Difference between revisions of "Flynn"
(add a firewall suitable for flynn) |
(→Firewall) |
||
Line 29: | Line 29: | ||
ufw allow 443 | ufw allow 443 | ||
ufw default REJECT | ufw default REJECT | ||
+ | |||
+ | And some other rules! https://www.philiplb.de/flynn/2016/04/19/flynn-ufw/ |
Revision as of 14:01, 25 February 2017
Open-source PaaS software
Available from https://flynn.io/
Requires git 1.8.5 or higher for seamless publishing via git
1.8.3 (CentOS7 default) requires an environment variable to publish app due to the self-signed SSL certificate. Since the CA certificate is stored within ~/.flynn/ when you setup the cluster, the GIT_SSL_CAINFO env can be used to specify the CA used.
$ GIT_SSL_CAINFO=~/.flynn/ca-certs/default.pem git push flynn master
Below 1.7.3 (e.g CentOS6 default of 1.7.1) there's a little more work required because it doesn't support the credential helper. You'll need the key for your flynn cluster which can be found with:
$ grep Key ~/.flynnrc Key = "44161646005d26ede2c6687aaaaaaaaa"
$ git remote get-url flynn https://git.flynn1.bocks.com/myapp.git $ git remote set-url flynn https://:44161646005d26ede2c6687aaaaaaaaa@git.flynn1.bocks.com/myapp.git
To push the repository with git 1.7.x, you still need the GIT_SSL_CAINFO env as for git 1.8.3
See Updating Git for instructions.
Firewall
ufw enable ufw allow 22 ufw allow 80 ufw allow 443 ufw default REJECT
And some other rules! https://www.philiplb.de/flynn/2016/04/19/flynn-ufw/