diff options
| author | Christophe Simonis <chs@odoo.com> | 2018-04-18 18:30:35 +0200 |
|---|---|---|
| committer | Christophe Simonis <chs@odoo.com> | 2018-04-18 18:30:35 +0200 |
| commit | c309ccd7b3d7e2f4884f6e9e47a98d64ceac8ea1 (patch) | |
| tree | 82deec2a691d9aee34d70aedac9b68ab75c2825c /doc | |
| parent | e63e9857411a056538f357b1800d31c835a1647c (diff) | |
| parent | fed775bc0c2d70463206bbdddd3cce9ae8469e6a (diff) | |
[MERGE] forward port branch saas-11.2 up to fed775bc0c2
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/cla/corporate/vauxoo.md | 1 | ||||
| -rw-r--r-- | doc/reference/reports.rst | 2 | ||||
| -rw-r--r-- | doc/setup/deploy.rst | 10 |
3 files changed, 12 insertions, 1 deletions
diff --git a/doc/cla/corporate/vauxoo.md b/doc/cla/corporate/vauxoo.md index 0d8c8b623e9..5bc8dca8882 100644 --- a/doc/cla/corporate/vauxoo.md +++ b/doc/cla/corporate/vauxoo.md @@ -39,6 +39,7 @@ Jesus Zapata jesus@vauxoo.com https://github.com/JesusZapata Germana Oliveira germana@vauxoo.com https://github.com/goliveirab Mariano Fernandez mariano@vauxoo.com https://github.com/Batuto Edgar Rivero edgar@vauxoo.com https://github.com/egrivero +Edilianny Sánchez esanchez@vauxoo.com https://github.com/edy1192 Alexander Olivares alexander@vauxoo.com https://github.com/alxolivares Jose Manuel Robles josemanuel@vauxoo.com https://github.com/keylor2906 Erick Birbe erick@vauxoo.com https://github.com/ebirbe diff --git a/doc/reference/reports.rst b/doc/reference/reports.rst index 6ec6e6a157c..ed408a0d817 100644 --- a/doc/reference/reports.rst +++ b/doc/reference/reports.rst @@ -190,7 +190,7 @@ Barcodes -------- Barcodes are images returned by a controller and can easily be embedded in -reports thanks to the QWeb syntax: +reports thanks to the QWeb syntax (e.g. see :ref:`reference/qweb/attributes`): .. code-block:: html diff --git a/doc/setup/deploy.rst b/doc/setup/deploy.rst index 5aea431caf4..13d4198cceb 100644 --- a/doc/setup/deploy.rst +++ b/doc/setup/deploy.rst @@ -442,6 +442,10 @@ security-related topics: only for controlling/managing the installation. *Never* use any default passwords like admin/admin, even for test/staging databases. +- Do **not** install demo data on internet-facing servers. Databases with demo data contain + default logins and passwords that can be used to get into your systems and cause significant + trouble, even on staging/dev systems. + - Use appropriate database filters ( :option:`--db-filter <odoo-bin --db-filter>`) to restrict the visibility of your databases according to the hostname. See :ref:`db_filter`. @@ -474,6 +478,12 @@ security-related topics: and then enable the :option:`proxy mode <odoo-bin --proxy-mode>` option. See also :ref:`https_proxy`. +- If you need to allow remote SSH access to your servers, make sure to set a strong password + for **all** accounts, not just `root`. It is strongly recommended to entirely disable + password-based authentication, and only allow public key authentication. Also consider + restricting access via a VPN, allowing only trusted IPs in the firewall, and/or + running a brute-force detection system such as `fail2ban` or equivalent. + - Whenever possible, host your public-facing demo/test/staging instances on different machines than the production ones. And apply the same security precautions as for production. |