Hello, and thank you for your quick reply!
Okay, thanks for the info, I'll play around with the restricted field...
sfonteneau wrote:
Regarding replication:
Clients continue to send their inventories to the main server.
The repositories only replicate packages! Therefore, it's not necessary to install tis-waptserver.
The online documentation is still being finalized, so some parts are missing. ^^
Yes, by the way, just so you know, if it helps with Debian 8, I also had to do the following things:
-> Add the wapt user to the sudo group: usermod wapt -a -G sudo
-> Replace the line
Code: Select all
ExecStart=/usr/bin/sudo -u %i /usr/bin/syncthing -logflags=0 -home=/opt/wapt/.config/syncthing/ -no-restart
by
Code: Select all
ExecStart=/usr/bin/sudo -u wapt /usr/bin/syncthing -logflags=0 -home=/opt/wapt/.config/syncthing/ -no-restart
in the file /etc/systemd/system/
syncthing.service (and not /etc/systemd/system/)
syncthing@.service (otherwise the service wouldn't start automatically on reboot...)
So, after performing the following operations:
===========================================
-> Create the file /etc/apache2/sites-available/wapt.conf
<VirtualHost *:80>
DocumentRoot "/var/www"
LogLevel warn
CustomLog /var/log/apache2/wapt.log combined
ErrorLog /var/log/apache2/wapt-error.log
ProxyPass /wapt!
ProxyPass /waptdev!
ProxyPass /wapt-host !
ProxyPass /wapt-group !
ProxyPass /download.php !
ProxyPass /wapt/icons!
ProxyPass /debian !
ProxyPass /waptwua!
ProxyPass /
http://127.0.0.1:8080/
ProxyPassReverse /
http://127.0.0.1:8080/
<Directory "/var/www">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allowed, deny
allow from all
</Directory>
<Directory "/var/www/wapt-host">
Options - Indexes
AllowOverride None
Order allowed, deny
allow from all
</Directory>
</VirtualHost>
-> Activate the configuration
cd /etc/apache2/sites-enabled
ln -s ../sites-available/wapt.conf wapt.conf
-> Enable the necessary Apache modules
a2enmod proxy
a2enmod proxy_http
a2enmod socache_shmcb
-> Delete the default configuration
rm /etc/apache2/sites-enabled/000-default.conf
-> Restart Apache services
systemctl restart apache2.service
===========================================
The server replica correctly lists the packages via
http://wapt-repo2.mydomain.lan/wapt/
However, the directory
http://wapt-repo2.mydomain.lan/wapt-host/ is empty (no Packages file, ...), is this normal or should it also be replicated via syncthing?
sfonteneau wrote:
On the client side, in wapt-get.ini, wapt_server must remain the address of the main Wapt server
and repo_url must point to the nearest repo.
Example :
Code: Select all
[global]
wapt_server = https://srvwapt.mydomain.lan
repo_url = http://wapt-repo2.mydomain.lan/wapt
Alternatively, set up the DNS SRV records and leave the fields blank
Yes, I saw that in the documentation too; the SRV records are configured in DNS, but the clients have empty fields in the .ini file. I just had (yet another) question:
In the case of a multi-site infrastructure, should SRV records be placed at the global level (MYDOMAIN.LAN zone) and/or at the SITE level (SITE1._sites.MYDOMAIN.LAN) like _gc, _ldap and _kerberos records?
And how can we verify that a client is retrieving the correct SRV record for their site?
THANKS
