mangono-addon-odoo_custom_server

odoo-bin commands to run Odoo in a cloud environment: web server behind an integrated reverse proxy, automatic module update on deployment, database neutralization, assets regeneration, interactive shell. The configuration comes from the environment variables, through environ-odoo-config, without an odoo.conf file.

The package ships the Odoo module odoo_custom_server. It is not installed on a database: it only provides the commands and the patches of the Odoo core they apply at startup. Odoo itself is not modified.

• Source code: gitlab.mangono.io/odoo-cloud/server-command
• Documentation: odoo-cloud.docs.mangono.io/server-command (Mangono account required)

Installation

pip install mangono-addon-odoo_custom_server

Install it in the Python environment of Odoo. The commands are then available as odoo-bin <command>.

Supported versions: Odoo 14 to 20, tested in CI on each of them.

Commands

Deprecated, removed in 2.0.0: generic_server, web_server (replaced by cloud_server), update_server (replaced by cloud_auto_update).

Usage

# Web server on $HTTP_PORT, Odoo listens on 127.0.0.1:8069 behind Caddy
DB_NAME=my_db odoo-bin cloud_server

# Install $INSTALL, update $UPDATE and the modules changed since the last update, then stop
DB_NAME=my_db odoo-bin cloud_auto_update

# Other commands
DB_NAME=my_db odoo-bin generate_assets
DB_NAME=my_db odoo-bin db_neutralize
DB_NAME=my_db odoo-bin cloud_shell --shell-interface ipython

cloud_auto_update takes a PostgreSQL advisory lock per database: several instances started together do not update the same database in parallel.

Odoo core patches

Applied at startup by the commands of this package, through runtime wrappers (wrapt):

• Database allow-list: Odoo connects only to the databases of $DB_NAME. A connection to postgres is redirected to the first configured database, any other database is refused.
• PostgreSQL application_name: odoo-<pid> by default, or PGAPPNAME / db_app_name ({pid} is replaced).
• Reverse proxy: X-Forwarded-Host is set from Host when the proxy sends only X-Forwarded-Proto (case of Clever Cloud), so that Odoo stays in proxy mode.
• Garbage collector: the thresholds of Odoo 19 on Odoo 14 to 18 (GC_THRESHOLD to override), gc.freeze() before each worker fork in prefork mode (GC_FREEZE=False to disable).
• HTTP Server header: Odoo instead of the Werkzeug and Python versions.

Security

• The database allow-list applies only when $DB_NAME is set. Without it, Odoo connects to any database, as usual.
• With cloud_server, Odoo listens on 127.0.0.1 only; only the proxy is exposed.
• With cloud_server, the /web/database/* routes are redirected to /web/login by the proxy when list_db is off (LIST_DB). When it is on, the database manager is reachable, protected by the Odoo master password only.
• The other commands (odoo-bin without proxy) do not block the database manager.

License

AGPL-3, Mangono.