Sign inSign up

neicnordic/sda-db

By neicnordic

•Updated over 3 years ago

Image
0

10K+

neicnordic/sda-db repository overview

⁠NeIC SDA database definitions and docker image

We use Postgres 11.2⁠ and Alpine 3.9.

Security is hardened:

  • We do not use 'trust' even for local connections
  • Requiring password authentication for all
  • Using scram-sha-256 is stronger than md5
  • Enforcing TLS communication
  • Enforcing client-certificate verification

⁠Configuration

There are 2 users (lega_in and lega_out), and 2 schemas (local_ega and local_ega_download). A special one is included for EBI to access the data through local_ega_ebi.

The following environment variables can be used to configure the database:

VariableDescriptionDefault value
PGVOLUMEMountpoint for the writble volume/var/lib/postgresql
DB_LEGA_IN_PASSWORDlega_in's password-
DB_LEGA_OUT_PASSWORDlega_out's password-
TZTimezone for the Postgres serverEurope/stockholm

⁠TLS support

VariableDescriptionDefault value
PG_SERVER_CERTPublic Certificate in PEM format$PGVOLUME/pg.cert
PG_SERVER_KEYPrivate Key in PEM format$PGVOLUME/pg.key
PG_CAPublic CA Certificate in PEM format$PGVOLUME/CA.cert
PG_VERIFY_PEEREnforce client verification0
SSL_SUBJSubject for the self-signed certificate creation/C=SE/ST=Sweden/L=Uppsala/O=NBIS/OU=SysDevs/CN=LocalEGA

If not already injected, the files located at PG_SERVER_CERT and PG_SERVER_KEY will be generated, as a self-signed public/private certificate pair, using SSL_SUBJ.

Client verification is enforced if and only if PG_CA exists and PG_VERIFY_PEER is set to 1.

Tag summary

Content type

Image

Digest

sha256:ec09891c1…

Size

83.8 MB

Last updated

over 3 years ago

docker pull neicnordic/sda-db