From 324175837b2789c42403efa16154cf2aff86bd51 Mon Sep 17 00:00:00 2001 From: "A. Soroka" Date: Tue, 24 Jul 2018 11:08:48 -0400 Subject: [PATCH 1/2] The importance of dataverse.siteUrl https://github.com/IQSS/dataverse/issues/4517#issuecomment-407438542 --- .../source/installation/installation-main.rst | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/doc/sphinx-guides/source/installation/installation-main.rst b/doc/sphinx-guides/source/installation/installation-main.rst index 596a08373a2..e38d9e30302 100755 --- a/doc/sphinx-guides/source/installation/installation-main.rst +++ b/doc/sphinx-guides/source/installation/installation-main.rst @@ -66,6 +66,15 @@ This allows the installer to be run in non-interactive mode (with ``./install -y All the Glassfish configuration tasks performed by the installer are isolated in the shell script ``dvinstall/glassfish-setup.sh`` (as ``asadmin`` commands). +**IMPORTANT:** The instller will also ask for an external site URL for Dataverse. It is _imperative_ that this value be supplied accurately, or a long list of functions will be inoperable, including: +- email confirmation links +- password reset links +- generating a Private URL +- exporting to Schema.org format (and showing JSON-LD in HTML's tag) +- exporting to DDI format +- which Dataverse installation an "external tool" should return to +- which Dataverse installation Geoconnect should return to + **IMPORTANT:** Please note, that "out of the box" the installer will configure the Dataverse to leave unrestricted access to the administration APIs from (and only from) localhost. Please consider the security implications of this arrangement (anyone with shell access to the server can potentially mess with your Dataverse). An alternative solution would be to block open access to these sensitive API endpoints completely; and to only allow requests supplying a pre-defined "unblock token" (password). If you prefer that as a solution, please consult the supplied script ``post-install-api-block.sh`` for examples on how to set it up. See also "Securing Your Installation" under the :doc:`config` section. The script is to a large degree a derivative of the old installer from DVN 3.x. It is written in Perl. If someone in the community is eager to rewrite it, perhaps in a different language, please get in touch. :) From f6931326b9d8f3688dd428a109fa9b44a4cd25a9 Mon Sep 17 00:00:00 2001 From: Philip Durbin Date: Tue, 24 Jul 2018 11:40:50 -0400 Subject: [PATCH 2/2] typo fix and formatting --- doc/sphinx-guides/source/installation/installation-main.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/sphinx-guides/source/installation/installation-main.rst b/doc/sphinx-guides/source/installation/installation-main.rst index e38d9e30302..fd84a219039 100755 --- a/doc/sphinx-guides/source/installation/installation-main.rst +++ b/doc/sphinx-guides/source/installation/installation-main.rst @@ -66,7 +66,8 @@ This allows the installer to be run in non-interactive mode (with ``./install -y All the Glassfish configuration tasks performed by the installer are isolated in the shell script ``dvinstall/glassfish-setup.sh`` (as ``asadmin`` commands). -**IMPORTANT:** The instller will also ask for an external site URL for Dataverse. It is _imperative_ that this value be supplied accurately, or a long list of functions will be inoperable, including: +**IMPORTANT:** The installer will also ask for an external site URL for Dataverse. It is *imperative* that this value be supplied accurately, or a long list of functions will be inoperable, including: + - email confirmation links - password reset links - generating a Private URL