ipfs-server service is not necessary, It can be achieved with the nginx-proxy as vhost rules.

Implementation

Write the rules from:
https://github.com/district0x/ipfs-docker/blob/master/server/ipfs.server

into specifs ipfs host config files (one for QA and one for production).

Problem description

prepare and document a bash script which given an image name downgrades it to a previous known version.

Implementation details

Script could take the version from dockerhub:
https://cloud.docker.com/u/district0x/repository/docker/district0x/memefactory-server

or use
docker-history <image-name>

Problem description

Update documentation for all the images

Implementation

Documentation should include:

• description of all the services
• debugging and troubleshooting
• what to do with db (in case of table changes)
• possible resyncs
• where to find previous deployed version
• what file to modify
• how to restart so everything takes effect (what command to run)

like in description, if parity container dies we need an autorestart

Problem

UI services can be rendered inside a or <iframe>, making clickjacking attacks possible.

Implementation

Make proxy-wide changes to nginx service config that return X-Frame-Options sameorigin always; header.

Acceptance Criteria

No regressions, especially with mobile wallets.

Future Steps

Deploy the changes to QA, if no regressions to production.

Add a minimal container which will clean up the rolled log entries older than 7 days

Lets include

• what to do with db (in case of table changes)
• possible resyncs
• where to find previous deployed version
• what file to modify
• how to restart so everything takes effect (what command to run)

Problem

Default nginx settings support older clients (TLS 1.0 compat):

• Chrome < 22
• Firefox < 27
• IE < 11
• Safari < 7,
• iOS < 5
• Android Browser < 5

Implementation

We will use Mozilla modern profile and/or AWS SSL Security Policies
for all our web servers.

Acceptance Criteria

A+ rating on https://www.ssllabs.com/ssltest/index.html for all opened hosts

Since we abandoned running parity from a docker container, in the light of syncing issues, please document how parity is run as a daemon on the box.