Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Firewall issue no longer happening #1835

Merged
merged 1 commit into from
Oct 9, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 2 additions & 21 deletions docs/central-install-digital-ocean.rst
Original file line number Diff line number Diff line change
Expand Up @@ -89,8 +89,8 @@ Once you have that password in hand, you'll be able to use the **Launch Console*

Once you are in your server, you'll want to change your password so that people snooping your email do not gain access. You should be automatically asked for a new password the first time you log in. If you are not, type ``passwd`` and press **Enter**, then follow the instructions to choose a new password. From now on, you will use that password to log in.

Changing Server Settings
~~~~~~~~~~~~~~~~~~~~~~~~
Getting and Setting Up Central
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#. Make sure you are running Docker Engine v23.x and Docker Compose v2.16.x or greater.

Expand All @@ -100,25 +100,6 @@ Changing Server Settings

If you are using old versions, follow the instructions to install `Docker Engine <https://docs.docker.com/engine/install/ubuntu>`_ (not Desktop) for Ubuntu, the operating system we recommend and support. The instructions will help you setup the Docker ``apt`` repository and install the latest version of Docker Engine and Docker Compose.

#. Modify the system firewall for web form features in Central to work correctly (using Enketo).

.. code-block:: bash

$ ufw disable

You should see the message ``Firewall stopped and disabled on system startup``. If so, you have configured the firewall correctly.

.. admonition:: For advanced administrators

While it sounds dangerous, disabling your system firewall does not put your server at greater risk. In fact, most Linux operating systems come with the system firewall disabled.

If you don't want to disable the firewall entirely, you can instead configure Docker, ``iptables``, and ``ufw`` yourself. This can be difficult to do correctly, so we don't recommend most people try. Another option is to use an upstream network firewall.

The goal here is to ensure that it is possible to access the host through its external IP from within each Docker container. In particular, if you can successfully ``curl`` your Central website over HTTPS on its public domain name, all Enketo features should work correctly.

Getting and Setting Up Central
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep this header

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The header is up on line 92

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#. Download the software. In the server window, type:

.. code-block:: bash
Expand Down