[Archivesspace_Users_Group] OAI base urls containing port numbers

[Blake Carver]

Why is having a port number a risk for hackers?

To drop the ports you'll probably need to run it behind nginx or Apache.

The docs here explain how to run ArchivesSpace behind Apache:
https://github.com/archivesspace/archivesspace/blob/master/README_HTTPS.md

You can do the same thing with nginx. You don't need to use SSL, though it's a good idea.

-Blake

________________________________________
From: archivesspace_users_group-bounces at lyralists.lyrasis.org <archivesspace_users_group-bounces at lyralists.lyrasis.org> on behalf of Cobourn, Alston <Alston.Cobourn at tamucc.edu>
Sent: Thursday, May 17, 2018 2:54:30 PM
To: archivesspace_users_group at lyralists.lyrasis.org
Subject: [Archivesspace_Users_Group] OAI base urls containing port numbers

We recently configured the OAI on our ArchivesSpace instance.  By default our base url is http://archivesspace.tamucc.edu:8082/oai  We are hoping to modify this base url so that does not contain the port number :8082 since that is a risk for hackers.  Is there anyone who has an instance of ArchivesSpace maintained locally on your campus where you have modified the base url?  If so, can you please send me info on how to modify the URL or put me in touch with the appropriate IT person at your institution?  My IT guy is having a hard time figuring out how to make this change.

Sincerely,

Alston Cobourn
Processing and Digital Assets Archivist
Texas A&M-Corpus Christi
Alston.cobourn at tamucc.edu<mailto:Alston.cobourn at tamucc.edu>
361-825-2300