Add a apache_not_public role where we do not add ferm allow rules and put casulana...

[mirror/dsa-puppet.git] / modules / apache2 / templates / default-debian.org.erb

diff --git a/modules/apache2/templates/default-debian.org.erb b/modules/apache2/templates/default-debian.org.erb
index 5cb6e1f..0c9eff3 100644 (file)
--- a/modules/apache2/templates/default-debian.org.erb
+++ b/modules/apache2/templates/default-debian.org.erb
@@ -10,6 +10,11 @@
        CustomLog /var/log/apache2/access.log privacy
 
        DocumentRoot /srv/www/default.debian.org/htdocs
+       <% if scope.call_function('versioncmp', [@lsbmajdistrelease, '7']) > 0 -%>
+       <Directory /srv/www/default.debian.org/htdocs>
+               Require all granted
+       </Directory>
+       <% end -%>
 
        HostnameLookups Off
        UseCanonicalName Off