Changeset - a68fc4abeda3
Parent rev.
Child rev.
[Not reviewed]
default
0 6 0
domruf - 11 years ago 2014-08-27 21:50:25
dominikruf@gmail.com
issue #7 remove obsolete configuration
6 files changed with 2 insertions and 150 deletions:
development.ini
28
docs/setup.rst
2
10
kallithea/bin/template.ini.mako
28
kallithea/config/deployment.ini_tmpl
28
production.ini
28
test.ini
28
0 comments (0 inline, 0 general)
development.ini
➞
Show inline comments
 
@@ -175,15 +175,12 @@ force_https = false
 
## use Strict-Transport-Security headers
 
use_htsts = false
 

			




	
	
	
		
 
## number of commits stats will parse on each iteration

			




	
	
	
		
 
commit_parse_limit = 25

			




	
	
	
		
 

			




	
	
	
		
 
## use gravatar service to display avatars

			




	
	
	
		
 
use_gravatar = true

			




	
	
	
		
 

			




	
	
	
		
 
## path to git executable

			




	
	
	
		
 
git_path = git

			




	
	
	
		
 

			




	
	
	
		
 
## git rev filter option, --all is the default filter, if you need to

			




	
	
	
		
 
## hide all refs in changelog switch this to --branches --tags

			




	
	
	
		
 
#git_rev_filter = --branches --tags

			




	
	
		
 
@@ -212,41 +209,16 @@ gist_alias_url =

			




	
	
	
		
 
api_access_controllers_whitelist =

			




	
	
	
		
 
#    ChangesetController:changeset_patch,

			




	
	
	
		
 
#    ChangesetController:changeset_raw,

			




	
	
	
		
 
#    FilesController:raw,

			




	
	
	
		
 
#    FilesController:archivefile

			




	
	
	
		
 

			




	
	
	
		
 
## alternative_gravatar_url allows you to use your own avatar server application

			




	
	
	
		
 
## the following parts of the URL will be replaced

			




	
	
	
		
 
## {email}        user email

			




	
	
	
		
 
## {md5email}     md5 hash of the user email (like at gravatar.com)

			




	
	
	
		
 
## {size}         size of the image that is expected from the server application

			




	
	
	
		
 
## {scheme}       http/https from Kallithea server

			




	
	
	
		
 
## {netloc}       network location from Kallithea server

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbyemail/{email}/{size}

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbymd5/{md5email}?s={size}

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
## container auth options

			




	
	
	
		
 
container_auth_enabled = false

			




	
	
	
		
 
proxypass_auth_enabled = false

			




	
	
	
		
 

			




	
	
	
		
 
## default encoding used to convert from and to unicode

			




	
	
	
		
 
## can be also a comma seperated list of encoding in case of mixed encodings

			




	
	
	
		
 
default_encoding = utf8

			




	
	
	
		
 

			




	
	
	
		
 
## overwrite schema of clone url

			




	
	
	
		
 
## available vars:

			




	
	
	
		
 
## scheme - http/https

			




	
	
	
		
 
## user - current user

			




	
	
	
		
 
## pass - password

			




	
	
	
		
 
## netloc - network location

			




	
	
	
		
 
## path - usually repo_name

			




	
	
	
		
 

			




	
	
	
		
 
#clone_uri = {scheme}://{user}{pass}{netloc}{path}

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracker for Kallithea (leave blank to disable, absent for default)

			




	
	
	
		
 
#bugtracker = https://bitbucket.org/conservancy/kallithea/issues

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracking mapping for commits messages

			




	
	
	
		
 
## comment out issue_pat, issue_server, issue_prefix to enable

			




	
	
	
		
 

			




        

    


    
    

    

        

                

                    docs/setup.rst
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -365,13 +365,13 @@ All other LDAP settings will likely be s

			




	
	
	
		
 
appropriately configured.

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
Authentication by container or reverse-proxy

			




	
	
	
		
 
--------------------------------------------

			




	
	
	
		
 

			




	
	
	
		
 
Starting with version 1.3, Kallithea supports delegating the authentication

			




	
	
	
		
 
Kallithea supports delegating the authentication

			




	
	
	
		
 
of users to its WSGI container, or to a reverse-proxy server through which all

			




	
	
	
		
 
clients access the application.

			




	
	
	
		
 

			




	
	
	
		
 
When these authentication methods are enabled in Kallithea, it uses the

			




	
	
	
		
 
username that the container/proxy (Apache/Nginx/etc) authenticated and doesn't

			




	
	
	
		
 
perform the authentication itself. The authorization, however, is still done by

			




	
	
		
 
@@ -380,27 +380,23 @@ Kallithea according to its settings.

			




	
	
	
		
 
When a user logs in for the first time using these authentication methods,

			




	
	
	
		
 
a matching user account is created in Kallithea with default permissions. An

			




	
	
	
		
 
administrator can then modify it using Kallithea's admin interface.

			




	
	
	
		
 
It's also possible for an administrator to create accounts and configure their

			




	
	
	
		
 
permissions before the user logs in for the first time.

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
Container-based authentication

			




	
	
	
		
 
''''''''''''''''''''''''''''''

			




	
	
	
		
 

			




	
	
	
		
 
In a container-based authentication setup, Kallithea reads the user name from

			




	
	
	
		
 
the ``REMOTE_USER`` server variable provided by the WSGI container.

			




	
	
	
		
 

			




	
	
	
		
 
After setting up your container (see `Apache's WSGI config`_), you'd need

			




	
	
	
		
 
to configure it to require authentication on the location configured for

			




	
	
	
		
 
Kallithea.

			




	
	
	
		
 

			




	
	
	
		
 
In order for Kallithea to start using the provided username, you should set the

			




	
	
	
		
 
following in the [app:main] section of your .ini file::

			




	
	
	
		
 

			




	
	
	
		
 
    container_auth_enabled = true

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
Proxy pass-through authentication

			




	
	
	
		
 
'''''''''''''''''''''''''''''''''

			




	
	
	
		
 

			




	
	
	
		
 
In a proxy pass-through authentication setup, Kallithea reads the user name

			




	
	
	
		
 
from the ``X-Forwarded-User`` request header, which should be configured to be

			




	
	
		
 
@@ -429,16 +425,12 @@ reverse-proxy setup with basic auth::

			




	
	
	
		
 
      RewriteEngine On

			




	
	
	
		
 
      RewriteCond %{LA-U:REMOTE_USER} (.+)

			




	
	
	
		
 
      RewriteRule .* - [E=RU:%1]

			




	
	
	
		
 
      RequestHeader set X-Forwarded-User %{RU}e

			




	
	
	
		
 
    </Location>

			




	
	
	
		
 

			




	
	
	
		
 
In order for Kallithea to start using the forwarded username, you should set

			




	
	
	
		
 
the following in the [app:main] section of your .ini file::

			




	
	
	
		
 

			




	
	
	
		
 
    proxypass_auth_enabled = true

			




	
	
	
		
 

			




	
	
	
		
 
.. note::

			




	
	
	
		
 
   If you enable proxy pass-through authentication, make sure your server is

			




	
	
	
		
 
   only accessible through the proxy. Otherwise, any client would be able to

			




	
	
	
		
 
   forge the authentication header and could effectively become authenticated

			




	
	
	
		
 
   using any account of their liking.

			




        

    


    
    

    

        

                

                    kallithea/bin/template.ini.mako
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -172,15 +172,12 @@ force_https = false

			




	
	
	
		
 
<%text>## use Strict-Transport-Security headers</%text>

			




	
	
	
		
 
use_htsts = false

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## number of commits stats will parse on each iteration</%text>

			




	
	
	
		
 
commit_parse_limit = 25

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## use gravatar service to display avatars</%text>

			




	
	
	
		
 
use_gravatar = true

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## path to git executable</%text>

			




	
	
	
		
 
git_path = git

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## git rev filter option, --all is the default filter, if you need to</%text>

			




	
	
	
		
 
<%text>## hide all refs in changelog switch this to --branches --tags</%text>

			




	
	
	
		
 
#git_rev_filter = --branches --tags

			




	
	
		
 
@@ -209,41 +206,16 @@ gist_alias_url =

			




	
	
	
		
 
api_access_controllers_whitelist =

			




	
	
	
		
 
#    ChangesetController:changeset_patch,

			




	
	
	
		
 
#    ChangesetController:changeset_raw,

			




	
	
	
		
 
#    FilesController:raw,

			




	
	
	
		
 
#    FilesController:archivefile

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## alternative_gravatar_url allows you to use your own avatar server application</%text>

			




	
	
	
		
 
<%text>## the following parts of the URL will be replaced</%text>

			




	
	
	
		
 
<%text>## {email}        user email</%text>

			




	
	
	
		
 
<%text>## {md5email}     md5 hash of the user email (like at gravatar.com)</%text>

			




	
	
	
		
 
<%text>## {size}         size of the image that is expected from the server application</%text>

			




	
	
	
		
 
<%text>## {scheme}       http/https from Kallithea server</%text>

			




	
	
	
		
 
<%text>## {netloc}       network location from Kallithea server</%text>

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbyemail/{email}/{size}

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbymd5/{md5email}?s={size}

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## container auth options</%text>

			




	
	
	
		
 
container_auth_enabled = false

			




	
	
	
		
 
proxypass_auth_enabled = false

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## default encoding used to convert from and to unicode</%text>

			




	
	
	
		
 
<%text>## can be also a comma seperated list of encoding in case of mixed encodings</%text>

			




	
	
	
		
 
default_encoding = utf8

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## overwrite schema of clone url</%text>

			




	
	
	
		
 
<%text>## available vars:</%text>

			




	
	
	
		
 
<%text>## scheme - http/https</%text>

			




	
	
	
		
 
<%text>## user - current user</%text>

			




	
	
	
		
 
<%text>## pass - password</%text>

			




	
	
	
		
 
<%text>## netloc - network location</%text>

			




	
	
	
		
 
<%text>## path - usually repo_name</%text>

			




	
	
	
		
 

			




	
	
	
		
 
#clone_uri = {scheme}://{user}{pass}{netloc}{path}

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## issue tracker for Kallithea (leave blank to disable, absent for default)</%text>

			




	
	
	
		
 
#bugtracker = https://bitbucket.org/conservancy/kallithea/issues

			




	
	
	
		
 

			




	
	
	
		
 
<%text>## issue tracking mapping for commits messages</%text>

			




	
	
	
		
 
<%text>## comment out issue_pat, issue_server, issue_prefix to enable</%text>

			




	
	
	
		
 

			




        

    


    
    

    

        

                

                    kallithea/config/deployment.ini_tmpl
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -169,15 +169,12 @@ force_https = false

			




	
	
	
		
 
## use Strict-Transport-Security headers

			




	
	
	
		
 
use_htsts = false

			




	
	
	
		
 

			




	
	
	
		
 
## number of commits stats will parse on each iteration

			




	
	
	
		
 
commit_parse_limit = 25

			




	
	
	
		
 

			




	
	
	
		
 
## use gravatar service to display avatars

			




	
	
	
		
 
use_gravatar = true

			




	
	
	
		
 

			




	
	
	
		
 
## path to git executable

			




	
	
	
		
 
git_path = git

			




	
	
	
		
 

			




	
	
	
		
 
## git rev filter option, --all is the default filter, if you need to

			




	
	
	
		
 
## hide all refs in changelog switch this to --branches --tags

			




	
	
	
		
 
#git_rev_filter = --branches --tags

			




	
	
		
 
@@ -206,41 +203,16 @@ gist_alias_url =

			




	
	
	
		
 
api_access_controllers_whitelist =

			




	
	
	
		
 
#    ChangesetController:changeset_patch,

			




	
	
	
		
 
#    ChangesetController:changeset_raw,

			




	
	
	
		
 
#    FilesController:raw,

			




	
	
	
		
 
#    FilesController:archivefile

			




	
	
	
		
 

			




	
	
	
		
 
## alternative_gravatar_url allows you to use your own avatar server application

			




	
	
	
		
 
## the following parts of the URL will be replaced

			




	
	
	
		
 
## {email}        user email

			




	
	
	
		
 
## {md5email}     md5 hash of the user email (like at gravatar.com)

			




	
	
	
		
 
## {size}         size of the image that is expected from the server application

			




	
	
	
		
 
## {scheme}       http/https from Kallithea server

			




	
	
	
		
 
## {netloc}       network location from Kallithea server

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbyemail/{email}/{size}

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbymd5/{md5email}?s={size}

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
## container auth options

			




	
	
	
		
 
container_auth_enabled = false

			




	
	
	
		
 
proxypass_auth_enabled = false

			




	
	
	
		
 

			




	
	
	
		
 
## default encoding used to convert from and to unicode

			




	
	
	
		
 
## can be also a comma seperated list of encoding in case of mixed encodings

			




	
	
	
		
 
default_encoding = utf8

			




	
	
	
		
 

			




	
	
	
		
 
## overwrite schema of clone url

			




	
	
	
		
 
## available vars:

			




	
	
	
		
 
## scheme - http/https

			




	
	
	
		
 
## user - current user

			




	
	
	
		
 
## pass - password

			




	
	
	
		
 
## netloc - network location

			




	
	
	
		
 
## path - usually repo_name

			




	
	
	
		
 

			




	
	
	
		
 
#clone_uri = {scheme}://{user}{pass}{netloc}{path}

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracker for Kallithea (leave blank to disable, absent for default)

			




	
	
	
		
 
#bugtracker = https://bitbucket.org/conservancy/kallithea/issues

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracking mapping for commits messages

			




	
	
	
		
 
## comment out issue_pat, issue_server, issue_prefix to enable

			




	
	
	
		
 

			




        

    


    
    

    

        

                

                    production.ini
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -173,15 +173,12 @@ force_https = false

			




	
	
	
		
 
## use Strict-Transport-Security headers

			




	
	
	
		
 
use_htsts = false

			




	
	
	
		
 

			




	
	
	
		
 
## number of commits stats will parse on each iteration

			




	
	
	
		
 
commit_parse_limit = 25

			




	
	
	
		
 

			




	
	
	
		
 
## use gravatar service to display avatars

			




	
	
	
		
 
use_gravatar = true

			




	
	
	
		
 

			




	
	
	
		
 
## path to git executable

			




	
	
	
		
 
git_path = git

			




	
	
	
		
 

			




	
	
	
		
 
## git rev filter option, --all is the default filter, if you need to

			




	
	
	
		
 
## hide all refs in changelog switch this to --branches --tags

			




	
	
	
		
 
#git_rev_filter = --branches --tags

			




	
	
		
 
@@ -210,41 +207,16 @@ gist_alias_url =

			




	
	
	
		
 
api_access_controllers_whitelist =

			




	
	
	
		
 
#    ChangesetController:changeset_patch,

			




	
	
	
		
 
#    ChangesetController:changeset_raw,

			




	
	
	
		
 
#    FilesController:raw,

			




	
	
	
		
 
#    FilesController:archivefile

			




	
	
	
		
 

			




	
	
	
		
 
## alternative_gravatar_url allows you to use your own avatar server application

			




	
	
	
		
 
## the following parts of the URL will be replaced

			




	
	
	
		
 
## {email}        user email

			




	
	
	
		
 
## {md5email}     md5 hash of the user email (like at gravatar.com)

			




	
	
	
		
 
## {size}         size of the image that is expected from the server application

			




	
	
	
		
 
## {scheme}       http/https from Kallithea server

			




	
	
	
		
 
## {netloc}       network location from Kallithea server

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbyemail/{email}/{size}

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbymd5/{md5email}?s={size}

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
## container auth options

			




	
	
	
		
 
container_auth_enabled = false

			




	
	
	
		
 
proxypass_auth_enabled = false

			




	
	
	
		
 

			




	
	
	
		
 
## default encoding used to convert from and to unicode

			




	
	
	
		
 
## can be also a comma seperated list of encoding in case of mixed encodings

			




	
	
	
		
 
default_encoding = utf8

			




	
	
	
		
 

			




	
	
	
		
 
## overwrite schema of clone url

			




	
	
	
		
 
## available vars:

			




	
	
	
		
 
## scheme - http/https

			




	
	
	
		
 
## user - current user

			




	
	
	
		
 
## pass - password

			




	
	
	
		
 
## netloc - network location

			




	
	
	
		
 
## path - usually repo_name

			




	
	
	
		
 

			




	
	
	
		
 
#clone_uri = {scheme}://{user}{pass}{netloc}{path}

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracker for Kallithea (leave blank to disable, absent for default)

			




	
	
	
		
 
#bugtracker = https://bitbucket.org/conservancy/kallithea/issues

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracking mapping for commits messages

			




	
	
	
		
 
## comment out issue_pat, issue_server, issue_prefix to enable

			




	
	
	
		
 

			




        

    


    
    

    

        

                

                    test.ini
                

                

                  
                      
                        

                      ➞

                      
                        
                  

                  
                      
                  
                      
                  
                      
                  
                      
                  
                  
                

                

                    Show inline comments
                    
                

        

        

            



	
	
		
 
@@ -175,15 +175,12 @@ force_https = false

			




	
	
	
		
 
## use Strict-Transport-Security headers

			




	
	
	
		
 
use_htsts = false

			




	
	
	
		
 

			




	
	
	
		
 
## number of commits stats will parse on each iteration

			




	
	
	
		
 
commit_parse_limit = 25

			




	
	
	
		
 

			




	
	
	
		
 
## use gravatar service to display avatars

			




	
	
	
		
 
use_gravatar = true

			




	
	
	
		
 

			




	
	
	
		
 
## path to git executable

			




	
	
	
		
 
git_path = git

			




	
	
	
		
 

			




	
	
	
		
 
## git rev filter option, --all is the default filter, if you need to

			




	
	
	
		
 
## hide all refs in changelog switch this to --branches --tags

			




	
	
	
		
 
#git_rev_filter = --branches --tags

			




	
	
		
 
@@ -212,41 +209,16 @@ gist_alias_url =

			




	
	
	
		
 
api_access_controllers_whitelist =

			




	
	
	
		
 
#    ChangesetController:changeset_patch,

			




	
	
	
		
 
#    ChangesetController:changeset_raw,

			




	
	
	
		
 
#    FilesController:raw,

			




	
	
	
		
 
#    FilesController:archivefile

			




	
	
	
		
 

			




	
	
	
		
 
## alternative_gravatar_url allows you to use your own avatar server application

			




	
	
	
		
 
## the following parts of the URL will be replaced

			




	
	
	
		
 
## {email}        user email

			




	
	
	
		
 
## {md5email}     md5 hash of the user email (like at gravatar.com)

			




	
	
	
		
 
## {size}         size of the image that is expected from the server application

			




	
	
	
		
 
## {scheme}       http/https from Kallithea server

			




	
	
	
		
 
## {netloc}       network location from Kallithea server

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbyemail/{email}/{size}

			




	
	
	
		
 
#alternative_gravatar_url = http://myavatarserver.com/getbymd5/{md5email}?s={size}

			




	
	
	
		
 

			




	
	
	
		
 

			




	
	
	
		
 
## container auth options

			




	
	
	
		
 
container_auth_enabled = false

			




	
	
	
		
 
proxypass_auth_enabled = false

			




	
	
	
		
 

			




	
	
	
		
 
## default encoding used to convert from and to unicode

			




	
	
	
		
 
## can be also a comma seperated list of encoding in case of mixed encodings

			




	
	
	
		
 
default_encoding = utf8

			




	
	
	
		
 

			




	
	
	
		
 
## overwrite schema of clone url

			




	
	
	
		
 
## available vars:

			




	
	
	
		
 
## scheme - http/https

			




	
	
	
		
 
## user - current user

			




	
	
	
		
 
## pass - password

			




	
	
	
		
 
## netloc - network location

			




	
	
	
		
 
## path - usually repo_name

			




	
	
	
		
 

			




	
	
	
		
 
#clone_uri = {scheme}://{user}{pass}{netloc}{path}

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracker for Kallithea (leave blank to disable, absent for default)

			




	
	
	
		
 
#bugtracker = https://bitbucket.org/conservancy/kallithea/issues

			




	
	
	
		
 

			




	
	
	
		
 
## issue tracking mapping for commits messages

			




	
	
	
		
 
## comment out issue_pat, issue_server, issue_prefix to enable

			




	
	
	
		
 

			




        

    



    


    



    



      

      





    
    0 comments (0 inline, 0 general)
    





    


  

  







  


    




    








    
        
    
    
        This site is powered by
            Kallithea 0.7.0,
        which is
        © 2010–2025 by various authors & licensed under GPLv3.