diff --git a/docs/installation/docker/site-template/customizations.md b/docs/installation/docker/site-template/customizations.md new file mode 100644 index 000000000..404fe25f9 --- /dev/null +++ b/docs/installation/docker/site-template/customizations.md @@ -0,0 +1,52 @@ +# Customizations + +The following sections describe optional customizations you can make to further modify your Islandora site. + +## Modifying settings.php + +TODO + +## Modifying robots.txt + +TODO + +## Nginx customizations + +### Blocking IP Addresses + +TODO + +### Blocking by User Agent + +TODO + +## Traefik customizations + +### Using Your Certs Instead of LetsEncrypt + +TODO + +### TLS Settings + +Traefik allows you to modify security settings by doing things like setting a minimum TLS version or specifying cipher suites. Isle Site Template ships with two versions of the TLS settings file, one [for development](https://github.com/Islandora-Devops/isle-site-template/blob/main/dev-tls.yml), and one [for production](https://github.com/Islandora-Devops/isle-site-template/blob/main/prod-tls.yml). + +These files are mounted as volumes in the Traefik containers, so you can modify them as desired. + +More information is available in the [Traefik documentation](https://doc.traefik.io/traefik/https/tls/#tls-options) + +### Hiding Fedora from the public + +By default, your Fedora repository will be exposed to the public at fcrepo.${DOMAIN}. If you don't want the public to be able to access your repository you can add the `traefik-disable` label to the fcrepo-prod service in your docker-compose.yml. + +``` + labels: + <<: [*traefik-disable, *fcrepo-labels] +``` + +If you do this, you can remove the fcrepo URL from your DNS records. + +### Exposing ActiveMQ, Blazegraph, and Solr + +By default, these services are hidden by Traefik. If you want to allow access to them, you need to remove the `traefik-disable` label from your docker-compose.yml. + +You will also need to add their URL to your DNS record. The URLs are defined in the docker-compose.yml, and by default will be activemq.{DOMAIN}, blazegraph.{DOMAIN}, and solr.{DOMAIN} diff --git a/mkdocs.yml b/mkdocs.yml index 7f822e551..c8917bda0 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -139,6 +139,7 @@ nav: - 'Troubleshooting' : 'installation/docker/isle-dc/docker-troubleshooting.md' - 'ISLE Site Template': - 'Introduction to Site Template': 'installation/docker/site-template/site-template.md' + - 'Customizations' : 'installation/docker/site-template/customizations.md' - 'Ansible Playbook': 'installation/playbook.md' - Manual Installation: - 'Introduction': 'installation/manual/introduction.md'