I'd like to put that up with a simple, sharable username & password combo to keep out the bots and drivebys. I see many doorknob-twisting exercises for common platforms in the logs already and would like to have a little bit of protection from the curious.

Maybe we can cover this at standup tomorrow. Thanks!

greatislander commented 4 years ago

@erictheise I have keys to the DNS for platform.coop so I can add the necessary zone configuration for whatever we decide.

erictheise commented 4 years ago

Over the morning's coffee I'm remembering I'll also need a generic platform.coop email address from which to send the activation email. Off the top of my head, directory-admin, accounts-admin, even accounts could be good but I don't know what's currently in use or anticipated. I'd need to be able to read and send from that account in the short term and someone would need to monitor it going forward as we pass the baton.

erictheise commented 4 years ago

We settled on and implemented demo.directory.platform.coop; it's live now. The pages designed for humans are minimally protected using django-lockdown and a simple user/password pair. We've postponed any action on the activation email address for now.

Closing this issue.