file { "/var/lib/systemd/linger/git":
ensure => present,
}
+ file { "/var/lib/systemd/linger/salsa-webhook":
+ ensure => present,
+ }
file { "/etc/ssh/userkeys/git":
ensure => link,
target => "${salsa::home}/.ssh/authorized_keys",
include apache2::rewrite
include apache2::ssl
- ssl::service { [ 'salsa.debian.org',
- 'signup.salsa.debian.org',
- ]:
+ ssl::service { [
+ 'salsa.debian.org',
+ 'signup.salsa.debian.org',
+ 'webhook.salsa.debian.org',
+ ]:
notify => Exec['service apache2 reload'],
key => true,
}
site => 'signup.salsa.debian.org',
content => template('salsa/apache-signup.salsa.debian.org.conf.erb'),
}
+ apache2::site { '010-webhook.salsa.debian.org':
+ site => 'webhook.salsa.debian.org',
+ content => template('salsa/apache-webhook.salsa.debian.org.conf.erb'),
+ }
apache2::site { '010-pages.debian.net':
site => 'pages.debian.net',
content => template('salsa/apache-pages.debian.net.conf.erb'),
--- /dev/null
+Use common-debian-service-https-redirect * webhook.salsa.debian.org
+
+<VirtualHost *:443>
+ ServerName webhook.salsa.debian.org
+ ServerAdmin debian-admin@lists.debian.org
+
+ Use common-debian-service-ssl webhook.salsa.debian.org
+ Use common-ssl-HSTS
+ Use http-pkp-webhook.salsa.debian.org
+
+ ErrorLog /var/log/apache2/webhook.salsa.debian.org-error.log
+ CustomLog /var/log/apache2/webhook.salsa.debian.org-access.log privacy
+
+ ProxyPreserveHost On
+ AllowEncodedSlashes NoDecode
+
+ ProxyPass / http://127.0.0.1:7443/ retry=15 nocanon
+ ProxyPassReverse http://127.0.0.1:7443/
+</VirtualHost>
+
+# vim:set syn=apache: