Add registry.salsa.debian.org vhost config (RT#7316)
authorJulien Cristau <jcristau@debian.org>
Thu, 5 Jul 2018 10:02:37 +0000 (12:02 +0200)
committerJulien Cristau <jcristau@debian.org>
Thu, 5 Jul 2018 10:04:51 +0000 (12:04 +0200)
modules/salsa/manifests/web.pp
modules/salsa/templates/apache-registry.salsa.debian.org.conf.erb [new file with mode: 0644]

index b4a198b..212e9be 100644 (file)
@@ -7,6 +7,7 @@ class salsa::web inherits salsa {
 
        ssl::service { [
                'salsa.debian.org',
+               'registry.salsa.debian.org',
                'signup.salsa.debian.org',
                'webhook.salsa.debian.org',
                'pages.debian.net',
@@ -19,6 +20,10 @@ class salsa::web inherits salsa {
                site    => 'salsa.debian.org',
                content => template('salsa/apache-salsa.debian.org.conf.erb'),
        }
+       apache2::site { '010-registry.salsa.debian.org':
+               site    => 'registry.salsa.debian.org',
+               content => template('salsa/apache-registry.salsa.debian.org.conf.erb'),
+       }
        apache2::site { '010-signup.salsa.debian.org':
                site    => 'signup.salsa.debian.org',
                content => template('salsa/apache-signup.salsa.debian.org.conf.erb'),
diff --git a/modules/salsa/templates/apache-registry.salsa.debian.org.conf.erb b/modules/salsa/templates/apache-registry.salsa.debian.org.conf.erb
new file mode 100644 (file)
index 0000000..8147335
--- /dev/null
@@ -0,0 +1,19 @@
+Use common-debian-service-https-redirect * registry.salsa.debian.org
+
+<VirtualHost *:443>
+       ServerName registry.salsa.debian.org
+       ServerAdmin debian-admin@lists.debian.org
+
+       Use common-debian-service-ssl registry.salsa.debian.org
+       Use common-ssl-HSTS
+       Use http-pkp-registry.salsa.debian.org
+
+       ErrorLog /var/log/apache2/registry.salsa.debian.org-error.log
+       CustomLog /var/log/apache2/registry.salsa.debian.org-access.log privacy
+
+       ProxyPass / http://127.0.0.1:5000/ retry=15
+       ProxyPassReverse / http://127.0.0.1:5000/
+       RequestHeader set X-Forwarded-Proto "https"
+</VirtualHost>
+
+# vim:set syn=apache: