Help - MAPIT_ID_WHITELIST - configuration issues
78 views
Skip to first unread message
Michael Fabunmi
Jun 27, 2020, 12:54:40 PM6/27/20
to fixmy...@mysociety.org
Hi All,
I have an issue whereby I get an error message when populating the area ID list into the parameter MAPIT_ID_WHITELIST.. I have 774 local government areas in the country I am setting up.. Each one of them has an area ID and I figured I would need a distinct body associated with them to send messages to. However, after adding just over 100 area IDs, I get the message in the attached screenshot. "(en) Please come back later".
What am I doing wrong?
The instance is http://fixmyarea4us.com. It is being developed for the country Nigeria.
On a separate note, i also have a few other issues as follows;
1. I would like a pointer to the best way to enable SSL - perhaps some documentation relevant to the AWS image based configuration we are using.
2. I would like to change the "FixMyStreet" sign on the top left hand cover to "FixMyArea4US.
3. How do i enable the option "or use my location" on the landing screen ( like on https://www.fixmystreet.com/)?
Regards,
Michael Fabunmi
07803761341
Matthew Somerville
Jul 1, 2020, 12:32:39 PM7/1/20
to FixMyStreet
Hi,
I'm not sure what that could be, you will need to look in your
server's error log to see what the actual error message is. I don't
see why it shouldn't be working, but I'm not sure it's something that
anyone has tried before either; if you're after so many areas, it
might be you need to set up your own MapIt installation with only the
boundaries you need in it. But let's see what the error message says.
On your other questions:
1. Setting up SSL depends how you want to set it up. You could do it
directly on the server by using something like certbot to get an SSL
certificate and then updating your nginx configuration to host it. As
you're on Amazon, I imagine Amazon can do this for you if you use one
of their products such as Elastic Load Balancer or CloudFront, but
I've not used them, sorry.
2. Yes, that's covered in the documentation:
https://fixmystreet.org/customising/logo/
3. Geolocation only works on HTTPS websites, so once your site is
HTTPS, that will automatically appear.
ATB,
Matthew
I'm not sure what that could be, you will need to look in your
server's error log to see what the actual error message is. I don't
see why it shouldn't be working, but I'm not sure it's something that
anyone has tried before either; if you're after so many areas, it
might be you need to set up your own MapIt installation with only the
boundaries you need in it. But let's see what the error message says.
On your other questions:
1. Setting up SSL depends how you want to set it up. You could do it
directly on the server by using something like certbot to get an SSL
certificate and then updating your nginx configuration to host it. As
you're on Amazon, I imagine Amazon can do this for you if you use one
of their products such as Elastic Load Balancer or CloudFront, but
I've not used them, sorry.
2. Yes, that's covered in the documentation:
https://fixmystreet.org/customising/logo/
3. Geolocation only works on HTTPS websites, so once your site is
HTTPS, that will automatically appear.
ATB,
Matthew
Michael Fabunmi
Jul 2, 2020, 6:54:02 AM7/2/20
to Matthew Somerville, FixMyStreet, cola...@gmail.com
Hi Matthew,
Thanks for the information you provided in your reply. I believe I can make progress with attempting to resolve most of the issues - except for the present restriction on the number of bodies I can create based on unique area codes. For that particular issue, i might have to share my screen remotely so you (or any other team member), can have a look at the present configuration and see the error firsthand.
.Cheers,
Micael Fabunmi
--
You received this message because you are subscribed to the Google Groups "FixMyStreet" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fixmystreet...@mysociety.org.
To view this discussion on the web visit https://groups.google.com/a/mysociety.org/d/msgid/fixmystreet/CAKs8PY1W-dYVQxU7yyZvsSGnJfX7iKspBR7WQfm%3DR4CNUor2Gw%40mail.gmail.com.
Michael Fabunmi
Jul 6, 2020, 5:14:44 AM7/6/20
to Matthew Somerville, FixMyStreet, cola...@gmail.com
Hi Matthew,
I followed up on the hints you provided and was able to resolve most of the issues except for the maximum "area ID" count restriction I seem to be witnessing.
Would it be possible to arrange to have you remotely observe both the present configuration, and the issue itself with me, at your convenience?
Cheers,
Michael Fabunmi
Matthew Somerville
Jul 9, 2020, 5:49:22 AM7/9/20
to Michael Fabunmi, FixMyStreet, cola...@gmail.com
Hi,
Glad to hear you've made some progress. I'm afraid I do not have the
time to do any sort of remote debugging, sorry. Like I said, you'll
need to find your server's error log and see what the actual error
message is, and work from there; feel free to post the actual error
message here when you've found it if it's unclear as to what the issue
might be.
ATB,
Matthew
Glad to hear you've made some progress. I'm afraid I do not have the
time to do any sort of remote debugging, sorry. Like I said, you'll
need to find your server's error log and see what the actual error
message is, and work from there; feel free to post the actual error
message here when you've found it if it's unclear as to what the issue
might be.
ATB,
Matthew
Michael Fabunmi
Jul 9, 2020, 9:35:17 AM7/9/20
to Matthew Somerville, FixMyStreet, cola...@gmail.com
Hi Matthew,
Can I confirm exactly which one of the log files you are referring to?
Cheers,
Michael
Matthew Somerville
Jul 10, 2020, 6:02:56 AM7/10/20
to FixMyStreet
If you've used the install script or AMI, the web server logs will be
in somewhere like /var/www/fixmystreet/logs, with the error_log
containing error messages.
If you've set up your server another way, then the log files will be
wherever you have configured your webserver to put them.
ATB,
Matthew
in somewhere like /var/www/fixmystreet/logs, with the error_log
containing error messages.
If you've set up your server another way, then the log files will be
wherever you have configured your webserver to put them.
ATB,
Matthew
Michael Fabunmi
Jul 10, 2020, 7:56:44 AM7/10/20
to Matthew Somerville, FixMyStreet, cola...@gmail.com
Hi Matthew,
Thanks for pointing me in the right direction. Please find attached log files (zipped ) I copied off the system after adding an extra area ID to trigger the issue, then removing the additional entry again to recover from the issue.
Cheers,
Michael Fabunmi
To view this discussion on the web visit https://groups.google.com/a/mysociety.org/d/msgid/fixmystreet/CAKs8PY0bMdkmhGaHd4ixzvTROjRwofORVSYYUCgU7m319507PA%40mail.gmail.com.
Matthew Somerville
Jul 10, 2020, 2:34:55 PM7/10/20
to FixMyStreet
Hi,
Because you are asking for so many area IDs from Global MapIt,
FixMyStreet has to make a POST request, not a GET request.
Global MapIt is https only, so if you make a http POST request, it
redirects to an HTTPS page that no longer includes your query.
If you change your MAPIT_URL to be https instead of http, then there
should be no redirect needed and your query should then get a
response.
I still say this might not be the best way for you to proceed, but it
should at least hopefully deal with this issue.
ATB,
Matthew
Because you are asking for so many area IDs from Global MapIt,
FixMyStreet has to make a POST request, not a GET request.
Global MapIt is https only, so if you make a http POST request, it
redirects to an HTTPS page that no longer includes your query.
If you change your MAPIT_URL to be https instead of http, then there
should be no redirect needed and your query should then get a
response.
I still say this might not be the best way for you to proceed, but it
should at least hopefully deal with this issue.
ATB,
Matthew
Michael Fabunmi
Jul 10, 2020, 5:29:42 PM7/10/20
to Matthew Somerville, FixMyStreet
Hi Matthew,
You are correct. Using HTTPS resolved the issue.
Now, if there is a more elegant solution to the problem of having 774 local government areas, plus 36 states, I would appreciate if you could point me in the right direction in respect of the relevant documentation.
Cheers,
Michael Fabunmi
To view this discussion on the web visit https://groups.google.com/a/mysociety.org/d/msgid/fixmystreet/CAKs8PY0tm3N1FYWYg%2B5agrWd-BPtzHTmyhm-PzS-LdYHAbViXA%40mail.gmail.com.
Michael Fabunmi
Aug 21, 2021, 3:44:51 AM8/21/21
to Matthew Somerville, FixMyStreet
Hi Matthew,
I have recently noticed an issue with my EC2 AMI fixmystreet setup. It started with the Chrome browser complaining about insecure connectivity, even when the device appears to have a valid SSL certificate. I have tried to provide in as much details as possible, the troubleshooting steps I have carried out. However, a high level summary of the issues i see is as follows;
- The client browser used to access the web application has the following behaviour:-
- When connecting to the custom domain name associated with the site (http://fixmyarea4us.org/https://fixmyarea4us.org/), it redirects to https://www.fixmyarea4us.org/ based on http to https redirect.
- As soon as an attempt is made to fill the form, it provides a hint that the https connection is not secure.
- It redirects to a security warning page
- The user can continue to submit the form.
- The form is only submitted correctly and sent to the council, when connected to the server FQDN (see config 3 below).
- The server always resets its configuration back to config 2 (see below), after a reboot.
- It appears that the reports are only being sent, when I manually run the command "send-report".
My Summary:
Is there a way I can test using http://fixmyarea4us.org without the automatic redirection to https://fixmyarea4us.org?
Please find attached details of my configuration and the results of some of my tests.
Configuration 1
A summary of this site's configuration, running version v3.1.
After Reboot
Configuration 2
A summary of this site's configuration, running version v3.1.
Configuration 3
A summary of this site's configuration, running version v3.1.
Regards,
Michael Fabunmi
Paco López L.
Oct 4, 2021, 12:33:10 AM10/4/21
to FixMyStreet, mfabun...@gmail.com
Exactly the same thing happens to me.
Suddenly from one day to the next the https: // functionalities stopped working. I didn't move anything.
Geolocation no longer works for me and in the same way the search engine in the front is reported as insecure by the browser.
I can no longer see the admin/bodies screen or the map with all the reports!
It seems that it has something to do with the update that Letsencrypt made on August 21 2021, I checked the next day and many things were not working.
I tried to renew the certificate but apparently it got more broken, now I can't see the report map anymore.
It probably has to do with the https: // certificate from global.mapit.mysociety.org/ API calls from fixmystreet core.
I have done two reinstallations, two new installations in development (ubuntu 18 and 16) and in effect, when I add the configurations (nginx with certbot) the same thing happens in these clean installations.
I suspect that the way we have been configuring https in nginx (and that I work for 3 years) is no longer compatible with the recent changes to LetsEncrypt.
I'll keep studying the matter (in logs or with other certificate different that letsencrypt or recent changes in letsencrypt) , it definitely has to do with the way the fixmystreet proxy interacts in relation to Lets Encrypt changes.
Paco López.
Michael Fabunmi
Jan 1, 2022, 3:28:01 PM1/1/22
to Matthew Somerville, FixMyStreet
Hi Matthew,
Below is the original very detailed message I sent to you about the SSL error message.
It is the same issue i am still contending with
Cheers,
Cheers,
Michael
john simpson
Sep 24, 2023, 10:42:09 AM9/24/23
to FixMyStreet, mfabun...@gmail.com, matthew
Michael,
I see your website is now working.
May I ask how you resolved the 'insecure data' issue ?
Thanks,
John
I see your website is now working.
May I ask how you resolved the 'insecure data' issue ?
Thanks,
John
Reply all
Reply to author
Forward
0 new messages