summaryrefslogtreecommitdiffstats
path: root/roles/httpd
Commit message (Collapse)AuthorAgeFilesLines
...
* ProxyPass and redirect don't collaborate nicelyPatrick Uiterwijk2016-05-101-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Remove $Kevin Fenzi2016-05-101-1/+1
|
* Redirect workstation beta to dl for now.Kevin Fenzi2016-05-101-0/+2
|
* Well, maybe you can register at a registry?Patrick Uiterwijk2016-04-121-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This needs to be under LocationPatrick Uiterwijk2016-04-121-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Only allow containerbuild to push to the registryPatrick Uiterwijk2016-04-121-0/+21
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Let's use the existing pki pathPatrick Uiterwijk2016-04-122-1/+8
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Use Fedora proxies as only proxy for Docker RegistryPatrick Uiterwijk2016-04-121-0/+11
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Allow to keep the host header through a settingPatrick Uiterwijk2016-03-103-0/+7
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Indexing /datagrepper is uselessPatrick Uiterwijk2016-02-111-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Also match api_2Patrick Uiterwijk2016-01-221-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* COPR API goes over SSLPatrick Uiterwijk2016-01-221-0/+15
|
* Proxy copr apiPatrick Uiterwijk2016-01-221-0/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This is called filePatrick Uiterwijk2016-01-221-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Do not forward COPR /api requestsPatrick Uiterwijk2016-01-222-1/+7
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add the de-facto x-forwarded-protoPatrick Uiterwijk2016-01-151-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Merge patch to enable HSTS on id.fp.o. #4991Patrick Uiterwijk2015-12-011-0/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Cherrypy wants -Proto. Lets make it happyPatrick Uiterwijk2015-12-011-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Replace all restart httpd with reload httpdPatrick Uiterwijk2015-11-049-18/+18
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Set requesttimeout on headersPatrick Uiterwijk2015-10-152-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Gte another reload placeKevin Fenzi2015-10-111-1/+1
|
* Revert "robots.txt for bodhi.fp.o."Ralph Bean2015-10-111-2/+0
| | | | This reverts commit dd76e91f2f441efbd953907889a4168c8f9159ac.
* robots.txt for bodhi.fp.o.Ralph Bean2015-10-111-0/+2
|
* Switch proxies to use the mpm event module instead of prefork.Kevin Fenzi2015-10-093-2/+28
|
* Also start havegedPatrick Uiterwijk2015-10-081-1/+1
|
* Var files are also usefulPatrick Uiterwijk2015-10-081-0/+0
|
* Create both prod and stg ticket keysPatrick Uiterwijk2015-10-072-1/+1
|
* Move the haveged install to the mod_ssl roleKevin Fenzi2015-10-072-13/+13
|
* Enable ticket keysPatrick Uiterwijk2015-10-072-0/+2
|
* Add connect time random to use 1024 byes of /dev/randomKevin Fenzi2015-10-071-0/+1
|
* Add haveged to proxies for entropyPatrick Uiterwijk2015-10-071-0/+13
|
* Robots have no use in fedoracommunity as its just an aggregatorPatrick Uiterwijk2015-09-161-0/+3
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* and we remove proxy09Stephen Smoogen2015-09-011-5/+0
|
* change various ips to new ipv6 addressStephen Smoogen2015-08-211-2/+2
|
* Make all redirects be 302Patrick Uiterwijk2015-08-172-2/+1
| | | | | | | | | | This will allow us more flexibility for moving redirects around. It will result in less cached redirect entries, and as such more requests to the proxies, but since those requests are handled by the reverse proxies themselves, and within apache, those should not take that much extra processing. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* The crawler logs are now on mm-frontend01.Adrian Reber2015-06-231-3/+0
| | | | ProxyPass to the crawler is no longer required.
* The crawler logs are now on mm-crawler01Adrian Reber2015-06-121-2/+2
|
* Use more https URLs where possibleTill Maas2015-06-041-9/+9
|
* Fix redirect from publiclist to mirrormanager.Adrian Reber2015-05-151-1/+1
| | | | | | | | | | | | | | | | | | | There have been reports that the old links pointing to the mirrorlist are no longer working: $ curl -I http://mirrors.fedoraproject.org/publiclist/ Location: https://admin.fedoraproject.org/mirrormanager/// This redirect still works but trying to access a specific mirrorlist fails: $ curl -I http://mirrors.fedoraproject.org/publiclist/EPEL/7/ Location: https://admin.fedoraproject.org/mirrormanager///EPEL/7/ $ curl -I https://admin.fedoraproject.org/mirrormanager///EPEL/7/ HTTP/1.1 404 NOT FOUND At different places there are just too many slashes added. Removing the slashes seems to help.
* Just disallow /updates. Not much point in bodhi updates being in search engines.Kevin Fenzi2015-04-231-0/+1
|
* Also tell riddler we don't like themPatrick Uiterwijk2015-04-231-0/+4
|
* Sync ssh_known_hosts to the proxiesKevin Fenzi2015-04-021-0/+4
|
* Remove ip-specific listeningPatrick Uiterwijk2015-03-303-4/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* and we have ipv6Stephen Smoogen2015-03-301-0/+4
|
* oh yeah.. vpnStephen Smoogen2015-03-231-0/+8
|
* and we try to make listspam a little less.Stephen Smoogen2015-03-231-0/+6
|
* Add proxy02. Drop second ip.Kevin Fenzi2015-02-211-4/+0
|
* Drop the one ip on proxy07 to prep for moving it over to ansibleKevin Fenzi2015-02-211-2/+0
|
* Revert "Set HSTS on id.fp.o manually to disable subdomains"Patrick Uiterwijk2015-02-201-2/+0
| | | | This reverts commit 62c73923f391529297d7469c9a970530943af9ec.
* Set HSTS on id.fp.o manually to disable subdomainsPatrick Uiterwijk2015-02-201-0/+2
|