summaryrefslogtreecommitdiffstats
path: root/roles/httpd
Commit message (Collapse)AuthorAgeFilesLines
* Do not httpd-redirect for acme challengesPatrick Uiterwijk2017-09-141-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Revert "Do not httpd-redirect for acme challenges" Not yet +2 FBRPatrick Uiterwijk2017-09-091-1/+0
| | | | This reverts commit fd0a29275ad4f37f42f6383e14a298adf1db0978.
* Do not httpd-redirect for acme challengesPatrick Uiterwijk2017-09-091-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Allow setting up a vhost for certgetterPatrick Uiterwijk2017-09-092-0/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Move to registry02/03 in productionPatrick Uiterwijk2017-08-041-6/+1
| | | | Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
* Revert "Deploy httpd config to prevent varnish attacks"Patrick Uiterwijk2017-08-022-18/+0
| | | | This reverts commit ef52ab8e89380b0ac2f051b46303389bc6693462.
* Deploy httpd config to prevent varnish attacksPatrick Uiterwijk2017-08-022-0/+18
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Disable removing 100-continuePatrick Uiterwijk2017-07-221-0/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Fix fedpkg double uploads by abusing the krb5 replay cache being localPatrick Uiterwijk2017-07-221-0/+46
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* add webUI for stage reverseproxyAdam Miller2017-06-301-2/+8
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* We want to modify the staging partPatrick Uiterwijk2017-06-301-1/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Change static content caching from 5 days to 30 minutesRicky Elrod2017-06-091-3/+3
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* missed a few of these due to spacingKevin Fenzi2017-04-132-4/+4
|
* Split staging and prod docker push certsPatrick Uiterwijk2017-04-102-2/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Why, Docker, why? I thought we were friendsPatrick Uiterwijk2017-03-151-0/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Disallow robots from expensive queries on koscheiMichael Simacek2017-02-241-0/+2
|
* Alias and mod_rewrite mixing doesn't go too wellPatrick Uiterwijk2017-02-211-2/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Create directory for registry-signaturesPatrick Uiterwijk2017-02-211-0/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* CDN has no clue about stagingPatrick Uiterwijk2017-02-161-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Do this the other way around. And Docker...Patrick Uiterwijk2017-02-161-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Do not send update requests to CDNPatrick Uiterwijk2017-02-161-1/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* redirect mirrors.fp.o/publiclist to admin.fp.o/mirrormanagerRicky Elrod2017-02-161-2/+2
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* More flexible regexPatrick Uiterwijk2017-02-151-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Redirect blob requests to CDNPatrick Uiterwijk2017-02-151-3/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Remove keepalives configuration in productionPatrick Uiterwijk2017-02-142-8/+8
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Because DockerPatrick Uiterwijk2017-02-131-2/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Let's try keepalivePatrick Uiterwijk2017-02-131-0/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* make a small set of changes before too manyStephen Smoogen2017-02-011-1/+1
|
* Block all traffic for this paste at the proxiesPatrick Uiterwijk2017-01-231-0/+20
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* we need to do all this stuff in templates.Stephen Smoogen2017-01-161-0/+25
|
* Disable for now, but keep aroundPatrick Uiterwijk2017-01-141-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Put staging stable registry behind varnish and redirect to external registryPatrick Uiterwijk2017-01-141-0/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Texlive needs ALMOST two full hours. Let's raise to just above the actual timePatrick Uiterwijk2016-12-301-2/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Also raise apache koji timeoutPatrick Uiterwijk2016-12-291-0/+8
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Only use IPA01 for API access since sessions are not synchronizedPatrick Uiterwijk2016-12-201-3/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Fix IPA reverse cookie domainPatrick Uiterwijk2016-12-201-0/+7
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add header_expect: false as defaultPatrick Uiterwijk2016-12-091-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add expect clear headerPatrick Uiterwijk2016-12-091-0/+3
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Setup a proxyreload for httpd that looks for the ticketkey. If it's not ↵Kevin Fenzi2016-12-0110-19/+19
| | | | there, assume the proxy is just being configured and don't reload httpd.
* add python2-mock hereRicky Elrod2016-09-061-4/+0
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* Unify all ssl cipher suite configurationsPatrick Uiterwijk2016-08-312-4/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Create candidate registry at proxyPatrick Uiterwijk2016-08-291-0/+32
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* set https so styles workRicky Elrod2016-08-031-0/+4
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* set ProxyPreserveHostRicky Elrod2016-08-031-0/+3
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* Route all xmlrpc requests to mm-frontend-checkin01Patrick Uiterwijk2016-06-172-0/+10
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Nuke fedora-mobile website reverse proxyRicky Elrod2016-06-051-6/+0
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* drop bodhost01 and proxy07Kevin Fenzi2016-05-311-4/+0
|
* Try moving this to defaults instead of vars.Kevin Fenzi2016-05-261-0/+0
|
* Remove temporary download.fp.o to dl.fp.o 24 Beta redirectPatrick Uiterwijk2016-05-101-2/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Fix redirects for all images for F24 betaPatrick Uiterwijk2016-05-101-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>