ssl::service { [
'salsa.debian.org',
+ 'registry.salsa.debian.org',
'signup.salsa.debian.org',
'webhook.salsa.debian.org',
'pages.debian.net',
site => 'salsa.debian.org',
content => template('salsa/apache-salsa.debian.org.conf.erb'),
}
+ apache2::site { '010-registry.salsa.debian.org':
+ site => 'registry.salsa.debian.org',
+ content => template('salsa/apache-registry.salsa.debian.org.conf.erb'),
+ }
apache2::site { '010-signup.salsa.debian.org':
site => 'signup.salsa.debian.org',
content => template('salsa/apache-signup.salsa.debian.org.conf.erb'),
--- /dev/null
+Use common-debian-service-https-redirect * registry.salsa.debian.org
+
+<VirtualHost *:443>
+ ServerName registry.salsa.debian.org
+ ServerAdmin debian-admin@lists.debian.org
+
+ Use common-debian-service-ssl registry.salsa.debian.org
+ Use common-ssl-HSTS
+ Use http-pkp-registry.salsa.debian.org
+
+ ErrorLog /var/log/apache2/registry.salsa.debian.org-error.log
+ CustomLog /var/log/apache2/registry.salsa.debian.org-access.log privacy
+
+ ProxyPass / http://127.0.0.1:5000/ retry=15
+ ProxyPassReverse / http://127.0.0.1:5000/
+ RequestHeader set X-Forwarded-Proto "https"
+</VirtualHost>
+
+# vim:set syn=apache: