Some improvements before official inauguration

pi/mdosweb/login/templates/login.html

@@ -10,6 +10,7 @@
   <title>Maschinendeck MDOS</title>
   <meta name="description" content="">
   <meta name="author" content="">
+  <link rel="shortcut icon" type="image/png" href="{% static "images/maschinendeck.png" %}">
 
   <!-- Mobile Specific Metas
   –––––––––––––––––––––––––––––––––––––––––––––––––– -->
@@ -27,7 +28,6 @@
 
   <!-- Favicon
   –––––––––––––––––––––––––––––––––––––––––––––––––– -->
-  <link rel="icon" type="image/png" href="{% static "images/favicon.png" %}">
 
   <script src="{% static "js/jquery.js" %}"></script>
 

pi/mdosweb/login/views.py

@@ -22,9 +22,10 @@ class OpenForm(forms.Form):
 class LoginView(View):
     template_name = "login.html"
     form_class = OpenForm
-    success_url = '/login' #reverse('login') 
+    success_url = '/' #reverse('login') 
 
 
+    @method_decorator(login_required)
     def get(self, request, *args, **kwargs):
         form = self.form_class()
         createLogEntry(request, 'index')

pi/mdosweb/mdosweb.ini

@@ -6,3 +6,4 @@ processes = 2
 chdir = /home/pi/mdos/pi/mdosweb/
 socket = /home/pi/mdos/pi/mdosweb/mdosweb.sock
 chmod-socket = 666
+logto = /home/pi/mdos/pi/mdosweb/mdosweb.log

pi/mdosweb/nginx.conf

@@ -1,21 +1,46 @@
+# limit requests based on proxy protocol remote address
+limit_req_zone $proxy_protocol_addr zone=one:10m rate=5r/s;
+
+
 # the upstream component nginx needs to connect to
 upstream django {
     server unix:///home/pi/mdos/pi/mdosweb/mdosweb.sock; # for a file socket
     #server 127.0.0.1:8001; # for a web port socket (we'll use this first)
 }
 
 server {
-	listen 80;
+	listen 80 proxy_protocol;
 	server_name tuer.maschinendeck.org;
 	return 301 https://tuer.maschinendeck.org/;
+	set_real_ip_from 10.172.3.23; # only allow proxy protocol requests from this ip. 
+	real_ip_header proxy_protocol;
+	limit_req zone=one burst=15;
+    	server_tokens off;
+}
+
+
+
+server {
+	listen 81;
+	server_name tuer.maschinendeck.org;
+    	location /setroomstate {
+        	 uwsgi_pass  django;
+        	 include     /home/pi/mdos/pi/mdosweb/uwsgi_params; # the uwsgi_params file you installed
+    		 }
+	allow 127.0.0.1;
+	deny all;
 }
 
 # configuration of the server
 server {
     # the port your site will be served on
-    listen      443;
+    listen      443 proxy_protocol;
+    set_real_ip_from 10.172.3.23;
+    real_ip_header proxy_protocol;
     # the domain name it will serve for
     server_name tuer.maschinendeck.org; # substitute your machine's IP address or FQDN
+    limit_req zone=one burst=15;
+    server_tokens off;
     charset     utf-8;
 
 	ssl on;
@@ -40,4 +65,9 @@ server {
         uwsgi_pass  django;
         include     /home/pi/mdos/pi/mdosweb/uwsgi_params; # the uwsgi_params file you installed
     }
+
+    	location /setroomstate {
+		deny all;
+		}
+
 }