migueldemoura / istsi Goto Github PK

IST Summer Internships Submission Platform & Website

License: GNU Affero General Public License v3.0

PHP 47.29% JavaScript 9.47% CSS 5.70% HTML 32.33% Shell 4.07% Dockerfile 1.15%

platform summer-internship internship docker docker-compose composer college fenixedu fenixedu-api

istsi's Introduction

ISTSI

Since I've left the ISTSI team, and am no longer maintaining this repository, all infrastruture has been moved to the hands of the faculty. A postmortem and general overview of the program is available in my blog.

ISTSI was the website and submission platform for the IST Summer Internships.

It was built to ease the work of those behind the program and to allow the candidates to have a simple, consistent and comprehensive experience.

Installation and Deployment

This project includes config files to create an environment with Nginx, PHP-FPM, Composer, PostgreSQL/MySQL and automatic backups.

Install Docker and Docker Compose
Go to app/src/, rename settings.php.dist to settings.php and fill all options.
Go to deployment/, rename .env.dist to .env and fill all fields. The available settings for the ENV variable are dev, staging and prod.
If the above ENV variable isn't dev go to deployment/nginx/tls, replace all files with your own and strip the .dist from the filenames.
Run $ bin/console setup.
Start environment:
```
$ bin/console deploy up -d
```

When first starting the environment you will need to run $ bin/console migrate to update the database schema. This process isn't done automatically since renamed columns are deleted upon migration (potential loss of data).

To access the dev webpage go to istsi.localhost.

Stop environment:
```
$ bin/console deploy down
```

License

See License.md

istsi's People

Contributors

Stargazers

Watchers

Forkers

marianaclssilva

istsi's Issues

Local STMP Server

Get a working STMP container with DKIM, SPF and DMARC support. rDNS also needs to be set up (add a PTR record to the DNS provider) to ensure we don't get straight to the spam folder.

Use Let's Encrypt

Currently, Cloudflare is used to get tls certificates. Using Let's Encrypt allows us to have one less dependency, better security and more control over the configuration.

Remove Authenticated Origin Pulls
Redirect http to https via nginx
Swap container config
Harden nginx config

To get a smooth transition:
https://github.com/jwilder/nginx-proxy
https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion

Make viewing proposals require authentication

Course aliases

To avoid repeating courses, we should use aliases. A common example is Computer Science: LEIC-A, LEIC-T, MEIC-A, MEIC-T all stand for a similar course.

Temporary fix for ISTSI\Auth\Fenix\Controller:login:

// Get Fenix info

$aliasesMEBiol = ['MicroBio', 'MBiotec'];

if (in_array($course, $aliasesMEBiol)) {
	$course = 'MEBiol';
}

// Persist to database

This replaces the non-supported acronym with a supported one before adding them to the database. A proper solution would involve using db relationships between courses.

Unable to clear observations when updating a submission

It isn't possible to clear observations when updating a submission.
We can either remove the empty submission check or send an additional flag along with the request.

ProposalCourse relationship is incorrect

See spotorm/spot2#225

Multiple users per company

Allow multiple users per company and allow the same user to belong to different companies.

Display a message/tooltip when the new submission button is disabled

Submission observations aren't attached to the other files when downloading submissions

Company platform section

To automate proposal submission, a company-specific area is required. To achieve that we need:

Independent login system, using one-time login links sent to email.
Company account edit page.
Ability to create, edit and delete proposals;

Missing production configuration

Maybe create two different docker-compose config files: dev.yml and prod.yml.
Since other configs need to be changed as well, duplicating contents might be a good ideia.
Using env variables is probably a nicer solution though.

Delete zip after submissions download

After the zip is downloaded, is must be deleted to save space. Middleware can be used for that.

Company and Proposal ID leaks

Swap MySQL with PostgreSQL

Swap MySQL with PostgreSQL, drop PHPMyAdmin and open the database port to localhost (dev environment only).

Add society attribution to each company

Disable php error display in production

Logging in always overwrites student account email

If the student has chosen a different email, it will be overwritten afterwards with the one provided by Fenix.

Admin Interface

Ability to add companies and manage edition-specific settings.

Use Duplicity for backups

Differential backups will save a massive amount of space.

Remove duplicate files

Most students use the same CV and/or CM for all proposals they apply for, meaning we store the exact same file multiple times.
A better approach would be to store a hash of the file associated with the submission and store the files themselves just once.