From 86bb7a78c790a439cbe6db385020a99e40df4703398de78d84d7b8c5c1edcae2 Mon Sep 17 00:00:00 2001 From: Axel Braun Date: Mon, 24 Aug 2020 09:21:26 +0000 Subject: [PATCH] - changed trytond.conf to listen to all interfaces OBS-URL: https://build.opensuse.org/package/show/Application:ERP:GNUHealth:Factory/trytond?expand=0&rev=96 --- trytond.changes | 5 ++ trytond.conf | 231 ++++++++++++++++++++++++++++++++++++++---------- 2 files changed, 190 insertions(+), 46 deletions(-) diff --git a/trytond.changes b/trytond.changes index affbde3..31bd3ce 100644 --- a/trytond.changes +++ b/trytond.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Aug 24 08:57:32 UTC 2020 - Axel Braun + +- changed trytond.conf to listen to all interfaces + ------------------------------------------------------------------- Thu Aug 20 21:02:16 UTC 2020 - Axel Braun diff --git a/trytond.conf b/trytond.conf index dd8f724..decf4da 100644 --- a/trytond.conf +++ b/trytond.conf @@ -20,8 +20,6 @@ uri = postgresql:/// -# -# # PostgreSQL via TCP/IP # (e.g. connecting to a PostgreSQL database running on a remote machine or # by means of md5 authentication. Needs PostgreSQL to be configured to accept @@ -42,22 +40,10 @@ path = /var/lib/tryton # The primary language, that is used to store entries in translatable # fields into the database. -#language = en_US +#language = en -[ssl] -# SSL settings -# Activation of SSL for all available protocols. -# Uncomment the following settings for key and certificate -# to enable SSL. - -# The path to the private key -#privatekey = /etc/ssl/private/ssl-cert-snakeoil.key - -# The path to the certificate -#certificate = /etc/ssl/certs/ssl-cert-snakeoil.pem - -[jsonrpc] -# Settings for the JSON-RPC network interface +[web] +# Settings for the web interface # The IP/host and port number of the interface # (Internal default: localhost:8000) @@ -72,35 +58,82 @@ listen = [::]:8000 #hostname = # The root path to retrieve data for GET requests -#data = jsondata +# (i.e. namely the path to the web client) +# (Internal default: /var/www/localhost/tryton) +#root = /usr/lib/node-modules/tryton-sao -[xmlrpc] -# Settings for the XML-RPC network interface +# The number of proxy servers in front of trytond. +#num_proxies = 0 -# The IP/host and port number of the interface -#listen = localhost:8069 +[request] +# The maximum size in bytes for unauthenticated requests (zero means no limit). +#max_size = 2MB -[webdav] -# Settings for the WebDAV network interface +# The maximum size in bytes of an authenticated request (zero means no limit). +#max_size_authenticated = 2GB -# The IP/host and port number of the interface -#listen = localhost:8080 +[ssl] +# SSL settings +# Activation of SSL for all available protocols. +# Uncomment the following settings for key and certificate. +# SSL is activated by defining privatekey. + +# The path to the private key +#privatekey = /etc/ssl/private/ssl-cert-snakeoil.key + +# The path to the certificate +#certificate = /etc/ssl/certs/ssl-cert-snakeoil.pem [session] # Session settings -# The time (in seconds) until an inactive session expires -#timeout = 3600 +# A comma separated list of login methods to use for user authentication. +# By default, Tryton supports only the password method which compares the +# password entered by the user against a stored hash. +# Other modules may define other methods (please refer to their documentation). +# The methods are tested following the order of the list. +#authentications = password -# The server administration password used by the client for -# the execution of database management tasks. It is encrypted -# using using the Unix crypt(3) routine. A password can be -# generated using the following command line (on one line): -# $ python -c 'import getpass,crypt,random,string; \ -# print crypt.crypt(getpass.getpass(), \ -# "".join(random.sample(string.ascii_letters + string.digits, 8)))' -# Example password with 'admin' -#super_pwd = jkUbZGvFNeugk +# The time (in seconds) until a session expires. +#max_age = 2592000 # (30 days) + +# The time (in seconds) until an inactive session is considered invalid for +# special internal tasks, thus requiring to re-confirm the session. +#timeout = 300 # (5 minutes) + +# The maximal number of authentication attempts before the server answers +# unconditionally 'Too Many Requests'. +# The counting is done on all attempts over one period of timeout. +#max_attempt = 5 + +# The maximal number of authentication attempts from the same network before +# the server answers unconditionally 'Too Many Requests'. +# The counting is done on all attempts over a period of timeout. +#max_attempt_ip_network = 300 + +# The network prefix to apply on IPv4 addresses when counting authentication attempts. +#ip_network_4 = 32 + +# The network prefix to apply on IPv6 addresses when counting authentication attempts. +#ip_network_6 = 56 + +[password] +# The minimal length required for user passwords. +#length = 8 + +# The path to a file containing one forbidden password per line. +#forbidden = + +# The ratio of non repeated characters for user passwords. +#entropy = 0.75 + +# The time (in seconds) until a reset password expires. +#reset_timeout = 86400 # (24h) + +# The path to the INI file to load as CryptContext: +# +# If no path is set, Tryton will use the schemes `bcrypt` or `pbkdf2_sha512`. +#passlib = None [email] # Mail settings @@ -115,11 +148,65 @@ listen = [::]:8000 # The From address used by the Tryton Server to send emails. #from = tryton@localhost -[report] -# Report settings +[attachment] +# Defines how to store the attachments +# A boolean value to store attachment in the FileStore. +#filestore=True + +# The prefix to use with the FileStore. +#store_prefix = None + +[bus] +# Allow clients to subscribe to bus channels (Boolean). +#allow_subscribe = False + +# The time (in seconds) to keep the connection to the client open +# when using long polling for bus messages. +#long_polling_timeout = 300 + +# The time (in seconds) a message should be kept in the queue +# before being discarded. +#cache_timeout = 300 + +# The timeout (in seconds) for the select call when listening +# on a channel. +#select_timeout = 5 + +# Let the worker queue handle bus messages +#queue = False + +# Define the class to use when queue is set to True +#class = trytond.bus.LongPollingBus + + +# Special Settings +[cache] +# Various cache size settings + +# The number of different models kept in the cache per transaction. +#model = 200 + +# The number of loaded records kept in the cache. It can also be changed +# locally using the _record_cache_size key in Transaction.context. +#record = 2000 + +# The number of fields to load with eager Field.loading. +#field = 100 + +# The minimum number of seconds between two cleanings of the cache. +#clean_timeout = 300 + +[queue] +# Activate asynchronous processing of the tasks. Otherwise they are performed at the end of the requests. +#worker = False + +[table] +# This section allows to override the default generated table names. The main purpose +# is to bypass name length limitations of a database backend. +# Examples: +#account.invoice.line = acc_inv_line +#account.invoice.tax = acc_inv_tax -# Unoconv parameters for connection to the unoconv service. -#unoconv = pipe,name=trytond;urp;StarOffice.ComponentContext # Module settings # @@ -127,12 +214,64 @@ listen = [::]:8000 # configuration file. These settings only apply when those modules # are installed. # -#[ldap_authentication] -# The URI to connect to the LDAP server. +[account_fr_chorus] +# The private key to communicate with the chorus service. +#privatekey = + +# The certficate to communicate with the chorus service. +#certificate = + +# Target URL of the Chorus service +#url = https://chorus-pro.gouv.fr:5443 + +[ldap_authentication] +# The LDAP URL to connect to the server following RFC-2255. #uri = ldap://host:port/dn?attributes?scope?filter?extensions # A basic default URL could look like #uri = ldap://localhost:389/ -[web] -# Path for the web-frontend -#root = /usr/lib/node-modules/tryton-sao +# The LDAP password used to bind if needed. +#bind_pass = + +# If the LDAP server is an Active Directory. +#active_directory = False + +# The UID attribute for authentication. +#uid = uid + +# If the user shall be created in the database in case it does not exist. +#create_user = False + +[sms_authentication] +# The fully qualified name of the method to send SMS. It must take three +# arguments: text, to and from. +# +# - The sms method just sends a code via SMS to the user. This code can directly +# be used in the login dialog. +# - The password_sms method sends a code only after the user entered a valid +# password (two-factor authentication). +# +# Both methods require that the user has a *mobile* phone number defined +# otherwise he can not be authenticated with those methods. +# +# This method is required to send SMS. +#function = + +# The number from which the SMS are sent. +#from = + +# The length of the generated code. +#length = 6 + +# The time to live for the generated codes in seconds. +#ttl = 300 + +# The name used in the SMS text. +#name = Tryton + +[product] +# The number of decimals with which the unit prices are stored +# in the database. The default value is 4. +# Warning: This setting can not be lowered once a database is created. +#price_decimal = 4 +