search

tildaslash / RatticWeb

Password Management for Humans
http://rattic.org/
GNU General Public License v2.0
474 stars 149 forks source link

Maintenance mode #399

Open delfick opened 9 years ago

delfick commented 9 years ago

Hello,

We have an inactive-active deployment mechanism for our rattic.

It would be very helpful if we could have a maintenance mode that can be activated so whilst we are doing the upgrade on inactive, no new keys are created or modified on the active instance.

Thanks

Stephen.

jeremyrp commented 8 years ago

I would think a 'maintenance mode' would best be handled by Apache/web-server, and not within the application itself.

A bit of Googling turned up this example - http://www.shellhacks.com/en/Redirect-Site-to-Maintenance-Page-using-Apache-and-HTAccess . I haven't tested, but it should work fine with Rattic. I'm sure there are similar configurations for NGINX or any other web server used...

delfick commented 8 years ago

The problem with that is that you stop people being able to view passwords, which is something I feel is important for a maintenance mode of Rattic.

jeremyrp commented 8 years ago

I must be misinterpreting what your intention is for a 'Maintenance Mode'.

If you're wanting to prevent changes to the DB (adding/changing of passwords, etc...), then you also need to disable read access to the passwords as well, so that integrity of audit trail for password views is maintained.

If maintenance mode is allowed to add audit info to DB, then why not also allow password add/modify?

delfick commented 8 years ago

ah yes, I forgot about the audit trail.... hmmm