https://github.com/openfisca/openfisca-ops
Scripts and config files for deploying OpenFisca on a server
https://github.com/openfisca/openfisca-ops
Last synced: 5 months ago
JSON representation
Scripts and config files for deploying OpenFisca on a server
- Host: GitHub
- URL: https://github.com/openfisca/openfisca-ops
- Owner: openfisca
- License: mit
- Created: 2016-08-10T12:48:01.000Z (almost 10 years ago)
- Default Branch: master
- Last Pushed: 2026-01-11T09:17:51.000Z (5 months ago)
- Last Synced: 2026-01-11T11:01:40.386Z (5 months ago)
- Language: Jinja
- Size: 502 KB
- Stars: 1
- Watchers: 15
- Forks: 2
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# OpenFisca Operations
This repository contains scripts and config files for deploying OpenFisca on a server.
No secret must be committed to this repository.
## Install the OpenFisca Web API on a virtual machine for development purposes
If you want to make use of the OpenFisca Web API without handling its installation, for example if you are building a client application, the easiest is to [set up a virtual machine](guides/Serve-local-API.md).
## Install the OpenFisca Web API on a server
See the [dedicated page](guides/Install-API-instance.md).
## Operate the production instance of OpenFisca France Web API
See the [dedicated page](guides/Operate-production-France-API.md).
## Passwords
Access to shared services (OVH, PyPI, Mastodon…) must be done through individual accounts, to which management is delegated.
However, some systems do not support delegation, or it can sometimes be helpful to get administrator access to master accounts.
A database containing all passwords for OpenFisca services is maintained by the Association. It is accessible to members of the Board, who can delegate access to third parties for a specific mission. Every access delegation is listed in the minutes of the Board decisions.
The underlying intention is to reduce the risk of loss of control over password-protected components and to provide, in the long-term, a standard access to OpenFisca’s services and accounts. This is in order to improve delivery, fail safety and resilience.
### Accessing the passwords database
If you believe you need administrator access to an OpenFisca service to fulfil a mission, open a pull request on this repository to add yourself in the access ledger below. Explain in the description which services you need access to, and why you need it. The admin team will review your request and get back to you.
If you have been granted permission to access the passwords database:
1. Download the passwords database on [`cloud.openfisca.org`](https://cloud.openfisca.org).
2. Install [KeePassXC](https://keepassxc.org/download).
3. Obtain the password and key from the Board.
### Providing access to the passwords database
Do not transmit key and password through the same channel. Password must be communicated orally, and key should be transmitted either by physical transfer (USB key, etc.) or electronically, in which case you’ll have to encrypt it before sending.
### Historical access ledger
Historically a password database was provided in this repository, but this is now deprecated. This legacy system is still reachable thanks to Git history, but all systems it gives access to have been disabled or retired.