github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-26 19:13:39 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

move secret token into redis to ease install

Browse Source
This commit is contained in:
Sam 2013-08-20 17:09:42 +10:00
parent 0061fc33cd
commit b5b22f0f36
2 changed files with 7 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
config/initializers/secret_token.rb
View File

@ -1,18 +1,10 @@
# Definitely change this when you deploy to production. Ours is replaced by jenkins.
# This token is used to secure sessions, we don't mind shipping with one to ease test and debug,
# however, the stock one should never be used in production, people will be able to crack
# session cookies.
# We have had lots of config issues with SECRET_TOKEN to avoid this mess we are moving it to redis
# if you feel strongly that it does not belong there use ENV['SECRET_TOKEN']
#
# Generate a new secret with "rake secret". Copy the output of that command and paste it
# in your secret_token.rb as the value of Discourse::Application.config.secret_token:
#
# Discourse::Application.config.secret_token = "SET_SECRET_HERE"
if Rails.env.test? || Rails.env.development? || Rails.env == "profile"
Discourse::Application.config.secret_token = "47f5390004bf6d25bb97083fb98e7cc133ab450ba814dd19638a78282b4ca291"
else
raise "You must set a secret token in ENV['SECRET_TOKEN'] or in config/initializers/secret_token.rb" if ENV['SECRET_TOKEN'].blank?
Discourse::Application.config.secret_token = ENV['SECRET_TOKEN']
token = ENV['SECRET_TOKEN'] || $redis.get('SECRET_TOKEN')
unless token && token.length == 128
token = SecureRandom.hex(64)
$redis.set('SECRET_TOKEN',token)
end
Discourse::Application.config.secret_token = token

6
docs/INSTALL-ubuntu.md
View File

@ -189,12 +189,6 @@ Edit /var/www/discourse/config/discourse.pill
- Ensure appropriate Bluepill.application line is uncommented
- search for "host to run on" and change to current hostname
Edit /var/www/discourse/config/initializers/secret_token.rb
- uncomment secret_token line
- replace SET_SECRET_HERE with the output from 'RAILS_ENV=production rake secret' command run from the discourse directory (`/var/www/discourse`)
- delete the lines below as per instructions in the file
Edit /var/www/discourse/config/environments/production.rb
- browse througn all the settings
- be sure to add your mail server SMTP settings so outgoing mail can be sent (we recommend [Mandrill](https://mandrillapp.com))