Merge pull request #36 from GSA-TTS/fix-using-egress-proxy

Just trying stuff at this point

app/models/document.rb

@@ -6,11 +6,17 @@ class Document < ApplicationRecord
   validate :url_is_https
 
   def contents
-    @contents ||= Net::HTTP.get(URI.parse(url)).force_encoding("utf-8")
+    @contents ||= Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |request|
+      request.get(uri.path).body
+    end
   end
 
   private
 
+  def uri
+    @uri ||= URI(url)
+  end
+
   def url_is_https
     parsed = URI(url)
     errors.add(:url, "must begin with https") unless parsed.scheme == "https"

config/deployment/egress_proxy/continuous_monitoring-staging.allow.acl

@@ -1 +1,2 @@
 raw.githubusercontent.com
+*.apps.internal

manifest.yml

@@ -9,6 +9,7 @@ applications:
     RAILS_ENV: ((env))
     RAILS_LOG_TO_STDOUT: true
     RAILS_SERVE_STATIC_FILES: true
+    SSL_CERT_FILE: "/etc/ssl/certs/ca-certificates.crt"
   processes:
   - type: worker
     instances: ((worker_instances))

terraform/staging/main.tf

@@ -28,6 +28,5 @@ module "egress_space" {
 
   cf_org_name   = local.cf_org_name
   cf_space_name = "${local.cf_space_name}-egress"
-  managers      = ["ryan.ahearn@gsa.gov"]
-  deployers     = [var.cf_user]
+  deployers     = ["ryan.ahearn@gsa.gov", var.cf_user]
 }