-Subproject commit 6714e91491e77570d65f72f96d1f6d9c623b4de6
+Subproject commit 0dbe0bb9a10796622eaf30f27b1d2c26f7771397
'$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
+ log_format piwik
+ '{"ip": "$remote_addr",'
+ '"host": "$host",'
+ '"path": "$request_uri",'
+ '"status": "$status",'
+ '"referrer": "$http_referer",'
+ '"user_agent": "$http_user_agent",'
+ '"length": $bytes_sent,'
+ '"generation_time_milli": $request_time,'
+ '"date": "$time_iso8601"}';
access_log /var/log/nginx/access.log main buffer=32k;
client_body_buffer_size 4K;
# NOTE: % getconf PAGESIZE
--- /dev/null
+server {
+ listen 80;
+ server_name
+ 3615.cyclocoop.org;
+
+ return 301 https://$host$request_uri;
+ }
--- /dev/null
+listen 443;
+include /etc/nginx/conf.d/ssl.conf;
+ssl_certificate /etc/nginx/x509.d/cyclo-3615/crt.pem;
+ssl_certificate_key /etc/nginx/x509.d/cyclo-3615/key.pem;
+ssl_client_certificate /etc/nginx/x509.d/cyclo-3615/user-crt.pem;
+ssl_session_timeout 5m;
--- /dev/null
+hint="run before: remote/runit-configure nginx -- $site"
+assert "sudo test -f /etc/nginx/x509.d/\"$site\"/key.pem" hint
+assert "sudo test -f ~wiki-$site/etc/ssh/id_rsa" hint
+
+sudo install -m 664 -o www -g www \
+ "$tool"/var/pub/x509/3615.cyclocoop.org/crt+ca.pem \
+ /etc/nginx/x509.d/"$site"/crt.pem
+
+"$tool"/local/apt-get-install ikiwiki \
+ xapian-omega \
+ libsearch-xapian-perl \
+ libdigest-sha-perl \
+ libhtml-scrubber-perl
+
+#"$tool"/local/adduser fcgi-"$site" \
+# --disabled-login \
+# --disabled-password \
+# --group \
+# --home /home/cyclo/var/ikiwiki/'"'$site'"' \
+# --shell /bin/false \
+# --system
+"$tool"/local/adduser www-"$site" \
+ --disabled-login \
+ --disabled-password \
+ --group \
+ --home /home/www/data/"$site" \
+ --shell /bin/false \
+ --system
+#sudo adduser fcgi-"$site" www-"$site"
+#sudo adduser fcgi-"$site" wiki-"$site"
+#sudo adduser www-"$site"-tls www-"$site"
+sudo install -d -m 2770 -o wiki-"$site" -g wiki-"$site" \
+ /home/cyclo/var/ikiwiki/"$site"
+sudo install -d -m 3771 -o git -g git \
+ /home/git/hooks/cyclo
+sudo install -d -m 2770 -o git -g www-"$site" \
+ /home/git/hooks/cyclo/"$site"
+sudo install -m 771 -o git -g git /dev/stdin \
+ /home/git/data/3615cyclo.git/hooks/post-update <<-EOF
+ #!/bin/sh -efux
+
+ # The cd below is why we must use this script.
+ # The current directory may not be accessible
+ # by the user running the ikiwiki.
+ # the execution of the ikiwiki wrapper would fail with :
+ # "E: Failed to change to directory '...': Permission denied"
+ cd /
+
+ exec /home/git/hooks/cyclo/$site/post-update.ikiwiki
+ EOF
+
+if sudo test -d /home/cyclo/var/ikiwiki/"$site"/src/.git
+ then sudo -u wiki-"$site" sh -$-c ' \
+ cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
+ git pull -v &&
+ git submodule update --recursive --init'
+ else
+ sudo -u wiki-"$site" sh -$-c ' \
+ umask 007 &&
+ git clone \
+ git@localhost:3615cyclo \
+ /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
+ cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
+ git config core.sharedRepository group
+ '
+ fi
+
+sudo adduser wiki-"$site" www-"$site"
+sudo adduser wiki-"$site" wiki-cyclo-wiki
+sudo install -d -m 2770 -o wiki-"$site" -g fcgi-"$site" \
+ /home/www/data/"$site"/cgi
+
+sudo install -d -m 2771 -o wiki-"$site" -g wiki-"$site" \
+ /home/cyclo/var/ikiwiki/"$site" \
+ /home/cyclo/var/ikiwiki/"$site"/src
+cd /
+sudo -u wiki-"$site" ikiwiki \
+ --verbose \
+ --setup /home/cyclo/var/ikiwiki/"$site"/src/ikiwiki.setup \
+ --refresh \
+ --wrappers
+sudo chmod g+w \
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki \
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/3615 # TODO: chmod all database
+
+sudo install -m 664 -o wiki-"$site" -g wiki-"$site" /dev/stdin \
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/omega.conf <<-EOF
+ database_dir .
+ template_dir ./templates
+ EOF
+
+sudo cat /etc/gitweb/gitweb.conf - <<-EOF |
+ \$export_ok = "cyclo-3615-export-ok";
+ \$favicon = "/gitweb/static/git-favicon.png";
+ \$home_link = "/";
+ \$home_link_str = '3615';
+ \$home_text = "/etc/gitweb/cyclo.home_text.html";
+ \$javascript = "/gitweb/static/gitweb.js";
+ \$logo = "/gitweb/static/git-logo.png";
+ \$my_uri = "/gitweb/";
+ \$my_url = "/gitweb/";
+ \$projects_list = "/etc/gitweb/cyclo-3615.projects.list";
+ \$site_footer = "/etc/gitweb/cyclo.site_footer.html";
+ \$site_header = "/etc/gitweb/cyclo.site_header.html";
+ \$site_name = "3615.cyclocoop.org";
+ @stylesheets = ("/gitweb/static/gitweb.css");#
+ EOF
+sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
+ /etc/gitweb/cyclo-3615.conf
+sudo install -m 640 -o root -g fcgi-gitweb \
+ "$tool"/etc/gitweb/cyclo.home_text.html \
+ /etc/gitweb/cyclo.home_text.html
+sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
+ /etc/gitweb/cyclo-3615.projects.list <<-EOF
+ cyclo3615.git
+ EOF
--- /dev/null
+gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
+"$tool"/remote/ssh root@"$local_ipv4" ' \
+ set +x
+ key=$(cat)
+ set -e -f -u -x
+ sudo install -d -m 1751 -o cyclo -g cyclo \
+ /home/cyclo \
+ /home/cyclo/var \
+ /home/cyclo/var/ikiwiki
+ getent passwd wiki-'"'$site'"' >/dev/null ||
+ sudo adduser wiki-'"'$site'"' \
+ --disabled-login \
+ --disabled-password \
+ --group \
+ --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \
+ --shell /bin/false \
+ --system
+ sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+ /home/cyclo/var/ikiwiki/'"'$site'"'
+ sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+ /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh
+ sudo install -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
+ /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF
+ $key
+ EOF
+ sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
+ /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi
+ sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
+ /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh
+ sudo install -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \
+ /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF
+ $key
+ EOF
+ '
--- /dev/null
+server_name
+ 3615.cyclocoop.org;
+
+access_log /home/www/log/cyclo-3615/nginx/access.piwik.log piwik;
+auth_basic "pour demander un compte: admin+3615@cyclocoop.org";
+auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
+client_body_buffer_size 8k;
+client_max_body_size 10m;
+error_page 404 /cgi/ikiwiki.cgi?do=create&page=$uri;
+
+location ~ ^/gitweb/static/.+\.(css|png|js)$ {
+ root /usr/share/;
+ access_log off;
+ expires 30d;
+ log_not_found off;
+ }
+location ~ ^/gitweb($|/) {
+ root /usr/share/gitweb;
+ fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
+ include /etc/nginx/conf.d/fastcgi.conf;
+ set $no_cache "0";
+ if ($request_method !~ ^(GET|HEAD)$) {
+ # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
+ set $no_cache "1";
+ }
+ if ($no_cache = "1") {
+ # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
+ add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
+ add_header X-Microcachable "0";
+ }
+ if ($http_cookie ~* "_mcnc") {
+ # NOTE: bypass cache if no-cache cookie is set.
+ set $no_cache "1";
+ }
+ fastcgi_cache_bypass $no_cache;
+ fastcgi_cache_use_stale updating;
+ fastcgi_cache_valid 200 10s;
+ fastcgi_cache_valid 404 30m;
+ fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
+ fastcgi_no_cache $no_cache;
+ fastcgi_param GITWEB_CONFIG /etc/gitweb/cyclo-3615.conf;
+ fastcgi_param PATH_INFO $uri;
+
+ fastcgi_pass_header Cookie;
+ fastcgi_pass_header Set-Cookie;
+ fastcgi_split_path_info ^(.+\.cgi)(/.+)$;
+
+ fastcgi_pass unix:/run/spawn-fcgi/gitweb;
+ }
+
+location /cgi/ikiwiki.cgi {
+ include /etc/nginx/conf.d/fastcgi.conf;
+ fastcgi_index cgi/ikiwiki.cgi;
+ fastcgi_pass unix:/run/spawn-fcgi/cyclo-3615;
+ }
+location ~* ^.+\.(css|gif|ico|jpeg|js|jpg|png)$ {
+ access_log off;
+ expires 30d;
+ log_not_found off;
+ }
+location ~* ^.+\.(html|txt|xhtml|xml)$ {
+ expires 60s;
+ }
+location ~ /\. {
+ access_log off;
+ deny all;
+ log_not_found off;
+ }
+location / {
+ index index.html;
+ }
+location /Public {
+ rewrite ^/Public(.*)$ https://wiki.cyclocoop.org$1 last;
+ #return 301 https://wiki.cyclocoop.org;
+ }
+
+# vim: ft=sh
--- /dev/null
+3615.cyclocoop.org
+++ /dev/null
-server {
- listen 80;
- server_name
- vie.cyclocoop.org;
-
- return 301 https://$host$request_uri;
- }
+++ /dev/null
-listen 443;
-include /etc/nginx/conf.d/ssl.conf;
-ssl_certificate /etc/nginx/x509.d/cyclo-vie/crt.pem;
-ssl_certificate_key /etc/nginx/x509.d/cyclo-vie/key.pem;
-ssl_client_certificate /etc/nginx/x509.d/cyclo-vie/user-crt.pem;
-ssl_session_timeout 5m;
+++ /dev/null
-hint="run before: remote/runit-configure nginx -- $site"
-assert "sudo test -f /etc/nginx/x509.d/\"$site\"/key.pem" hint
-assert "sudo test -f ~wiki-$site/etc/ssh/id_rsa" hint
-
-sudo install -m 664 -o www -g www \
- "$tool"/var/pub/x509/vie.cyclocoop.org/crt+ca.pem \
- /etc/nginx/x509.d/"$site"/crt.pem
-
-"$tool"/local/apt-get-install ikiwiki \
- xapian-omega \
- libsearch-xapian-perl \
- libdigest-sha-perl \
- libhtml-scrubber-perl
-
-"$tool"/local/adduser fcgi-"$site" \
- --disabled-login \
- --disabled-password \
- --group \
- --home /home/cyclo/var/ikiwiki/'"'$site'"' \
- --shell /bin/false \
- --system
-"$tool"/local/adduser www-"$site" \
- --disabled-login \
- --disabled-password \
- --group \
- --home /home/www/data/"$site" \
- --shell /bin/false \
- --system
-sudo adduser fcgi-"$site" www-"$site"
-sudo adduser fcgi-"$site" wiki-"$site"
-#sudo adduser www-"$site"-tls www-"$site"
-sudo install -d -m 2770 -o wiki-"$site" -g wiki-"$site" \
- /home/cyclo/var/ikiwiki/"$site"
-sudo install -d -m 3771 -o git -g git \
- /home/git/hooks/cyclo
-sudo install -d -m 750 -o wiki-"$site" -g git \
- /home/git/hooks/cyclo/"$site"
-sudo install -m 771 -o git -g git /dev/stdin \
- /home/git/data/cyclovie.git/hooks/post-update <<-EOF
- #!/bin/sh -efux
-
- # The cd below is why we must use this script.
- # The current directory may not be accessible
- # by the user running the ikiwiki.
- # the execution of the ikiwiki wrapper would fail with :
- # "E: Failed to change to directory '...': Permission denied"
- cd /
-
- exec /home/git/hooks/cyclo/$site/post-update.ikiwiki
- EOF
-
-if sudo test -d /home/cyclo/var/ikiwiki/"$site"/src/.git
- then sudo -u wiki-"$site" sh -$-c ' \
- cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
- git pull -v &&
- git submodule update --recursive --init'
- else
- sudo -u wiki-"$site" sh -$-c ' \
- umask 007 &&
- git clone \
- git@localhost:cyclovie \
- /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
- cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
- git config core.sharedRepository group &&
- git submodule update --recursive --init
- '
- fi
-
-sudo adduser wiki-"$site" www-"$site"
-sudo install -d -m 2770 -o wiki-"$site" -g fcgi-"$site" \
- /home/www/data/"$site"/cgi
-cd /
-sudo -u wiki-"$site" ikiwiki \
- --verbose \
- --setup /home/cyclo/var/ikiwiki/"$site"/src/ikiwiki.setup \
- --refresh \
- --wrappers
-sudo chown fcgi-"$site":wiki-"$site" \
- /home/git/hooks/cyclo/"$site"/post-update.ikiwiki
-sudo chmod 6755 \
- /home/git/hooks/cyclo/"$site"/post-update.ikiwiki
-sudo chmod g+w \
- /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki \
- /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/default
-
-sudo cat /etc/gitweb/gitweb.conf - <<-EOF |
- \$export_ok = "cyclo-vie-export-ok";
- \$favicon = "/gitweb/static/git-favicon.png";
- \$home_link = "/";
- \$home_link_str = 'vie';
- \$home_text = "/etc/gitweb/cyclo.home_text.html";
- \$javascript = "/gitweb/static/gitweb.js";
- \$logo = "/gitweb/static/git-logo.png";
- \$my_uri = "/gitweb/";
- \$my_url = "/gitweb/";
- \$projects_list = "/etc/gitweb/cyclo-vie.projects.list";
- \$site_footer = "/etc/gitweb/cyclo.site_footer.html";
- \$site_header = "/etc/gitweb/cyclo.site_header.html";
- \$site_name = "vie.cyclocoop.org";
- @stylesheets = ("/gitweb/static/gitweb.css");#
- EOF
-sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
- /etc/gitweb/cyclo-vie.conf
-sudo install -m 640 -o root -g fcgi-gitweb \
- "$tool"/etc/gitweb/cyclo.home_text.html \
- /etc/gitweb/cyclo.home_text.html
-sudo install -m 640 -o root -g fcgi-gitweb /dev/stdin \
- /etc/gitweb/cyclo-vie.projects.list <<-EOF
- cyclovie.git
- EOF
+++ /dev/null
-gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
-"$tool"/remote/ssh root@"$local_ipv4" ' \
- set +x
- key=$(cat)
- set -e -f -u -x
- sudo install -d -m 1751 -o cyclo -g cyclo \
- /home/cyclo \
- /home/cyclo/var \
- /home/cyclo/var/ikiwiki
- getent passwd wiki-'"'$site'"' >/dev/null ||
- sudo adduser wiki-'"'$site'"' \
- --disabled-login \
- --disabled-password \
- --group \
- --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \
- --shell /bin/false \
- --system
- sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
- /home/cyclo/var/ikiwiki/'"'$site'"'
- sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
- /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh
- sudo install -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
- /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF
- $key
- EOF
- sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
- /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi
- sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
- /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh
- sudo install -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \
- /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF
- $key
- EOF
- '
+++ /dev/null
-server_name
- vie.cyclocoop.org;
-
-auth_basic "pour demander un compte: admin+vie@cyclocoop.org";
-auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
-client_body_buffer_size 8k;
-client_max_body_size 10m;
-error_page 404 /cgi/ikiwiki.cgi?do=create&page=$uri;
-
-location ~ ^/gitweb/static/.+\.(css|png|js)$ {
- root /usr/share/;
- access_log off;
- expires 30d;
- log_not_found off;
- }
-location ~ ^/gitweb($|/) {
- root /usr/share/gitweb;
- fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
- include /etc/nginx/conf.d/fastcgi.conf;
- set $no_cache "0";
- if ($request_method !~ ^(GET|HEAD)$) {
- # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
- set $no_cache "1";
- }
- if ($no_cache = "1") {
- # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
- add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
- add_header X-Microcachable "0";
- }
- if ($http_cookie ~* "_mcnc") {
- # NOTE: bypass cache if no-cache cookie is set.
- set $no_cache "1";
- }
- fastcgi_cache_bypass $no_cache;
- fastcgi_cache_use_stale updating;
- fastcgi_cache_valid 200 10s;
- fastcgi_cache_valid 404 30m;
- fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
- fastcgi_no_cache $no_cache;
- fastcgi_param GITWEB_CONFIG /etc/gitweb/cyclo-vie.conf;
- fastcgi_param PATH_INFO $uri;
-
- fastcgi_pass_header Cookie;
- fastcgi_pass_header Set-Cookie;
- fastcgi_split_path_info ^(.+\.cgi)(/.+)$;
-
- fastcgi_pass unix:/run/spawn-fcgi/gitweb;
- }
-
-location /cgi/ikiwiki.cgi {
- include /etc/nginx/conf.d/fastcgi.conf;
- fastcgi_index cgi/ikiwiki.cgi;
- fastcgi_pass unix:/run/spawn-fcgi/cyclo-vie;
- }
-location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
- access_log off;
- expires 30d;
- log_not_found off;
- }
-location ~ /\. {
- access_log off;
- deny all;
- log_not_found off;
- }
-location / {
- index index.html;
- }
-
-# vim: ft=sh
+++ /dev/null
-vie.cyclocoop.org
# "E: Failed to change to directory '...': Permission denied"
cd /
+ /home/git/hooks/cyclo/cyclo-3615/post-update.ikiwiki &
exec /home/git/hooks/cyclo/$site/post-update.ikiwiki
EOF
git@localhost:cyclowiki \
/home/cyclo/var/ikiwiki/'"'$site'"'/src &&
cd /home/cyclo/var/ikiwiki/'"'$site'"'/src &&
- git config core.sharedRepository group &&
+ git config core.sharedRepository all &&
git submodule update --recursive --init
'
fi
--wrappers
sudo chmod g+w \
/home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki \
- /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/default
+ /home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/wiki # TODO: chmod all database
+
sudo install -m 664 -o wiki-"$site" -g wiki-"$site" /dev/stdin \
/home/cyclo/var/ikiwiki/"$site"/src/.ikiwiki/xapian/omega.conf <<-EOF
database_dir .
server_name
wiki.cyclocoop.org;
+access_log /home/www/log/cyclo-wiki/nginx/access.piwik.log piwik;
auth_basic "pour demander un compte: admin+wiki@cyclocoop.org";
auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
client_body_buffer_size 8k;
log_not_found off;
}
location ~ ^/gitweb($|/) {
+ auth_basic "no pasaran";
+ auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
root /usr/share/gitweb;
fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
include /etc/nginx/conf.d/fastcgi.conf;
fastcgi_index cgi/ikiwiki.cgi;
fastcgi_pass unix:/run/spawn-fcgi/cyclo-wiki;
}
-location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
+location ~* ^.+\.(css|gif|ico|jpeg|js|jpg|png)$ {
access_log off;
expires 30d;
log_not_found off;
}
+location ~* ^.+\.(html|txt|xhtml|xml)$ {
+ expires 60s;
+ }
location ~ /\. {
access_log off;
deny all;
location / {
index index.html;
}
+location /3615 {
+ rewrite ^/3615(.*)$ https://3615.cyclocoop.org$1 last;
+ #return 301 https://3615.cyclocoop.org;
+ }
# vim: ft=sh
--- /dev/null
+server_name
+ wiki.cyclocoop.org;
+
+auth_basic "pour demander un compte: admin+wiki@cyclocoop.org";
+auth_basic_user_file /home/www/data/cyclo-wiki/.htpasswd;
+client_body_buffer_size 8k;
+client_max_body_size 10m;
+error_page 404 /cgi/ikiwiki.cgi?do=create&page=$uri;
+
+location ~ ^/gitweb/static/.+\.(css|png|js)$ {
+ root /usr/share/;
+ access_log off;
+ expires 30d;
+ log_not_found off;
+ }
+location ~ ^/gitweb($|/) {
+ root /usr/share/gitweb;
+ fastcgi_param SCRIPT_FILENAME /usr/share/gitweb/gitweb.cgi;
+ include /etc/nginx/conf.d/fastcgi.conf;
+ set $no_cache "0";
+ if ($request_method !~ ^(GET|HEAD)$) {
+ # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
+ set $no_cache "1";
+ }
+ if ($no_cache = "1") {
+ # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
+ add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
+ add_header X-Microcachable "0";
+ }
+ if ($http_cookie ~* "_mcnc") {
+ # NOTE: bypass cache if no-cache cookie is set.
+ set $no_cache "1";
+ }
+ fastcgi_cache_bypass $no_cache;
+ fastcgi_cache_use_stale updating;
+ fastcgi_cache_valid 200 10s;
+ fastcgi_cache_valid 404 30m;
+ fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
+ fastcgi_no_cache $no_cache;
+ fastcgi_param GITWEB_CONFIG /etc/gitweb/cyclo-wiki.conf;
+ fastcgi_param PATH_INFO $uri;
+
+ fastcgi_pass_header Cookie;
+ fastcgi_pass_header Set-Cookie;
+ fastcgi_split_path_info ^(.+\.cgi)(/.+)$;
+
+ fastcgi_pass unix:/run/spawn-fcgi/gitweb;
+ }
+
+location /cgi/ikiwiki.cgi {
+ include /etc/nginx/conf.d/fastcgi.conf;
+ fastcgi_index cgi/ikiwiki.cgi;
+ fastcgi_pass unix:/run/spawn-fcgi/cyclo-wiki;
+ }
+location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
+ access_log off;
+ expires 30d;
+ log_not_found off;
+ }
+location ~ /\. {
+ access_log off;
+ deny all;
+ log_not_found off;
+ }
+location / {
+ index index.html;
+ }
+
+# vim: ft=sh
; ENREGISTREMENTS « A » (DNS -> adresse IPv4)
@ A IP4(GRESILLE)
+3615 A IP4(GRESILLE)
agendav A IP4(GRESILLE)
autoconfig A IP4(GRESILLE)
caldavzap A IP4(GRESILLE)
ssh A IP4(GRESILLE)
submission A IP4(GRESILLE)
sympa A IP4(GRESILLE)
-vie A IP4(GRESILLE)
wiki A IP4(GRESILLE)
www A IP4(GRESILLE)
--- /dev/null
+../cyclocoop.org
\ No newline at end of file
--- /dev/null
+ SERVICE = 3615
+ RANDFILE = var/sec/x509/openssl.rand
+ oid_section = extra_oids
+[ extra_oids ]
+ # NOTE: pour une éventuelle validation étendue (Extended Validation (EV))
+ jurisdictionOfIncorporationLocalityName = 1.3.6.1.4.1.311.60.2.1.1
+ jurisdictionOfIncorporationStateOrProvinceName = 1.3.6.1.4.1.311.60.2.1.2
+ jurisdictionOfIncorporationCountryName = 1.3.6.1.4.1.311.60.2.1.3
+[ req ]
+ prompt = no
+ distinguished_name = distinguished_name
+ string_mask = pkix
+ #x509_extensions = root_extensions
+ #req_extensions = extension
+ #attributes = req_attributes
+[ distinguished_name ]
+ countryName = $ENV::x509_country
+ stateOrProvinceName = $ENV::x509_state_or_province
+ localityName = $ENV::x509_state_or_province
+ 0.organizationName = $ENV::x509_organization
+ organizationalUnitName = 3615 CYCLO
+ commonName = $SERVICE.$ENV::x509_host
+ businessCategory = $ENV::x509_business_category
+ jurisdictionOfIncorporationLocalityName = $ENV::x509_state_or_province
+ jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
+ jurisdictionOfIncorporationCountryName = $ENV::x509_country
+[ extensions ]
+ basicConstraints = critical,CA:TRUE,pathlen:0
+ keyUsage = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+ subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
+ subjectKeyIdentifier = hash
+ issuerAltName = issuer:copy
+ authorityKeyIdentifier = keyid:always,issuer:always
+ authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
+ crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+ certificatePolicies = @certificate_policies
+[ self_signed_extensions ]
+ basicConstraints = critical,CA:TRUE,pathlen:0
+ keyUsage = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+ subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
+ subjectKeyIdentifier = hash
+ issuerAltName = issuer:copy
+ authorityKeyIdentifier = keyid:always,issuer:always
+ authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+ crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+[ user_extensions ]
+ basicConstraints = critical,CA:FALSE,pathlen:0
+ keyUsage = digitalSignature,keyEncipherment
+ subjectAltName = email:$ENV::user@$ENV::x509_host
+ subjectKeyIdentifier = hash
+ issuerAltName = issuer:copy
+ authorityKeyIdentifier = keyid:always,issuer:always
+ authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+[ certificate_policies ]
+ policyIdentifier = 1.2.250.1.42
+ CPS.1 = https://www.$ENV::x509_host/x509/cps
+[ ca ]
+ private_key = var/sec/x509/$ENV::x509/key.pem
+ dir = var/pub/x509/$ENV::x509
+ crl_dir = $dir
+ crlnumber = $dir/crl.num
+ crl = $dir/crl.pem
+ database = $dir/idx.txt
+[ self_signed_ca ]
+ private_key = var/sec/x509/$ENV::x509/key.pem
+ dir = var/pub/x509/$ENV::x509
+ crl_dir = $dir
+ crlnumber = $dir/crl.self-signed.num
+ crl = $dir/crl.self-signed.pem
+ database = $dir/idx.self-signed.txt
--- /dev/null
+ SERVICE = 3615
+ HOME = .
+ RANDFILE = var/sec/x509/openssl.rand
+[ req ]
+ prompt = no
+ distinguished_name = user_distinguished_name
+ string_mask = pkix
+[ user_distinguished_name ]
+ countryName = $ENV::x509_country
+ stateOrProvinceName = $ENV::x509_state_or_province
+ #localityName =
+ 0.organizationName = $ENV::x509_organization
+ organizationalUnitName = Certificat utilisateurice du 3615 CYCLO
+ commonName = $ENV::user
+++ /dev/null
-../cyclocoop.org
\ No newline at end of file
+++ /dev/null
- SERVICE = vie
- RANDFILE = var/sec/x509/openssl.rand
- oid_section = extra_oids
-[ extra_oids ]
- # NOTE: pour une éventuelle validation étendue (Extended Validation (EV))
- jurisdictionOfIncorporationLocalityName = 1.3.6.1.4.1.311.60.2.1.1
- jurisdictionOfIncorporationStateOrProvinceName = 1.3.6.1.4.1.311.60.2.1.2
- jurisdictionOfIncorporationCountryName = 1.3.6.1.4.1.311.60.2.1.3
-[ req ]
- prompt = no
- distinguished_name = distinguished_name
- string_mask = pkix
- #x509_extensions = root_extensions
- #req_extensions = extension
- #attributes = req_attributes
-[ distinguished_name ]
- countryName = $ENV::x509_country
- stateOrProvinceName = $ENV::x509_state_or_province
- localityName = $ENV::x509_state_or_province
- 0.organizationName = $ENV::x509_organization
- organizationalUnitName = CycloVie
- commonName = $SERVICE.$ENV::x509_host
- businessCategory = $ENV::x509_business_category
- jurisdictionOfIncorporationLocalityName = $ENV::x509_state_or_province
- jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
- jurisdictionOfIncorporationCountryName = $ENV::x509_country
-[ extensions ]
- basicConstraints = critical,CA:TRUE,pathlen:0
- keyUsage = keyCertSign,cRLSign,digitalSignature,keyEncipherment
- subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
- subjectKeyIdentifier = hash
- issuerAltName = issuer:copy
- authorityKeyIdentifier = keyid:always,issuer:always
- authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
- crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
- certificatePolicies = @certificate_policies
-[ self_signed_extensions ]
- basicConstraints = critical,CA:TRUE,pathlen:0
- keyUsage = keyCertSign,cRLSign,digitalSignature,keyEncipherment
- subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
- subjectKeyIdentifier = hash
- issuerAltName = issuer:copy
- authorityKeyIdentifier = keyid:always,issuer:always
- authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
- crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
-[ user_extensions ]
- basicConstraints = critical,CA:FALSE,pathlen:0
- keyUsage = digitalSignature,keyEncipherment
- subjectAltName = email:$ENV::user@$ENV::x509_host
- subjectKeyIdentifier = hash
- issuerAltName = issuer:copy
- authorityKeyIdentifier = keyid:always,issuer:always
- authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
-[ certificate_policies ]
- policyIdentifier = 1.2.250.1.42
- CPS.1 = https://www.$ENV::x509_host/x509/cps
-[ ca ]
- private_key = var/sec/x509/$ENV::x509/key.pem
- dir = var/pub/x509/$ENV::x509
- crl_dir = $dir
- crlnumber = $dir/crl.num
- crl = $dir/crl.pem
- database = $dir/idx.txt
-[ self_signed_ca ]
- private_key = var/sec/x509/$ENV::x509/key.pem
- dir = var/pub/x509/$ENV::x509
- crl_dir = $dir
- crlnumber = $dir/crl.self-signed.num
- crl = $dir/crl.self-signed.pem
- database = $dir/idx.self-signed.txt
+++ /dev/null
- SERVICE = vie
- HOME = .
- RANDFILE = var/sec/x509/openssl.rand
-[ req ]
- prompt = no
- distinguished_name = user_distinguished_name
- string_mask = pkix
-[ user_distinguished_name ]
- countryName = $ENV::x509_country
- stateOrProvinceName = $ENV::x509_state_or_province
- #localityName =
- 0.organizationName = $ENV::x509_organization
- organizationalUnitName = Certificat utilisateurice de la CycloVie
- commonName = $ENV::user
--- /dev/null
+"$tool"/local/www-init
+
+home=~www-data/"$sv"
+
+#"$tool"/local/adduser fcgi-"$sv" \
+# --disabled-login \
+# --disabled-password \
+# --group \
+# --home "$home" \
+# --shell /bin/false \
+# --system
--- /dev/null
+home=~www/log/"$sv"/spawn-fcgi
+
+"$tool"/local/adduser log-fcgi-"$sv" \
+ --disabled-login \
+ --disabled-password \
+ --group \
+ --home "$home" \
+ --shell /bin/false \
+ --system
+
+sudo install -d -m 770 -o log-fcgi-"$sv" -g log-fcgi-"$sv" \
+ "$home"
--- /dev/null
+#!/bin/sh -eux
+sv=${PWD%/log}
+sv=${sv#/etc/sv/}
+eval home="~log-fcgi-$sv"
+
+cd "$home"
+exec chpst -u log-fcgi-"$sv":log-fcgi-"$sv" \
+ svlogd -v -tt "$home"
--- /dev/null
+#!/bin/sh -eux
+exec 2>&1
+sv=${PWD#/etc/sv/}
+
+/usr/bin/sv -w 3 start sshd
+
+install -d -m 1771 -o root -g root \
+ /run/spawn-fcgi
+
+exec /usr/bin/spawn-fcgi \
+ -u wiki-"$sv" \
+ -g www-"$sv" \
+ -U www-data \
+ -G www-data \
+ -M 0660 \
+ -n \
+ -s /run/spawn-fcgi/"$sv" \
+ -- /usr/bin/multiwatch \
+ --forks 3 \
+ -- /usr/sbin/fcgiwrap
+++ /dev/null
-"$tool"/local/www-init
-
-home=~www-data/"$sv"
-
-"$tool"/local/adduser fcgi-"$sv" \
- --disabled-login \
- --disabled-password \
- --group \
- --home "$home" \
- --shell /bin/false \
- --system
+++ /dev/null
-home=~www/log/"$sv"/spawn-fcgi
-
-"$tool"/local/adduser log-fcgi-"$sv" \
- --disabled-login \
- --disabled-password \
- --group \
- --home "$home" \
- --shell /bin/false \
- --system
-
-sudo install -d -m 770 -o log-fcgi-"$sv" -g log-fcgi-"$sv" \
- "$home"
+++ /dev/null
-#!/bin/sh -eux
-sv=${PWD%/log}
-sv=${sv#/etc/sv/}
-eval home="~log-fcgi-$sv"
-
-cd "$home"
-exec chpst -u log-fcgi-"$sv":log-fcgi-"$sv" \
- svlogd -v -tt "$home"
+++ /dev/null
-#!/bin/sh -eux
-exec 2>&1
-sv=${PWD#/etc/sv/}
-
-/usr/bin/sv -w 3 start sshd
-
-install -d -m 1771 -o root -g root \
- /run/spawn-fcgi
-
-exec /usr/bin/spawn-fcgi \
- -u fcgi-"$sv" \
- -g fcgi-"$sv" \
- -U www-data \
- -G www-data \
- -M 0660 \
- -n \
- -s /run/spawn-fcgi/"$sv" \
- -- /usr/bin/multiwatch \
- --forks 3 \
- -- /usr/sbin/fcgiwrap
home=~www-data/"$sv"
-"$tool"/local/adduser fcgi-"$sv" \
- --disabled-login \
- --disabled-password \
- --group \
- --home "$home" \
- --shell /bin/false \
- --system
+#"$tool"/local/adduser fcgi-"$sv" \
+# --disabled-login \
+# --disabled-password \
+# --group \
+# --home "$home" \
+# --shell /bin/false \
+# --system
/run/spawn-fcgi
exec /usr/bin/spawn-fcgi \
- -u fcgi-"$sv" \
- -g fcgi-"$sv" \
+ -u wiki-"$sv" \
+ -g www-"$sv" \
-U www-data \
-G www-data \
-M 0660 \
--- /dev/null
+../cyclocoop.org
\ No newline at end of file
--- /dev/null
+-----BEGIN X509 CRL-----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=
+-----END X509 CRL-----
--- /dev/null
+-----BEGIN X509 CRL-----
+MIIDuDCCAaACAQEwDQYJKoZIhvcNAQENBQAwggFcMQswCQYDVQQGEwJGUjEjMCEG
+A1UECB4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxIzAhBgNVBAceGgDOAGwA
+ZQAtAGQAZQAtAEYAcgBhAG4AYwBlMRUwEwYDVQQKEwxDeWNsb2ZmaWNpbmUxEzAR
+BgNVBAsTCjM2MTUgQ1lDTE8xGzAZBgNVBAMTEjM2MTUuY3ljbG9jb29wLm9yZzFL
+MEkGA1UEDx5CAFYAMQAuADAALAAgAG4AaQAgAGQAaQBlAHUAIABuAGkAIABtAGEA
+7gB0AHIAZQAgAG4AaQAgAG0AbwB0AGUAdQByMSswKQYLKwYBBAGCNzwCAQEeGgDO
+AGwAZQAtAGQAZQAtAEYAcgBhAG4AYwBlMSswKQYLKwYBBAGCNzwCAQIeGgDOAGwA
+ZQAtAGQAZQAtAEYAcgBhAG4AYwBlMRMwEQYLKwYBBAGCNzwCAQMTAkZSFw0xNDA0
+MjMwMzAxNDdaFw0yNDA0MjMwMzAxNDdaoA4wDDAKBgNVHRQEAwIBADANBgkqhkiG
+9w0BAQ0FAAOCAgEAipftjcNdKBTysqIkEGEPWNZfONqEDJ8sRiMTkIfxuyiklg9u
+sxeax8o+Xxpao3ZLDcsyWISjxSVWwaDXRX9Pyb7YROMEGb44B7Qv6pZbD4YygAoh
+C9xgxlGOGFkErsFwgIYrfQp1LggZqwG+QOUKuX7MmTSEQu+pjKSG5Fjwe5nfxRNI
+f1VEXHVB45h8fee8pYIBhD3GU8srJNRi1e6FvSFQgWawicE37z/7lkrhBdO9kl2F
+Z2mjPmQM0c42eH1NMOHerYl9X2FDy4CHt50HcosXsoyWrvl5R2//OikWSUAZg1n6
+atNG7Ld8/+elMnvD9ENqHGj0R5JQbaroVGgbBw8fH36tf5o2zptCpbDhm0rz8+bL
+14DN6PWgrLM8G/GAZ7X+Lne1zZg3jH0jKImL+LU5+rrdkL+meS4tKBG7wwH4OwMT
+tg/j11e3ml98LBgMQ40BCFMq85n3S+2wuSULRxMU71W6+2W9PQqtig1P8WMO9Xrr
+/ApMqs6mat+Zj7lALygjkxK9W/GWZBKyMkYREbCjD2mKSKhDEEOFD/BVtesdg6RU
+fPay7rOr77UeP3O0x5LQRBwlimqk0ACxpVvhmKOQlnrJdbC0cgN4qxJx4lQm0UKo
+SuqZdfc8y3ODi9COEz4SlQDfKcfGDXR+ql8F/PxZ/u5jZH71BFantr4vLU0=
+-----END X509 CRL-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN X509 CRL-----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=
+-----END X509 CRL-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN X509 CRL-----
+MIIDuDCCAaACAQEwDQYJKoZIhvcNAQENBQAwggFcMQswCQYDVQQGEwJGUjEjMCEG
+A1UECB4aAM4AbABlAC0AZABlAC0ARgByAGEAbgBjAGUxIzAhBgNVBAceGgDOAGwA
+ZQAtAGQAZQAtAEYAcgBhAG4AYwBlMRUwEwYDVQQKEwxDeWNsb2ZmaWNpbmUxEzAR
+BgNVBAsTCjM2MTUgQ1lDTE8xGzAZBgNVBAMTEjM2MTUuY3ljbG9jb29wLm9yZzFL
+MEkGA1UEDx5CAFYAMQAuADAALAAgAG4AaQAgAGQAaQBlAHUAIABuAGkAIABtAGEA
+7gB0AHIAZQAgAG4AaQAgAG0AbwB0AGUAdQByMSswKQYLKwYBBAGCNzwCAQEeGgDO
+AGwAZQAtAGQAZQAtAEYAcgBhAG4AYwBlMSswKQYLKwYBBAGCNzwCAQIeGgDOAGwA
+ZQAtAGQAZQAtAEYAcgBhAG4AYwBlMRMwEQYLKwYBBAGCNzwCAQMTAkZSFw0xNDA0
+MjMwMzAxNDdaFw0yNDA0MjMwMzAxNDdaoA4wDDAKBgNVHRQEAwIBADANBgkqhkiG
+9w0BAQ0FAAOCAgEAipftjcNdKBTysqIkEGEPWNZfONqEDJ8sRiMTkIfxuyiklg9u
+sxeax8o+Xxpao3ZLDcsyWISjxSVWwaDXRX9Pyb7YROMEGb44B7Qv6pZbD4YygAoh
+C9xgxlGOGFkErsFwgIYrfQp1LggZqwG+QOUKuX7MmTSEQu+pjKSG5Fjwe5nfxRNI
+f1VEXHVB45h8fee8pYIBhD3GU8srJNRi1e6FvSFQgWawicE37z/7lkrhBdO9kl2F
+Z2mjPmQM0c42eH1NMOHerYl9X2FDy4CHt50HcosXsoyWrvl5R2//OikWSUAZg1n6
+atNG7Ld8/+elMnvD9ENqHGj0R5JQbaroVGgbBw8fH36tf5o2zptCpbDhm0rz8+bL
+14DN6PWgrLM8G/GAZ7X+Lne1zZg3jH0jKImL+LU5+rrdkL+meS4tKBG7wwH4OwMT
+tg/j11e3ml98LBgMQ40BCFMq85n3S+2wuSULRxMU71W6+2W9PQqtig1P8WMO9Xrr
+/ApMqs6mat+Zj7lALygjkxK9W/GWZBKyMkYREbCjD2mKSKhDEEOFD/BVtesdg6RU
+fPay7rOr77UeP3O0x5LQRBwlimqk0ACxpVvhmKOQlnrJdbC0cgN4qxJx4lQm0UKo
+SuqZdfc8y3ODi9COEz4SlQDfKcfGDXR+ql8F/PxZ/u5jZH71BFantr4vLU0=
+-----END X509 CRL-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN PGP SIGNATURE-----
+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+=qvUU
+-----END PGP SIGNATURE-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN PGP SIGNATURE-----
+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+=RphT
+-----END PGP SIGNATURE-----
--- /dev/null
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----