Playing with Site Routes and different Users/Apps

batlles

Hello!

I'm wondering whether following configuration is possible or not or which specific conditions/steps we should consider before mixing everything up 🙂

Let's say we do have following configuration:

Couple of Users: UserA and UserB
Three different Apps: App1 and App2 belong to UserA // App3 belongs to UserB

Then, for a given Domain1 is it possible to assign as follows? (Notice I'm using SSL)

https://www.Domain1.com --> URI1 --> / --> App1 --> belonging to UserA
https://www.Domain1.com --> URI2 --> /subfolder --> App2 --> belonging to UserA
https://www.Domain1.com --> URI3 --> /AnotherSufolder --> App3 --> belonging to UserB

I've tried the configuration above and got a The requested URL /AnotherSubfolder/ was not found on this server error message

Is that configuration even possible? Or maybe should I give UserA access to App3 as well to make it work?

Thanks for the advice/hint!

sean

batlles All of that should be possible as either of the following are true:

None of the apps are Apache+PHP apps
If there are Apache+PHP apps, then all of the Apache+PHP apps on the site belong to the same shell user.

if you have Apache apps belonging to different shell users assigned to the same site, it presently causes some problems with our logging setup. There's only one apache log per virtualhost in the server config, so which Apache app user gets it?

We're looking into ways to work around this but for now I think that's the only problem.

If this doesn't seem like your situation then let me know what types of apps your hypothetical users are running and I'll see what's what.

batlles

Hello @sean , indeed I was NOT following the second conditions because App3 in a Subdomain belongs to a different shell user.

I will play carefully with those Apps/Domains 😉

Thank you for your great support

sean

batlles You're very welcome!

HelenaGwyn

Hi, I was trying the same thing I guess.

I have a few static apps and a few Nginx/PHP-FPM from different shell users (to keep apps separated as advised) that should be added to different subfolders from one domain. But apparently that's not possible (yet) with Nginx/PHP-FPM either?

Is there a workaround, maybe by sharing the apps with one main shelluser giving it reading rights?

sean

HelenaGwyn as of some time in 2021 we no longer allow a single site to serve apps that belong to different shell users, regardless of the type of application.

HelenaGwyn

sean even with sharing the folder between shellusers (https://docs.opalstack.com/topic-guides/tips/#howto-grant-access-to-a-directory)? Since you give the advice of a shell user per app.

I have the use case once in a while of setting up a new site for a client without them having their own domain in the beginning. Their site gets to be attached to a subdirectory of a clients-subdomain of my agency's domainname. Mostly just temporary until they get their own domainname and site. But I don't want them to have access to my agencies apps. And I don't want to have to copy the app over to their own shelluser when they finally get their domainname.

sean

HelenaGwyn that's correct, we no longer allow a site to use apps from multiple shell users, regardless of the permissions or the app type.

Our recommendation is that separate your projects or sites by shell user, ie all of the apps served by a particular site must belong to the same shell user.

As a workaround for your use case, you can use a private PHP-FPM stack to serve the sites. This way you can do all of your web server config in the private stack and have only the private stack attached to your site in the dashboard, thus circumventing the restriction.

HelenaGwyn

sean Ok, will put it on my list of optimisations in the long run.