Demo web

[pwalczysko]

As discussed, this PR is:

1. upgrading the ciphers and protocols in demo playbook
2. upgrading nginx version
3. removing unused confusing jinja files

cc @jburel

[pwalczysko]

This has been now implemented on demo server.
All works fine (omero-web, nginx on 1.26.2 and the ciphers added).

cc @jburel

Happy for me to merge ?

[pwalczysko]

demo is now on

    nginx 1.26.2

has the

ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;

has the

omero.glacier2.IceSSL.Ciphers: "HIGH:!DHE"

line in the server config

[pwalczysko]

demo has now all the web apps and the server and omero py updated

[pwalczysko]

@jburel would you be happy for me to merge this please ? In order to minimize the complexity - all is deployed and working. (you have applied your manual changes on top of this). Thanks

After this (in the new year), we should discuss about how to get about upgrading OMERO.server whilst not interfering with the omero-certificate changes.