[Freedombox-discuss] Drop exmachina, use sudo instead - at least short term (Was: Kerberos and remctl instead of exmachina?)

[Jonas Smedegaard]

Quoting Tim Retout (2013-09-09 00:02:29)
> How is plinth being deployed long-term?  Presumably it will always run 
> as a new 'plinth' user, not www-data?  (Currently I think it just runs 
> the cherrypy server on port 8080?)  If the plinth packaging ever 
> changes to run under Apache or nginx, then it would make sense to use 
> FastCGI or mod_wsgi in daemon mode rather than CGI, to avoid having to 
> use mod_suexec or grant these sudo rights to the web server.

I recommend to include an uwsgi snippet with web application packages, 
and for FreedomBox to install uwsgi with appropriate backends and web 
server middleware.  That approach makes web application packaging 
agnostic to choice of web server.

As concrete example, see the ciderwebmail package (get the most recent 
packaging from experimental or git).

Since CiderWebmail is Perl PSGI - not Python WSGI as Plinth - the uwsgi 
snippet itself could be based on this one instead: 
http://source.jones.dk/?p=local-COMMON.git;a=blob;f=uwsgi/apps-available/local-django-app.ini

(also available as git clone: git://source.jones.dk/local-COMMON )


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20130909/f9389589/attachment.sig>