| ... | ... | @@ -40,16 +40,15 @@ To begin the setup, ensure you have the following: |
|
|
|
- The capability to generate a `Java KeyStore`, you have the option to install the headless version of `OpenJDK-17`, like `OpenJDK-17-jre-headless`.
|
|
|
|
- Authorization access from Google Drive to the files within the [eu-Domibus](https://drive.google.com/drive/folders/1rj7ezhFDjrxZS_CZG6ZKApU57-htG0zA?usp=drive_link) folder.
|
|
|
|
|
|
|
|
>**Note**: Most steps are carried out on the server, while some require action from your personal computer. Look for the following emojis at the beginning of each set of steps to determine where each action should be performed:
|
|
|
|
>- :globe_with_meridians: indicates steps to be executed on the server.
|
|
|
|
>- 💻 indicates steps to be performed on your personal computer.
|
|
|
|
## Action Indicators
|
|
|
|
|
|
|
|
## Sources
|
|
|
|
- [Domibus official documentation](https://ec.europa.eu/digital-building-blocks/wikis/display/DIGITAL/Domibus)
|
|
|
|
- [eDelivery repository](https://code.europa.eu/edelivery)
|
|
|
|
Most steps are carried out on the server, while some require action from your personal computer. Look for the following emojis at the beginning of each set of steps to determine where each action should be performed:
|
|
|
|
- :globe_with_meridians: indicates steps to be executed on the server.
|
|
|
|
- 💻 indicates steps to be performed on your personal computer.
|
|
|
|
|
|
|
|
# How to setup
|
|
|
|
### A - Admin User
|
|
|
|
## Security Recommendations
|
|
|
|
|
|
|
|
### Admin User
|
|
|
|
:globe_with_meridians:
|
|
|
|
|
|
|
|
As a best practice, create a dedicated user with appropriate privileges as the first step for enhanced security and adherence to the principle of least privilege.
|
| ... | ... | @@ -71,7 +70,7 @@ sudo nano /etc/ssh/sshd_config |
|
|
|
```shell
|
|
|
|
sudo systemctl restart ssh
|
|
|
|
```
|
|
|
|
### B - Docker group
|
|
|
|
### Docker group
|
|
|
|
:globe_with_meridians:
|
|
|
|
|
|
|
|
For better security, run Docker as a regular user. By default, Docker requires root privileges `sudo`. Follow these steps:
|
| ... | ... | @@ -89,6 +88,11 @@ sudo usermod -aG docker {ADMIN_USER} |
|
|
|
newgrp docker
|
|
|
|
```
|
|
|
|
|
|
|
|
## Sources
|
|
|
|
- [Domibus official documentation](https://ec.europa.eu/digital-building-blocks/wikis/display/DIGITAL/Domibus)
|
|
|
|
- [eDelivery repository](https://code.europa.eu/edelivery)
|
|
|
|
|
|
|
|
# How to setup
|
|
|
|
## 1 - Docker Compose
|
|
|
|
:globe_with_meridians:
|
|
|
|
|
| ... | ... | |
| ... | ... | |