jeffcoughlin/farcrysolrpro — pull request #51 by boomfish (2012-09-11 10:14:37+00:00)
Title: Enhanced start and stop scripts for Solr server on Windows

New features:

* All configuration variables in one solrvars.bat file
* Daily rolling logfiles (request,stdout,stderr) by default
* Use default hostname of localhost for tighter security
* Uses JAVA_HOME if set to find java.exe

The scripts have been tested on Windows 7 (64-bit) from the command line and via NSSM.

**IMPORTANT**: the JETTYHOST default in the new script may cause existing setups to fail to start!

When the default Jetty host setting is used, anyone who can access the Jetty port on the server can read and alter the contents of any Solr indexes served through Jetty. Not everyone who uses Solr will have their IP firewall configured to block requests to the Jetty port, so the default setting is a security risk in many environments.

The recommended configuration for FarCry Solr Pro is to have Solr running on the same server as FarCry. Configuring Jetty and the plugin to use the loopback interface (localhost) in this setup will secure the connection without the need to rely on firewall IP/port blocking.

Any user who prefers the previous behaviour (e.g. they run FarCry and Solr on different servers) can comment out the setting in solrvars.bat. However the vast majority of FarCry/Solr users are better off using localhost.

If this pull request is accepted, the default value for the host setting in the Solr Pro plugin config should probably also be changed to localhost.