summaryrefslogtreecommitdiff
path: root/docs/architecture/needed_admin_infrastructure.mdwn
blob: 59365c289c4388cb0b9e26582b820053507c7d14 (plain)
1
2
3
4
5
6
7
- DONE: HTTP AUTH from PAM through the magic of mod-auth-pam
- DONE: HTTP access from /etc/group through the magic of mod-auth-sys-group
- DONE: Shell security through rbash and privilege escalation security (for mkwiki, mkuser, etc) through sudo
- DONE: Guaranteed namespace coherence with the vhosting of cgi, secure, and normal with the aid of a wildcard SSL certificate
- TODO: Work out how to pass mailing list emails around. Probably either ssh or vserver namespace magic.
- DONE: manual [[setup file overrides]], /etc/ikiwiki/piny/$reponame.setup.pl, included directly with 'do' before dumping state.
- DONE: rebuildrepo