From 43a9d4b50365293ea192e434ced2f5875bdaacbd Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Sun, 19 Jan 2014 20:03:47 +0000 Subject: [PATCH] Avoid insecure logins --- beaglebone.txt | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/beaglebone.txt b/beaglebone.txt index 13df8fd0..f59b9809 100644 --- a/beaglebone.txt +++ b/beaglebone.txt @@ -2490,7 +2490,7 @@ rm /var/www/$HOSTNAME/htdocs/install.php -- Larry Ellison #+END_VERSE -Owncloud will allow you to upload and download files, share photos, collaboratively edit documents, have a calendar and more. +Owncloud will allow you to upload and download files, share photos, collaboratively edit documents, have a calendar and more. You should be warned that Owncloud runs quite slowly via an ordinary web browser, but it can be a convenient way to access and share your data from any location in a reasonably secure manner. *** Server Installation @@ -2528,7 +2528,7 @@ export HOSTNAME=mydomainname.com emacs /etc/apache2/sites-available/$HOSTNAME #+END_SRC -And add the following, both to the 80 section and the 443 VirtualHost sections. +And add the following, to the 443 VirtualHost section. Really we only will want to be using Owncloud with HTTPS to ensure some level of security and avoidance of dragnet surveillance. #+BEGIN_SRC: bash @@ -2539,6 +2539,14 @@ And add the following, both to the 80 section and the 443 VirtualHost sections. #+END_SRC +To ensure that nobody logs in insecurely add the following to the 80 VirtualHost section. + +#+BEGIN_SRC: bash + + deny from all + +#+END_SRC + Save and exit, then restart apache. #+BEGIN_SRC: bash @@ -2595,6 +2603,8 @@ With a web browser visit your domain (mydomainname.com/owncloud) and enter an ad *** Owncloud on Android +First install [[https://f-droid.org/][F-Droid]] and then search for the current Owncloud app. Once it's installed you'll then be able to log into the BBB with the URL https://mydomainname.com/opencloud, supplying your username and password. + ** Install Bitmessage #+BEGIN_VERSE