Site Template Customizations Documentation

docs/installation/docker/site-template/customizations.md

@@ -0,0 +1,52 @@
+# Customizations
+
+The following sections describe optional customizations you can make to further modify your Islandora site.
+
+## Modifying settings.php
+
+TODO
+
+## Modifying robots.txt
+
+TODO
+
+## Nginx customizations
+
+### Blocking IP Addresses
+
+TODO
+
+### Blocking by User Agent
+
+TODO
+
+## Traefik customizations
+
+### Using Your Certs Instead of LetsEncrypt
+
+TODO
+
+### TLS Settings
+
+Traefik allows you to modify security settings by doing things like setting a minimum TLS version or specifying cipher suites. Isle Site Template ships with two versions of the TLS settings file, one [for development](https://github.com/Islandora-Devops/isle-site-template/blob/main/dev-tls.yml), and one [for production](https://github.com/Islandora-Devops/isle-site-template/blob/main/prod-tls.yml).
+
+These files are mounted as volumes in the Traefik containers, so you can modify them as desired.
+
+More information is available in the [Traefik documentation](https://doc.traefik.io/traefik/https/tls/#tls-options)
+
+### Hiding Fedora from the public
+
+By default, your Fedora repository will be exposed to the public at fcrepo.${DOMAIN}. If you don't want the public to be able to access your repository you can add the `traefik-disable` label to the fcrepo-prod service in your docker-compose.yml.
+
+```
+         labels:
+            <<: [*traefik-disable, *fcrepo-labels]
+```
+
+If you do this, you can remove the fcrepo URL from your DNS records.
+
+### Exposing ActiveMQ, Blazegraph, and Solr
+
+By default, these services are hidden by Traefik. If you want to allow access to them, you need to remove the `traefik-disable` label from your docker-compose.yml.
+
+You will also need to add their URL to your DNS record. The URLs are defined in the docker-compose.yml, and by default will be activemq.{DOMAIN}, blazegraph.{DOMAIN}, and solr.{DOMAIN}

mkdocs.yml

@@ -139,6 +139,7 @@ nav:
               - 'Troubleshooting' : 'installation/docker/isle-dc/docker-troubleshooting.md'
           - 'ISLE Site Template':
               - 'Introduction to Site Template': 'installation/docker/site-template/site-template.md'
+              - 'Customizations' : 'installation/docker/site-template/customizations.md'
       - 'Ansible Playbook': 'installation/playbook.md'
       - Manual Installation:
         - 'Introduction': 'installation/manual/introduction.md'