ponzu-cms / examples Goto Github PK

I use ubuntu 18.04.5 LTS
running the docker compose up I can see the next issues.

/examples/docker$ docker-compose up
Starting docker_admin_1 ... done
Starting docker_web_1 ... done
Attaching to docker_admin_1, docker_web_1
admin_1 | creating the volume assets
admin_1 | linking the volume assets
admin_1 | building ponzu from project directory
web_1 | /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
web_1 | /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
admin_1 | cmd/ponzu/vendor/golang.org/x/net/http2/frame.go:18:2: cannot find package "golang.org/x/net/lex/httplex" in any of:
admin_1 | /go/src/project/cmd/ponzu/vendor/golang.org/x/net/lex/httplex (vendor tree)
admin_1 | /usr/local/go/src/golang.org/x/net/lex/httplex (from $GOROOT)
web_1 | /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
admin_1 | /go/src/golang.org/x/net/lex/httplex (from $GOPATH)
web_1 | 10-listen-on-ipv6-by-default.sh: Getting the checksum of /etc/nginx/conf.d/default.conf
admin_1 | Error: exit status 1
web_1 | 10-listen-on-ipv6-by-default.sh: error: /etc/nginx/conf.d/default.conf differs from the packaged version
admin_1 | exit status 1
web_1 | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
admin_1 | Usage:
admin_1 | ponzu build [flags]
admin_1 |
web_1 | /docker-entrypoint.sh: Configuration complete; ready for start up
admin_1 | Examples:
admin_1 | $ ponzu build
admin_1 | (or)
admin_1 | $ ponzu build --gocmd=go1.8rc1
admin_1 |
admin_1 | Flags:
admin_1 | -h, --help help for build
admin_1 |
admin_1 | Global Flags:
admin_1 | --gocmd string custom go command if using beta or new release of Go (default "go")
admin_1 |
admin_1 | starting ponzu admin and api
admin_1 | Ponzu server started
docker_admin_1 exited with code 0

john:~/dev/cms/examples/docker$ docker version
Client: Docker Engine - Community
Version: 19.03.13
API version: 1.40
Go version: go1.13.15
Git commit: 4484c46d9d
Built: Wed Sep 16 17:02:36 2020
OS/Arch: linux/amd64
Experimental: false

Server: Docker Engine - Community
Engine:
Version: 19.03.13
API version: 1.40 (minimum version 1.12)
Go version: go1.13.15
Git commit: 4484c46d9d
Built: Wed Sep 16 17:01:06 2020
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.3.7
GitCommit: 8fba4e9a7d01810a393d5d25a3621dc101981175
runc:
Version: 1.0.0-rc10
GitCommit: dc9208a3303feef5b3839f4323d9beb36df0a9dd
docker-init:
Version: 0.18.0
GitCommit: fec3683
jjuhasz@jjuhasz-ThinkPad-L560:~/dev/cms/examples/docker$ docker-compose version
docker-compose version 1.18.0-rc1, build e96dfba
docker-py version: 2.6.1
CPython version: 2.7.13
OpenSSL version: OpenSSL 1.0.1t 3 May 2016

Hi there,

In the documentation I found this:

Security and the Client Secret
HTTP requests with a valid token, signed with the Client Secret, can take any action an Admin can within the CMS. Be cautious of this when sharing account logins or details with anyone.

Is there a way to enable security for all API requests? I want the data only to be accessible by an app that I'm developing, not to anyone with the server address.