update permissions

doc/permissions_setup.md

@@ -2,10 +2,20 @@ To remember the setup
 
 #### Dir permissions
 ```
-# in comex2 dir
-chown -R rloth:www-data .
+cd /path/to/comex2
 
-# writeable data
+# dirs must have u+x to be readable in unix
+find . -type d -exec chmod 755 {} +
+
+# files don't need +x, except php
+find . -type f -exec chmod 644 {} +
+chmod 755 *.php
+chmod 755 services/*.py
+
+# data must be writeable
 chmod 774 data
 chmod 774 data/shared_mysql_data/  # <=> u+rwx, g+rwx, o+r
+
+# and all this belongs to www-data group
+chown -R :www-data .
 ```

run.sh

@@ -19,7 +19,7 @@ fi
 # anyway we always need a simple web server to run the services
 
 echo "binding gunicorn to unix:/tmp/comex.sock"
-gunicorn -b unix:/tmp/comex.sock services.main:app --workers 8
+gunicorn -b unix:/tmp/comex.sock services.main:app --workers 2
 
 # export COMEX_HOST=$(grep -oP '(?<=COMEX_HOST=).*' config/parametres_comex.ini)
 # export COMEX_PORT=$(grep -oP '(?<=COMEX_PORT=).*' config/parametres_comex.ini)

setup/dockers/docker-compose.yml

@@ -4,12 +4,14 @@
       comex_db:
         image: comex2_mysql_server:latest
         build: ./comex2_mysql_server
+        container_name: comex_db
         environment:
          - MYSQL_ROOT_PASSWORD=very-safe-pass
         volumes:
          - ../../data/shared_mysql_data:/var/lib/mysql
 
       doors_test:
+        container_name: doors_test
         image: minidoors:latest
         build: ./minidoors
         ports:
@@ -21,6 +23,7 @@
      #                                          and DOORS_PORT)
 
       comex_test:
+        container_name: comex_test
         image: comex2_services:testing
         build: ./comex2_services
         # logs will show all that's printed to STDOUT with tty:true

setup/dockers/minidoors/Dockerfile

@@ -42,3 +42,5 @@ CMD sbt "project lab" run
 
 # ports
 EXPOSE 8989
+
+# TODO expose ssl