Le logiciel PIA est un outil distribué librement par la CNIL afin de faciliter la réalisation d’analyses d’impact sur la protection des données prévues par le RGPD. PIA-BACK est développé avec le framework RubyOnRails mettant à disposition une API RESTful à destination des outils PIA et PIA-APP.

The PIA software is a free tool published by the CNIL which aims to help data controllers build and demonstrate compliance to the GDPR. PIA-BACK is developped with RubyOnRails providing a RESTful API for the PIA and PIA-APP applications.

You can follow for a full installation of PIA (back-end) and PIA (front-end) applications on a ubuntu 20.04 server.

• pia (front-end) application
• Ruby 3.1.x
• Rails 7.0.x
• PostgreSQL 12.0+

• CPU : i5
• Ram: 4Go
• Disk Space : 20Go
• OS : preferably Linux but other OS works as well

Basic installation on Debian you can use the following documentation: wiki.debian.org/PostgreSql on Ubuntu you can use: help.ubuntu.com/community/PostgreSQL

Also, you need to create a new user with password.

git clone https://github.com/LINCnil/pia-back.git

cd pia-back

cp config/database.example.yml config/database.yml

Fill the fields username and password for each environment with the PostgreSQL username and password created in the step "PostgreSQL installation".

bundle install

cp .env-example .env

Generate the SECRET_KEY_BASE with bin/rake secret and paste the secret key in the file.

Generate the DEVISE_SECRET_KEY with bin/rake secret and paste the secret key in the file.

Generate the DEVISE_PEPPER with bin/rake secret and paste the secret key in the file.

Fill MAILER_SENDER with the default address email sender

Fill DEFAULT_URL with the URL of your server

If needed, fill DEFAULT_PORT to the PORT you use

bin/rake db:create

bin/rake db:migrate

Set ENABLE_AUTHENTICATION=true inside your .env file

Enter the rails console with bin/rails c

Launch the command Doorkeeper::Application.create(name: "PIA", redirect_uri: "urn:ietf:wg:oauth:2.0:oob", scopes: ["read", "write"])

Find your UID and SECRET information Doorkeeper::Application.select(:uid, :secret).first

Use these credentials into your PIA application

Enter the rails console with bin/rails c

Launch the command User.create(email: 'YOUR_EMAIL', password: 'Azeazeaze123-', password_confirmation: 'Azeazeaze123-') (your password should be at least 12 characters long, with numbers and special characters).

Unlock your user with the unlock_access! method

    a = User.last
    a.is_technical_admin = true
    a.is_functional_admin = true
    a.is_user = true
    a.unlock_access!

Set up the environment credentials variables using EDITOR='nano' rails credentials:edit :

email_from: [email protected]
smtp_address: xxxx
smtp_port: xxxx
smtp_domain: xxxx
smtp_user_name: xxxx
smtp_password: xxxx
smtp_authentication: :cram_md5
smtp_enable_starttls_auto: true

If you want to use the ldap authentification mode, set DEVISE_LDAP_LOGGER=true inside your .env file.

Set up the environment credentials variables using EDITOR='nano' rails credentials:edit :

ldap_host: [Fill it with the LDAP host]
ldap_port: [Fill it with the LDAP port]
ldap_attribute: [Fill it with the LDAP attribute]
ldap_base: [Fill it with the LDAP base]
ldap_admin_user: [Fill it with the LDAP admin user]
ldap_admin_user_password: [Fill it with admin user password]
ldap_ssl: [true or false]

The PIA tool can send different emails when the authentication module is enabled (new user, new evaluation ready, ...).

The default locale for the content of the authentication emails is English (en).

Define DEFAULT_LOCALE="[locale key]" inside your .env file to change the locale.

For example, if you want to have French translations for the authenication emails, configure DEFAULT_LOCALE="fr" in your .env file.

Supported locales: bg, cs, da, de, el, en, es, et, fi, fr, hr, hu, it, lt, lv, nl, no, pl, pt, ro, sl, sv.

• bin/rails s your server will be accessible with the URL localhost:3000

• You can specify the option -b to bind to a public IP address or domain name and -p to use a different port.

  For example: bin/rails s -b 123.456.789.101 -p 8080 your server will be accessible with the URL 123.456.789.101:8080

• Then, in the pia (front-end) application, use this URL to enable the server mode.

• Fill the field in "Tools" > "Settings"

• For the authentication mode: every user will have to fill the server URL, the client ID and the client SECRET fields to access the authentication interface.

1. Fill the production section in the database.ymlfile.
2. Create the database: RAILS_ENV=production bin/rake db:create
3. Create the tables: RAILS_ENV=production bin/rake db:migrate
4. Run the server: RAILS_ENV=production bin/rails s

Go to the folder pia-back : cd pia-back

Update the repository : git pull

Update the dependencies : bundle install

Update the database : RAILS_ENV=production bin/rake db:migrate

bin/rake

Pia back mailer work with rails-i18n. For update default locale, go to change this line in rails configuration:

In config/application.rb

config.i18n.default_locale = :en

• Docker set-up (Kosmas Schütz): a Docker-Compose configuration for production purpose. Everything is automated from creating containers to setting up the database.
• Installation runbook (ylachgar): runbook to install the pia tool server version on a ubuntu 17.10 server.