initializers.rake
34 lines
| 1.3 KiB
| text/x-ruby
|
RubyLexer
|
r2430 | desc 'Generates a configuration file for cookie store sessions.' | ||
file 'config/initializers/session_store.rb' do | ||||
path = File.join(RAILS_ROOT, 'config', 'initializers', 'session_store.rb') | ||||
secret = ActiveSupport::SecureRandom.hex(40) | ||||
File.open(path, 'w') do |f| | ||||
f.write <<"EOF" | ||||
# This file was generated by 'rake config/initializers/session_store.rb', | ||||
# and should not be made visible to public. | ||||
# If you have a load-balancing Redmine cluster, you will need to use the | ||||
# same version of this file on each machine. And be sure to restart your | ||||
# server when you modify this file. | ||||
# Your secret key for verifying cookie session data integrity. If you | ||||
# change this key, all old sessions will become invalid! Make sure the | ||||
# secret is at least 30 characters and all random, no regular words or | ||||
# you'll be exposed to dictionary attacks. | ||||
ActionController::Base.session = { | ||||
|
r4291 | :key => '_redmine_session', | ||
|
r3671 | # | ||
# Uncomment and edit the :session_path below if are hosting your Redmine | ||||
# at a suburi and don't want the top level path to access the cookies | ||||
# | ||||
# See: http://www.redmine.org/issues/3968 | ||||
# | ||||
# :session_path => '/url_path_to/your/redmine/', | ||||
|
r2430 | :secret => '#{secret}' | ||
} | ||||
EOF | ||||
end | ||||
end | ||||
|
r3153 | |||
desc 'Generates a configuration file for cookie store sessions.' | ||||
task :generate_session_store => ['config/initializers/session_store.rb'] | ||||