ceda_ei
/
the-long-night
mirror of https://gitlab.com/ceda_ei/the-long-night
1
0
Fork 0
Code Issues Releases Wiki Activity
15 Commits 1 Branch 0 Tags 56 KiB
Python 99.1%
Shell 0.9%
Go to file
Ceda EI 432f2854d5 Add email backend 2020-01-19 16:19:55 +05:30
backends Add email backend 2020-01-19 16:19:55 +05:30
.flake8 Add /login endpoint to server.py 2019-05-24 15:38:04 +05:30
.gitignore Add .gitignore and requirements.txt 2019-05-17 12:55:20 +05:30
LICENSE Add LICENSE 2019-05-16 20:59:57 +00:00
README.md Update README. Add flask to requirements. Add info for user id. 2019-05-25 23:43:03 +05:30
background.py Remove file check in background.py 2019-05-24 16:17:50 +05:30
cancel-adding-key.sh Add cancel-adding-key.sh 2019-05-24 15:42:21 +05:30
installation.py Fix bot name 2019-05-26 16:12:35 +05:30
requirements.txt Update README. Add flask to requirements. Add info for user id. 2019-05-25 23:43:03 +05:30
server.py Add simple html form at / 2019-05-24 15:59:08 +05:30

README.md

The Long Night

Increase Bus Factor by providing ssh access to server.

How it works

  • The server admin runs the installation and sets a password, ssh-key, number of days to add the key after.
  • The server admin gives the "bus factor" the password.
  • In case of an incident, the "bus factor" visits the webpage and enters the provided password.
  • If the correct password is entered, the server admin is notified via all the configured backends that the correct password has been added.
  • If the server admin doesn't wish the ssh-key to be added, they can login and run cancel-adding-key.sh in the installation directory.
    • If the command is run within the configured number of days, then the key is not added and everything returns back to normal and the server starts listening for password again. No new setup is necessary.
    • If the command is not run within the configured number of days, then the ssh key is added.

Installation

  • Clone the repository.
    • git clone https://gitlab.com/ceda_ei/the-long-night.git
  • Install the dependencies
    • pip3 install -r requirements.txt
  • Create a config file by running ./installation.py.
  • Install gunicorn.
    • pip3 install gunicorn
  • Run gunicorn3 -b 127.0.0.1:5000 server:app. Change port if you want to run gunicorn on a different port.
  • Set up a reverse proxy from your webserver to localhost:5000.