alfresco / acs-ingress Goto Github PK

Bundled nginx version is 1.18.0.

Please bump to 1.20.1 due to nginx security advisory (CVE-2021-23017).

docker pull alfresco/alfresco-acs-nginx:3.2.0

followed by docker image inspect on the image ID, shows the following snippet:

"Env": [
    "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
    "NGINX_VERSION=1.18.0",
    "NJS_VERSION=0.4.4",
    "PKG_RELEASE=2"
],

The image is currently called alfresco/acs-community-ngnix specifically ngnix instead of nginx.

The project headline in the readme mentions nginx, so does the image name have a typo, or is it intentional?

I get a "sh: true: unknown operand" error when I start the proxy because the USE_SSL reference is not quoted.

I was going to submit a PR with the fix, but I noticed that PR #13 from 2021 includes this fix.

i have downloaded docker-compose.yml for alfresco 7.0.0
and changed nginx as below in the .yml file. (generated self signed cert and gave the path below)
proxy:
image: alfresco/alfresco-acs-nginx:3.2.0
mem_limit: 128m
environment:
DISABLE_PROMETHEUS: "true"
DISABLE_SYNCSERVICE: "true"
DISABLE_ADW: "true"
USE_SSL: "true"
DOMAIN: "10.188.104.245" # when USE_SSL="true"
depends_on:
- alfresco
ports:
- 443:443
links:
- alfresco
- share
volumes:
- /mypath/ssl:/etc/nginx/ssl/ # when USE_SSL="true"

when i started alfresco using docker-compose up, im not able to login to the share page. getting below error.
ERROR [alfresco.web.site] [http-nio-8080-exec-1] javax.servlet.ServletException: Possible CSRF attack noted when asserting referer header 'https://10.188.104.245/share/page/'. Request: POST /share/page/dologin, FAILED TEST: Assert referer POST /share/page/dologin :: referer: 'https://10.188.104.245/share/page/' vs server & context: http://10.188.104.245:443/ (string) or (regexp)
please help.
already tried below:

1. disable csrf in alfresco-gobal.properties: csrf.filter.enabled=false
2. disable in share-config-custom.xml:
   t3. ried to clear cache
   but nothing worked