UPSTREAMFIRST: removing old roles that aren't used anymore
This commit is contained in:
Pierre-Yves Chibon
parent
1ca22d9efe
commit
0078506569
34 changed files with 0 additions and 2093 deletions
|
|
@ -1,2 +0,0 @@
|
||||||
---
|
|
||||||
pagure_instance_name: "Pagure"
|
|
||||||
|
|
@ -1,91 +0,0 @@
|
||||||
#
|
|
||||||
# Aliases in this file will NOT be expanded in the header from
|
|
||||||
# Mail, but WILL be visible over networks or from /bin/mail.
|
|
||||||
#
|
|
||||||
# >>>>>>>>>> The program "newaliases" must be run after
|
|
||||||
# >> NOTE >> this file is updated for any changes to
|
|
||||||
# >>>>>>>>>> show through to sendmail.
|
|
||||||
#
|
|
||||||
|
|
||||||
# Basic system aliases -- these MUST be present.
|
|
||||||
mailer-daemon: postmaster
|
|
||||||
postmaster: sysadmin-main
|
|
||||||
|
|
||||||
# General redirections for pseudo accounts.
|
|
||||||
bin: root
|
|
||||||
daemon: root
|
|
||||||
adm: root
|
|
||||||
lp: root
|
|
||||||
sync: root
|
|
||||||
shutdown: root
|
|
||||||
halt: root
|
|
||||||
mail: root
|
|
||||||
#news: root
|
|
||||||
uucp: root
|
|
||||||
operator: root
|
|
||||||
games: root
|
|
||||||
gopher: root
|
|
||||||
ftp: root
|
|
||||||
#nobody: root
|
|
||||||
radiusd: root
|
|
||||||
nut: root
|
|
||||||
dbus: root
|
|
||||||
vcsa: root
|
|
||||||
canna: root
|
|
||||||
wnn: root
|
|
||||||
rpm: root
|
|
||||||
nscd: root
|
|
||||||
pcap: root
|
|
||||||
apache: root
|
|
||||||
webalizer: root
|
|
||||||
dovecot: root
|
|
||||||
fax: root
|
|
||||||
quagga: root
|
|
||||||
radvd: root
|
|
||||||
pvm: root
|
|
||||||
amanda: root
|
|
||||||
privoxy: root
|
|
||||||
ident: root
|
|
||||||
named: root
|
|
||||||
xfs: root
|
|
||||||
gdm: root
|
|
||||||
mailnull: root
|
|
||||||
postgres: root
|
|
||||||
sshd: root
|
|
||||||
smmsp: root
|
|
||||||
postfix: root
|
|
||||||
netdump: root
|
|
||||||
ldap: root
|
|
||||||
squid: root
|
|
||||||
ntp: root
|
|
||||||
mysql: root
|
|
||||||
desktop: root
|
|
||||||
rpcuser: root
|
|
||||||
rpc: root
|
|
||||||
nfsnobody: root
|
|
||||||
notifications: root
|
|
||||||
|
|
||||||
ingres: root
|
|
||||||
system: root
|
|
||||||
toor: root
|
|
||||||
manager: root
|
|
||||||
dumper: root
|
|
||||||
abuse: root
|
|
||||||
nagios: root
|
|
||||||
|
|
||||||
newsadm: news
|
|
||||||
newsadmin: news
|
|
||||||
usenet: news
|
|
||||||
ftpadm: ftp
|
|
||||||
ftpadmin: ftp
|
|
||||||
ftp-adm: ftp
|
|
||||||
ftp-admin: ftp
|
|
||||||
|
|
||||||
# trap decode to catch security attacks
|
|
||||||
decode: root
|
|
||||||
|
|
||||||
# Person who should get root's mail
|
|
||||||
root: sysadmin-main
|
|
||||||
|
|
||||||
pagure: /dev/null
|
|
||||||
reply: /dev/null
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
# Backup a database *locally* to /backups/.
|
|
||||||
|
|
||||||
DB=$1
|
|
||||||
|
|
||||||
# Make our latest backup
|
|
||||||
/usr/bin/pg_dump -C $DB | /usr/bin/xz > /backups/$DB-$(date +%F).dump.xz
|
|
||||||
|
|
||||||
# Also, delete the backup from a few days ago.
|
|
||||||
rm -f /backups/$DB-$(date --date="3 days ago" +%F).dump.xz
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=Pagure EventSource server (Allowing live refresh of the pages supporting it)
|
|
||||||
After=redis.target
|
|
||||||
Documentation=https://pagure.io/pagure
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/usr/libexec/pagure-ev/pagure_stream_server.py
|
|
||||||
Type=simple
|
|
||||||
User=git
|
|
||||||
Group=git
|
|
||||||
Restart=on-failure
|
|
||||||
LimitNOFILE=40960
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=Pagure worker for backend git interaction
|
|
||||||
After=redis.target
|
|
||||||
Documentation=https://pagure.io/pagure
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/usr/bin/celery worker -A pagure.lib.tasks --loglevel=info -Q fast_workers -c 5
|
|
||||||
Environment="PAGURE_CONFIG=/etc/pagure/pagure.cfg"
|
|
||||||
Type=simple
|
|
||||||
User=git
|
|
||||||
Restart=on-failure
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=Pagure worker for backend git interaction
|
|
||||||
After=redis.target
|
|
||||||
Documentation=https://pagure.io/pagure
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/usr/bin/celery worker -A pagure.lib.tasks --loglevel=info -Q medium_workers -c 5
|
|
||||||
Environment="PAGURE_CONFIG=/etc/pagure/pagure.cfg"
|
|
||||||
Type=simple
|
|
||||||
User=git
|
|
||||||
Restart=on-failure
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=Pagure worker for backend git interaction
|
|
||||||
After=redis.target
|
|
||||||
Documentation=https://pagure.io/pagure
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/usr/bin/celery worker -A pagure.lib.tasks --loglevel=info -Q slow_workers -c 5
|
|
||||||
Environment="PAGURE_CONFIG=/etc/pagure/pagure.cfg"
|
|
||||||
Type=simple
|
|
||||||
User=git
|
|
||||||
Restart=on-failure
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
||||||
|
|
@ -1,78 +0,0 @@
|
||||||
# PostgreSQL Client Authentication Configuration File
|
|
||||||
# ===================================================
|
|
||||||
#
|
|
||||||
# Refer to the PostgreSQL Administrator's Guide, chapter "Client
|
|
||||||
# Authentication" for a complete description. A short synopsis
|
|
||||||
# follows.
|
|
||||||
#
|
|
||||||
# This file controls: which hosts are allowed to connect, how clients
|
|
||||||
# are authenticated, which PostgreSQL user names they can use, which
|
|
||||||
# databases they can access. Records take one of these forms:
|
|
||||||
#
|
|
||||||
# local DATABASE USER METHOD [OPTION]
|
|
||||||
# host DATABASE USER CIDR-ADDRESS METHOD [OPTION]
|
|
||||||
# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
|
|
||||||
# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
|
|
||||||
#
|
|
||||||
# (The uppercase items must be replaced by actual values.)
|
|
||||||
#
|
|
||||||
# The first field is the connection type: "local" is a Unix-domain socket,
|
|
||||||
# "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an
|
|
||||||
# SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket.
|
|
||||||
#
|
|
||||||
# DATABASE can be "all", "sameuser", "samerole", a database name, or
|
|
||||||
# a comma-separated list thereof.
|
|
||||||
#
|
|
||||||
# USER can be "all", a user name, a group name prefixed with "+", or
|
|
||||||
# a comma-separated list thereof. In both the DATABASE and USER fields
|
|
||||||
# you can also write a file name prefixed with "@" to include names from
|
|
||||||
# a separate file.
|
|
||||||
#
|
|
||||||
# CIDR-ADDRESS specifies the set of hosts the record matches.
|
|
||||||
# It is made up of an IP address and a CIDR mask that is an integer
|
|
||||||
# (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies
|
|
||||||
# the number of significant bits in the mask. Alternatively, you can write
|
|
||||||
# an IP address and netmask in separate columns to specify the set of hosts.
|
|
||||||
#
|
|
||||||
# METHOD can be "trust", "reject", "md5", "crypt", "password",
|
|
||||||
# "krb5", "ident", or "pam". Note that "password" sends passwords
|
|
||||||
# in clear text; "md5" is preferred since it sends encrypted passwords.
|
|
||||||
#
|
|
||||||
# OPTION is the ident map or the name of the PAM service, depending on METHOD.
|
|
||||||
#
|
|
||||||
# Database and user names containing spaces, commas, quotes and other special
|
|
||||||
# characters must be quoted. Quoting one of the keywords "all", "sameuser" or
|
|
||||||
# "samerole" makes the name lose its special character, and just match a
|
|
||||||
# database or username with that name.
|
|
||||||
#
|
|
||||||
# This file is read on server startup and when the postmaster receives
|
|
||||||
# a SIGHUP signal. If you edit the file on a running system, you have
|
|
||||||
# to SIGHUP the postmaster for the changes to take effect. You can use
|
|
||||||
# "pg_ctl reload" to do that.
|
|
||||||
|
|
||||||
# Put your actual configuration here
|
|
||||||
# ----------------------------------
|
|
||||||
#
|
|
||||||
# If you want to allow non-local connections, you need to add more
|
|
||||||
# "host" records. In that case you will also need to make PostgreSQL listen
|
|
||||||
# on a non-local interface via the listen_addresses configuration parameter,
|
|
||||||
# or via the -i or -h command line switches.
|
|
||||||
#
|
|
||||||
|
|
||||||
#@authcomment@
|
|
||||||
|
|
||||||
# TYPE DATABASE USER CIDR-ADDRESS METHOD
|
|
||||||
|
|
||||||
#@remove-line-for-nolocal@# "local" is for Unix domain socket connections only
|
|
||||||
#@remove-line-for-nolocal@local all all @authmethod@
|
|
||||||
# IPv4 local connections:
|
|
||||||
#host all all 127.0.0.1/32 @authmethod@
|
|
||||||
# IPv6 local connections:
|
|
||||||
#host all all ::1/128 @authmethod@
|
|
||||||
|
|
||||||
local all all ident
|
|
||||||
host koji koji 10.5.128.166 255.255.255.255 md5
|
|
||||||
host all all 0.0.0.0 0.0.0.0 md5
|
|
||||||
# Note, I can't think of a reason to make this more restrictive than ipv4 but
|
|
||||||
# only fakefas needs it so far
|
|
||||||
host all all ::1/128 md5
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
User-agent: *
|
|
||||||
Disallow: /api
|
|
||||||
Disallow: /login
|
|
||||||
Disallow: /*/raw
|
|
||||||
Crawl-Delay: 2
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
## <summary></summary>
|
|
||||||
Binary file not shown.
|
|
@ -1,11 +0,0 @@
|
||||||
module pagure 1.0;
|
|
||||||
|
|
||||||
require {
|
|
||||||
type httpd_t;
|
|
||||||
type gitosis_var_lib_t;
|
|
||||||
class dir { add_name remove_name write };
|
|
||||||
class file { create link setattr unlink write };
|
|
||||||
}
|
|
||||||
|
|
||||||
allow httpd_t gitosis_var_lib_t:dir { add_name remove_name write };
|
|
||||||
allow httpd_t gitosis_var_lib_t:file { create link setattr unlink write };
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=stunnel
|
|
||||||
After=network.target
|
|
||||||
Documentation=https://infrastructure.fedoraproject.org/infra/docs/fedmsg-websocket.txt
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/usr/bin/stunnel /etc/stunnel/stunnel.conf
|
|
||||||
Type=forking
|
|
||||||
User=root
|
|
||||||
Group=root
|
|
||||||
Restart=on-failure
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
@ -1,202 +0,0 @@
|
||||||
<!DOCTYPE html>
|
|
||||||
<html lang='en'>
|
|
||||||
<head>
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
|
|
||||||
<title>{% block title %}{% endblock %} - Upstream First Pagure</title>
|
|
||||||
<link rel="shortcut icon" type="image/vnd.microsoft.icon"
|
|
||||||
href="{{ url_for('static', filename='favicon.ico')}}"/>
|
|
||||||
<link href="{{ config['BOOTSTRAP_URLS_CSS'] }}"
|
|
||||||
type="text/css" rel="stylesheet" />
|
|
||||||
<link href="{{ url_for('static', filename='pagure.css') }}"
|
|
||||||
type="text/css" rel="stylesheet" />
|
|
||||||
<link href="{{ url_for('static', filename='vendor/open-iconic/css/open-iconic.min.css') }}"
|
|
||||||
type="text/css" rel="stylesheet" />
|
|
||||||
<link href="{{ url_for('static', filename='fonts/fonts.css') }}"
|
|
||||||
rel="stylesheet" type="text/css" />
|
|
||||||
<link href="{{ url_for('static', filename='vendor/hack_fonts/css/hack-extended.min.css') }}"
|
|
||||||
type="text/css" rel="stylesheet" />
|
|
||||||
{% block header %}{% endblock %}
|
|
||||||
</head>
|
|
||||||
<body id="{{ tag }}">
|
|
||||||
<!-- start masthead -->
|
|
||||||
<div class="masthead">
|
|
||||||
<div class="container">
|
|
||||||
<div class="row">
|
|
||||||
<div class="col-sm-3">
|
|
||||||
<a href="{{ url_for('ui_ns.index') }}">
|
|
||||||
<img height=40px src="{{ url_for('static', filename='upstreamfirst_plain.png') }}"
|
|
||||||
alt="pagure Logo" id="pagureLogo"/>
|
|
||||||
</a>
|
|
||||||
</div>
|
|
||||||
<div class="col-sm-9">
|
|
||||||
<div class="row">
|
|
||||||
|
|
||||||
<nav class="navbar navbar-light p-t-0 p-b-0">
|
|
||||||
<div class="container">
|
|
||||||
<ul class="nav navbar-nav nav-underline pull-xs-right">
|
|
||||||
{% if not nologin %}
|
|
||||||
{% if g.fas_user %}
|
|
||||||
<li class="nav-item">
|
|
||||||
<a class="nav-link" href="{{ url_for('ui_ns.browse_projects') }}">Browse</a>
|
|
||||||
</li>
|
|
||||||
{% if config.get('ENABLE_NEW_PROJECTS', True) %}
|
|
||||||
<li class="nav-item p-l-1">
|
|
||||||
<a class="nav-link" href="{{ url_for('ui_ns.new_project') }}">
|
|
||||||
<span class="oi" data-glyph="plus" title="Create New"
|
|
||||||
aria-hidden="true">
|
|
||||||
</span>
|
|
||||||
</a>
|
|
||||||
</li>
|
|
||||||
{% endif %}
|
|
||||||
<li class="nav-item dropdown p-l-1">
|
|
||||||
<a class="nav-link dropdown-toggle" data-toggle="dropdown"
|
|
||||||
href="#" role="button" aria-haspopup="true" aria-expanded="false">
|
|
||||||
{{ g.fas_user.username | avatar(24) | safe }}
|
|
||||||
</a>
|
|
||||||
<div class="dropdown-menu dropdown-menu-right">
|
|
||||||
<div class="dropdown-header">
|
|
||||||
<strong>{{ g.fas_user.username }}</strong>
|
|
||||||
</div>
|
|
||||||
<div class="dropdown-divider"></div>
|
|
||||||
<a class="dropdown-item" href="{{
|
|
||||||
url_for('ui_ns.view_user', username=g.fas_user.username)
|
|
||||||
}}">My Public Profile</a>
|
|
||||||
<a class="dropdown-item" href="{{
|
|
||||||
url_for('ui_ns.user_settings')
|
|
||||||
}}">My Settings</a>
|
|
||||||
<div class="dropdown-divider"></div>
|
|
||||||
{% if config.get('ENABLE_TICKETS', True) %}
|
|
||||||
<a class="dropdown-item" href="{{
|
|
||||||
url_for('ui_ns.view_user_issues', username=g.fas_user.username)
|
|
||||||
}}">My Issues</a>
|
|
||||||
{% endif %}
|
|
||||||
<a class="dropdown-item" href="{{
|
|
||||||
url_for('ui_ns.view_user_requests', username=g.fas_user.username)
|
|
||||||
}}">My Pull Requests</a>
|
|
||||||
<div class="dropdown-divider"></div>
|
|
||||||
<a class="dropdown-item" href="{{ url_for('auth_logout')
|
|
||||||
}}?next={{request.url}}">Log Out</a>
|
|
||||||
</div>
|
|
||||||
</li>
|
|
||||||
{% else %}
|
|
||||||
<li class="nav-item p-l-1">
|
|
||||||
<a class="nav-link btn btn-primary" href="{{
|
|
||||||
url_for('auth_login') }}?next={{request.url
|
|
||||||
}}">Log In</a>
|
|
||||||
</li>
|
|
||||||
{% endif %}
|
|
||||||
{% endif %}
|
|
||||||
</ul>
|
|
||||||
</div>
|
|
||||||
</nav>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
</div><!-- close masthead-->
|
|
||||||
|
|
||||||
<div class="bodycontent p-b-3">
|
|
||||||
|
|
||||||
{% with messages = get_flashed_messages(with_categories=true) %}
|
|
||||||
{% if messages %}
|
|
||||||
<div class="notification-spacer">
|
|
||||||
<div class="container p-t-2">
|
|
||||||
{% for category, message in messages %}
|
|
||||||
<div class="alert {%
|
|
||||||
if category == 'error' %}alert-warning{%
|
|
||||||
else %}alert-info{%
|
|
||||||
endif %} alert-dismissible" role="alert">
|
|
||||||
<button type="button" class="close" data-dismiss="alert" aria-label="Close">
|
|
||||||
<span aria-hidden="true">×</span>
|
|
||||||
<span class="sr-only">Close</span>
|
|
||||||
</button>
|
|
||||||
{{ message }}
|
|
||||||
</div>
|
|
||||||
{% endfor %}
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
{% endif %}
|
|
||||||
{% endwith %}
|
|
||||||
{% if new_user %}
|
|
||||||
<div class="notification-spacer">
|
|
||||||
<div class="container p-t-2">
|
|
||||||
<div class="alert alert-info alert-dismissible" role="alert">
|
|
||||||
<button type="button" class="close" data-dismiss="alert"
|
|
||||||
aria-label="Close">
|
|
||||||
<span aria-hidden="true">×</span>
|
|
||||||
<span class="sr-only">Close</span>
|
|
||||||
</button>
|
|
||||||
<h4 class="modal-title" id="welcome_title">
|
|
||||||
Welcome to {{ config['INSTANCE_NAME'] }}, {{ g.fas_user.username }}!
|
|
||||||
</h4>
|
|
||||||
<div class="modal-body">
|
|
||||||
<p>
|
|
||||||
We are glad to welcome you to pagure.
|
|
||||||
</p>
|
|
||||||
<p>
|
|
||||||
In order to get started with pagure, to set-up
|
|
||||||
your preferred email address or your ssh key,
|
|
||||||
you may want to read the
|
|
||||||
<a href="https://docs.pagure.org/pagure/usage/first_steps.html">
|
|
||||||
First steps in Pagure</a> documentation.
|
|
||||||
</p>
|
|
||||||
<p>
|
|
||||||
You may also find some more information on how to use pagure
|
|
||||||
in the <a href="https://docs.pagure.org/pagure/usage.html">
|
|
||||||
usage section of the documentation</a>.
|
|
||||||
</p>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
{% block content %}{% endblock %}
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<div class="footer p-t-1 p-b-1">
|
|
||||||
<div class="container">
|
|
||||||
<p class="text-muted credit">
|
|
||||||
Copyright © 2014-2017 Red Hat
|
|
||||||
<a href="https://pagure.io/pagure">pagure</a> —
|
|
||||||
{{version}} — <a href="https://docs.pagure.org/pagure/usage.html">Documentation</a>
|
|
||||||
</p>
|
|
||||||
<p><a href="{{ url_for('ui_ns.ssh_hostkey') }}">SSH Hostkey/Fingerprint</a></p>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
{% block jscripts %}
|
|
||||||
<script type="text/javascript"
|
|
||||||
src="{{ url_for('static',
|
|
||||||
filename='vendor/jquery/jquery.min.js') }}">
|
|
||||||
</script>
|
|
||||||
<script type="text/javascript"
|
|
||||||
src="{{ url_for('static',
|
|
||||||
filename='vendor/jquery-ui/jquery-ui.min.js') }}">
|
|
||||||
</script>
|
|
||||||
<script type="text/javascript"
|
|
||||||
src="{{ config['BOOTSTRAP_URLS_JS'] }}">
|
|
||||||
</script>
|
|
||||||
<script type="text/javascript">
|
|
||||||
$('[data-toggle="tooltip"]').tooltip({placement : 'bottom'});
|
|
||||||
</script>
|
|
||||||
{% endblock %}
|
|
||||||
|
|
||||||
{% if config['FEDMENU_URL'] %}
|
|
||||||
<script src="{{ config['FEDMENU_URL'] }}/js/fedmenu.js"></script>
|
|
||||||
<script src="{{ config['FEDMENU_URL'] }}/js/fedora-libravatar.js"></script>
|
|
||||||
<script>
|
|
||||||
fedmenu({
|
|
||||||
'url': '{{ config["FEDMENU_DATA_URL"] }}',
|
|
||||||
'mimeType': 'application/javascript',
|
|
||||||
'position': 'bottom-right',
|
|
||||||
{% if user -%}
|
|
||||||
'user': '{{ user.username }}',
|
|
||||||
{%- endif %}
|
|
||||||
});
|
|
||||||
</script>
|
|
||||||
{% endif %}
|
|
||||||
|
|
||||||
</body>
|
|
||||||
</html>
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
---
|
|
||||||
- name: restart pagure_milter
|
|
||||||
service: name=pagure_milter state=restarted
|
|
||||||
|
|
@ -1,414 +0,0 @@
|
||||||
---
|
|
||||||
# Configuration for the pagure webapp
|
|
||||||
|
|
||||||
- name: install needed packages
|
|
||||||
package: name={{ item }} state=present
|
|
||||||
with_items:
|
|
||||||
- pagure
|
|
||||||
- pagure-ci
|
|
||||||
- pagure-ev
|
|
||||||
- pagure-loadjson
|
|
||||||
- pagure-logcom
|
|
||||||
- pagure-milters
|
|
||||||
- pagure-webhook
|
|
||||||
- python-psycopg2
|
|
||||||
- python2-pygments2
|
|
||||||
- redis
|
|
||||||
- libsemanage-python
|
|
||||||
- mod_ssl
|
|
||||||
- stunnel
|
|
||||||
# Use haveged to ensure the server keeps some entropy
|
|
||||||
- haveged
|
|
||||||
# make sure python2-openidc-client is installed
|
|
||||||
- python2-openidc-client
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- packages
|
|
||||||
|
|
||||||
- name: Initialize postgres if necessary
|
|
||||||
command: /usr/bin/postgresql-setup initdb
|
|
||||||
creates=/var/lib/pgsql/data
|
|
||||||
notify:
|
|
||||||
- restart postgresql
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: Put in robots.txt
|
|
||||||
copy: src=robots.txt dest=/var/www/html/robots.txt
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
|
|
||||||
# Set-up gitolite
|
|
||||||
|
|
||||||
- name: install needed packages
|
|
||||||
package: name=gitolite3 state=present
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- gitolite
|
|
||||||
- packages
|
|
||||||
|
|
||||||
- name: Rename the user gitolite into git
|
|
||||||
command: usermod --move-home --login git --home /srv/git/ gitolite3
|
|
||||||
creates=/srv/git/
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: Rename the group gitolite into git
|
|
||||||
command: groupmod --new-name git gitolite3
|
|
||||||
creates=/srv/git/.gitolite/conf
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create the /srv/git/.gitolite/conf folder
|
|
||||||
file: state=directory
|
|
||||||
path=/srv/git/.gitolite/conf
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create the /srv/git/.gitolite/keydir folder
|
|
||||||
file: state=directory
|
|
||||||
path=/srv/git/.gitolite/keydir
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create the /srv/git/.gitolite/logs folder
|
|
||||||
file: state=directory
|
|
||||||
path=/srv/git/.gitolite/logs
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create the /attachments folder
|
|
||||||
file: state=directory
|
|
||||||
path=/srv/attachments
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: Adjust owner of /srv/git
|
|
||||||
file: name=/srv/git state=directory recurse=yes owner=git group=git
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
|
|
||||||
- name: Adjust permissions of /srv/git/.gitolite
|
|
||||||
file: name=/srv/git/.gitolite state=directory recurse=yes owner=git group=git
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
|
|
||||||
- name: install our own gitolite configuration
|
|
||||||
template: src=gitolite.rc
|
|
||||||
dest=/srv/git/.gitolite.rc
|
|
||||||
owner=git group=git mode=0755
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create all the directories where we store the git repos
|
|
||||||
file: state=directory
|
|
||||||
path={{ item }}
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
with_items:
|
|
||||||
- /srv/git/repositories/
|
|
||||||
- /srv/git/repositories/forks
|
|
||||||
- /srv/git/repositories/docs
|
|
||||||
- /srv/git/repositories/tickets
|
|
||||||
- /srv/git/repositories/requests
|
|
||||||
- /srv/git/remotes
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create the /srv/tmp folder where to clone repos
|
|
||||||
file: state=directory
|
|
||||||
path=/srv/tmp
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
tags:
|
|
||||||
- gitolite
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
|
|
||||||
# Set-up postfix and the milter for postfix
|
|
||||||
|
|
||||||
- name: Add the /etc/aliases file
|
|
||||||
copy: src=aliases dest=/etc/aliases owner=root mode=644
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- pagure
|
|
||||||
- postfix
|
|
||||||
notify:
|
|
||||||
- restart postfix
|
|
||||||
- restart pagure_milter
|
|
||||||
|
|
||||||
# Override pagure_ev systemd service file
|
|
||||||
|
|
||||||
- name: install pagure_ev service definition
|
|
||||||
copy: src=pagure_ev.service
|
|
||||||
dest=/usr/lib/systemd/system/pagure_ev.service
|
|
||||||
owner=root group=root mode=0644
|
|
||||||
notify:
|
|
||||||
- reload systemd
|
|
||||||
- restart pagure_ev
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- pagure_ev
|
|
||||||
|
|
||||||
# Set-up stunnel for the event source server
|
|
||||||
|
|
||||||
- name: install stunnel service definition
|
|
||||||
copy: src=stunnel.service
|
|
||||||
dest=/usr/lib/systemd/system/stunnel.service
|
|
||||||
owner=root group=root mode=0644
|
|
||||||
notify:
|
|
||||||
- reload systemd
|
|
||||||
- restart stunnel
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- stunnel
|
|
||||||
|
|
||||||
- name: ensure old stunnel init file is gone
|
|
||||||
file: dest=/etc/init.d/stunnel/stunnel.init state=absent
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- stunnel
|
|
||||||
- config
|
|
||||||
|
|
||||||
- name: install stunnel.conf
|
|
||||||
template: src={{ item.file }}
|
|
||||||
dest={{ item.dest }}
|
|
||||||
owner=root group=root mode=0600
|
|
||||||
with_items:
|
|
||||||
- { file: stunnel-conf.j2, dest: /etc/stunnel/stunnel.conf }
|
|
||||||
notify: restart stunnel
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- stunnel
|
|
||||||
- config
|
|
||||||
|
|
||||||
- name: Add the different service files for the different workers
|
|
||||||
copy: src={{ item }}.service
|
|
||||||
dest=/etc/systemd/system/{{ item }}.service
|
|
||||||
owner=root group=root mode=0755
|
|
||||||
with_items:
|
|
||||||
- pagure_fast_worker
|
|
||||||
- pagure_medium_worker
|
|
||||||
- pagure_slow_worker
|
|
||||||
notify:
|
|
||||||
- reload systemd
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
|
|
||||||
# Set-up Pagure
|
|
||||||
|
|
||||||
- name: create the /var/www/releases folder
|
|
||||||
file: state=directory
|
|
||||||
path=/var/www/releases
|
|
||||||
owner=git group=git mode=0775
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- web
|
|
||||||
|
|
||||||
- name: copy sundry pagure configuration
|
|
||||||
template: src={{ item.file }}
|
|
||||||
dest={{ item.location }}/{{ item.file }}
|
|
||||||
owner=git group=postfix mode=0640
|
|
||||||
with_items:
|
|
||||||
- { file: pagure.cfg, location: /etc/pagure }
|
|
||||||
- { file: alembic.ini, location: /etc/pagure }
|
|
||||||
changed_when: "1 != 1"
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
notify:
|
|
||||||
- restart apache
|
|
||||||
|
|
||||||
- name: create pagure database
|
|
||||||
delegate_to: "{{ new_pagure_db_command_host }}"
|
|
||||||
become: true
|
|
||||||
become_user: postgres
|
|
||||||
postgresql_db: db={{ new_pagure_db_name }}
|
|
||||||
tags:
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: ensure pagure db user has access to database
|
|
||||||
delegate_to: "{{ new_pagure_db_command_host }}"
|
|
||||||
become: true
|
|
||||||
become_user: postgres
|
|
||||||
postgresql_user: db={{ new_pagure_db_name }} user={{ new_pagure_db_user }} password={{ new_pagure_db_pass }} role_attr_flags=NOSUPERUSER
|
|
||||||
tags:
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: create the database scheme
|
|
||||||
command: /usr/bin/python2 /usr/share/pagure/pagure_createdb.py
|
|
||||||
changed_when: "1 != 1"
|
|
||||||
environment:
|
|
||||||
PAGURE_CONFIG: /etc/pagure/pagure.cfg
|
|
||||||
tags:
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: Install the configuration file to activate https
|
|
||||||
template: src={{ item }} dest=/etc/httpd/conf.d/{{ item }}
|
|
||||||
owner=root group=root mode=0644
|
|
||||||
with_items:
|
|
||||||
- 0_pagure.conf
|
|
||||||
tags:
|
|
||||||
- files
|
|
||||||
- config
|
|
||||||
- pagure
|
|
||||||
- sslciphers
|
|
||||||
notify:
|
|
||||||
- restart apache
|
|
||||||
|
|
||||||
- name: Install the wsgi file
|
|
||||||
template: src={{ item }}
|
|
||||||
dest=/var/www/{{ item }}
|
|
||||||
owner=git group=git mode=0644
|
|
||||||
with_items:
|
|
||||||
- pagure.wsgi
|
|
||||||
- docs_pagure.wsgi
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
notify:
|
|
||||||
- restart apache
|
|
||||||
|
|
||||||
- name: Add default facl so apache can read git repos
|
|
||||||
acl: default=yes etype=user entity=apache permissions="rx" name=/srv/git state=present
|
|
||||||
register: acl_updates
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: Manually fix current default ACLs since Ansible doesnt know recursive acls
|
|
||||||
when: acl_updates.changed
|
|
||||||
command: /usr/bin/setfacl -Rdm user:apache:rx /srv/git
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: Manually fix current ACLs since Ansible doesnt know recursive acls
|
|
||||||
when: acl_updates.changed
|
|
||||||
command: /usr/bin/setfacl -Rm user:apache:rx /srv/git
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: check the selinux context of the git repo directory
|
|
||||||
command: matchpathcon /srv/git
|
|
||||||
register: distgitcontext
|
|
||||||
check_mode: no
|
|
||||||
changed_when: false
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- pagure
|
|
||||||
- selinux
|
|
||||||
|
|
||||||
- name: set the SELinux policy for the distgit root directory
|
|
||||||
command: semanage fcontext -a -t gitosis_var_lib_t "/srv/git(/.*)?"
|
|
||||||
when: distgitcontext.stdout.find('gitosis_var_lib_t') == -1
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- pagure
|
|
||||||
- selinux
|
|
||||||
|
|
||||||
- name: check the selinux context of the releases directory
|
|
||||||
command: matchpathcon /var/www/releases
|
|
||||||
register: distgitcontext
|
|
||||||
check_mode: no
|
|
||||||
changed_when: false
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- pagure
|
|
||||||
- selinux
|
|
||||||
|
|
||||||
# Note: On Fedora its httpd_sys_content_rw_t - Don't we love confusions?
|
|
||||||
- name: set the SELinux policy for the releases directory
|
|
||||||
command: semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/releases(/.*)?"
|
|
||||||
when: distgitcontext.stdout.find('httpd_sys_rw_content_t') == -1
|
|
||||||
tags:
|
|
||||||
- config
|
|
||||||
- pagure
|
|
||||||
- selinux
|
|
||||||
|
|
||||||
- name: copy over our custom selinux module
|
|
||||||
copy: src=selinux/pagure.pp dest=/usr/local/share/pagure.pp
|
|
||||||
register: selinux_module
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: install our custom selinux module
|
|
||||||
command: semodule -i /usr/local/share/pagure.pp
|
|
||||||
when: selinux_module is changed
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: set sebooleans so pagure can talk to the network (db + redis)
|
|
||||||
seboolean: name=httpd_can_network_connect
|
|
||||||
state=true
|
|
||||||
persistent=true
|
|
||||||
tags:
|
|
||||||
- selinux
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: set sebooleans so apache can send emails
|
|
||||||
seboolean: name=httpd_can_sendmail
|
|
||||||
state=true
|
|
||||||
persistent=true
|
|
||||||
tags:
|
|
||||||
- selinux
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
############################################################
|
|
||||||
# Setup the custom theme for the upstreamfirst instance
|
|
||||||
############################################################
|
|
||||||
- name: create the upstreamfirst theme dir
|
|
||||||
file: state=directory
|
|
||||||
path=/var/www/upstreamfirst-paguretheme/templates
|
|
||||||
owner=apache group=apache mode=0775
|
|
||||||
tags:
|
|
||||||
- web
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
- name: copy over custom master.html template
|
|
||||||
copy: src=upstreamfirst-master.html dest=/var/www/upstreamfirst-paguretheme/templates/master.html
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
|
|
||||||
# Ensure all the services are up and running
|
|
||||||
|
|
||||||
- name: Start and enable httpd, postfix, pagure_milter
|
|
||||||
service: name={{ item }} enabled=yes state=started
|
|
||||||
with_items:
|
|
||||||
- httpd
|
|
||||||
- postfix
|
|
||||||
- stunnel
|
|
||||||
- redis
|
|
||||||
- pagure_ev
|
|
||||||
- pagure_ci
|
|
||||||
- pagure_loadjson
|
|
||||||
- pagure_logcom
|
|
||||||
- pagure_milter
|
|
||||||
- pagure_webhook
|
|
||||||
- pagure_worker
|
|
||||||
- pagure_gitolite_worker
|
|
||||||
- pagure_fast_worker
|
|
||||||
- pagure_medium_worker
|
|
||||||
- pagure_slow_worker
|
|
||||||
- haveged
|
|
||||||
ignore_errors: true
|
|
||||||
tags:
|
|
||||||
- pagure
|
|
||||||
- service
|
|
||||||
- postfix
|
|
||||||
|
|
@ -1,161 +0,0 @@
|
||||||
WSGISocketPrefix run/wsgi
|
|
||||||
#WSGIRestrictStdout On
|
|
||||||
WSGIRestrictSignal Off
|
|
||||||
WSGIPythonOptimize 1
|
|
||||||
WSGIPassAuthorization On
|
|
||||||
WSGIDaemonProcess pagure user=git group=git maximum-requests=1000 display-name=pagure processes=4 threads=4 inactivity-timeout=300
|
|
||||||
WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-name=paguredocs processes=4 threads=4 inactivity-timeout=300
|
|
||||||
|
|
||||||
## Redirects http -> https
|
|
||||||
|
|
||||||
<VirtualHost *:80>
|
|
||||||
RewriteEngine on
|
|
||||||
RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L]
|
|
||||||
ServerName {{ external_hostname }}
|
|
||||||
Redirect permanent / https://{{ external_hostname }}/
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
<VirtualHost *:80>
|
|
||||||
RewriteEngine on
|
|
||||||
RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L]
|
|
||||||
ServerName docs.{{ external_hostname }}
|
|
||||||
Redirect permanent / https://docs.{{ external_hostname }}/
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
<VirtualHost *:80>
|
|
||||||
RewriteEngine on
|
|
||||||
RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L]
|
|
||||||
ServerName releases.{{ external_hostname }}
|
|
||||||
Redirect permanent / https://releases.{{ external_hostname }}/
|
|
||||||
|
|
||||||
# Added until we can get the cert out
|
|
||||||
DocumentRoot "/var/www/releases"
|
|
||||||
|
|
||||||
<Directory />
|
|
||||||
Options +Indexes
|
|
||||||
IndexOptions NameWidth=*
|
|
||||||
</Directory>
|
|
||||||
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## End of redirects http -> https
|
|
||||||
|
|
||||||
|
|
||||||
<VirtualHost *:443>
|
|
||||||
ServerName {{ external_hostname }}
|
|
||||||
|
|
||||||
Alias "/robots.txt" "/var/www/html/robots.txt"
|
|
||||||
|
|
||||||
WSGIScriptAlias / /var/www/pagure.wsgi
|
|
||||||
|
|
||||||
ServerAdmin admin@fedoraproject.org
|
|
||||||
|
|
||||||
SSLEngine on
|
|
||||||
SSLProtocol {{ ssl_protocols }}
|
|
||||||
SSLCipherSuite {{ ssl_ciphers }}
|
|
||||||
# Use secure TLSv1.1 and TLSv1.2 ciphers
|
|
||||||
Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
|
||||||
|
|
||||||
SSLCertificateFile /etc/letsencrypt/live/{{ external_hostname }}/cert.pem
|
|
||||||
SSLCertificateKeyFile /etc/letsencrypt/live/{{ external_hostname }}/privkey.pem
|
|
||||||
SSLCertificateChainFile /etc/letsencrypt/live/{{ external_hostname }}/fullchain.pem
|
|
||||||
SSLHonorCipherOrder On
|
|
||||||
|
|
||||||
Alias /static /usr/lib/python2.7/site-packages/pagure/static/
|
|
||||||
|
|
||||||
SetEnv GIT_PROJECT_ROOT /srv/git/repositories
|
|
||||||
|
|
||||||
AliasMatch ^/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$ /srv/git/repositories/$1
|
|
||||||
AliasMatch ^/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/git/repositories/$1
|
|
||||||
ScriptAliasMatch \
|
|
||||||
"(?x)^/(.*/(HEAD | \
|
|
||||||
info/refs | \
|
|
||||||
objects/info/[^/]+ | \
|
|
||||||
git-(upload|receive)-pack))$" \
|
|
||||||
/usr/libexec/git-core/git-http-backend/$1
|
|
||||||
|
|
||||||
# Configure static files so that a custom theme can override the defaults
|
|
||||||
RewriteEngine on
|
|
||||||
|
|
||||||
RewriteCond "{{ pagure_theme_static_dir }}/$1" -f
|
|
||||||
RewriteRule "^/static/(.*)" "{{ pagure_theme_static_dir }}/$1" [L]
|
|
||||||
|
|
||||||
# Use the application default theme for files not customized
|
|
||||||
|
|
||||||
RewriteRule "^/static/(.*)" "/usr/lib/python2.7/site-packages/pagure/static/$1" [L]
|
|
||||||
|
|
||||||
|
|
||||||
<Location />
|
|
||||||
WSGIProcessGroup pagure
|
|
||||||
<IfModule mod_authz_core.c>
|
|
||||||
# Apache 2.4
|
|
||||||
Require all granted
|
|
||||||
</IfModule>
|
|
||||||
<IfModule !mod_authz_core.c>
|
|
||||||
# Apache 2.2
|
|
||||||
Order deny,allow
|
|
||||||
Allow from all
|
|
||||||
</IfModule>
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
<Location /releases>
|
|
||||||
Redirect "/releases" https://releases.{{ external_hostname }}
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
|
|
||||||
<VirtualHost *:443>
|
|
||||||
ServerName docs.{{ external_hostname }}
|
|
||||||
|
|
||||||
WSGIScriptAlias / /var/www/docs_pagure.wsgi
|
|
||||||
|
|
||||||
SSLEngine on
|
|
||||||
SSLProtocol {{ ssl_protocols }}
|
|
||||||
SSLCipherSuite {{ ssl_ciphers }}
|
|
||||||
# Use secure TLSv1.1 and TLSv1.2 ciphers
|
|
||||||
Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
|
||||||
|
|
||||||
|
|
||||||
SSLCertificateFile /etc/letsencrypt/live/{{ external_hostname }}/cert.pem
|
|
||||||
SSLCertificateKeyFile /etc/letsencrypt/live/{{ external_hostname }}/privkey.pem
|
|
||||||
SSLCertificateChainFile /etc/letsencrypt/live/{{ external_hostname }}/fullchain.pem
|
|
||||||
SSLHonorCipherOrder On
|
|
||||||
|
|
||||||
# Configure static files so that a custom theme can override the defaults
|
|
||||||
RewriteEngine on
|
|
||||||
|
|
||||||
RewriteCond "{{ pagure_theme_static_dir }}/$1" -f
|
|
||||||
RewriteRule "^/static/(.*)" "{{ pagure_theme_static_dir }}/$1" [L]
|
|
||||||
|
|
||||||
# Use the application default theme for files not customized
|
|
||||||
|
|
||||||
RewriteRule "^/static/(.*)" "/usr/lib/python2.7/site-packages/pagure/static/$1" [L]
|
|
||||||
|
|
||||||
<Location />
|
|
||||||
WSGIProcessGroup paguredocs
|
|
||||||
<IfModule mod_authz_core.c>
|
|
||||||
# Apache 2.4
|
|
||||||
Require all granted
|
|
||||||
</IfModule>
|
|
||||||
<IfModule !mod_authz_core.c>
|
|
||||||
# Apache 2.2
|
|
||||||
Order deny,allow
|
|
||||||
Allow from all
|
|
||||||
</IfModule>
|
|
||||||
</Location>
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
<VirtualHost *:443>
|
|
||||||
DocumentRoot "/var/www/releases"
|
|
||||||
ServerName releases.{{ external_hostname }}
|
|
||||||
|
|
||||||
<Directory />
|
|
||||||
Options +Indexes
|
|
||||||
IndexOptions NameWidth=*
|
|
||||||
</Directory>
|
|
||||||
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
|
|
@ -1,50 +0,0 @@
|
||||||
# A generic, single database configuration.
|
|
||||||
|
|
||||||
[alembic]
|
|
||||||
# path to migration scripts
|
|
||||||
script_location = /usr/share/pagure/alembic
|
|
||||||
|
|
||||||
# template used to generate migration files
|
|
||||||
# file_template = %%(rev)s_%%(slug)s
|
|
||||||
|
|
||||||
# set to 'true' to run the environment during
|
|
||||||
# the 'revision' command, regardless of autogenerate
|
|
||||||
# revision_environment = false
|
|
||||||
|
|
||||||
#sqlalchemy.url = postgresql://<%= pkgdb_app %>:<%= pkgdb_appPassword %>@db-pkgdb/pkgdb
|
|
||||||
|
|
||||||
|
|
||||||
# Logging configuration
|
|
||||||
[loggers]
|
|
||||||
keys = root,sqlalchemy,alembic
|
|
||||||
|
|
||||||
[handlers]
|
|
||||||
keys = console
|
|
||||||
|
|
||||||
[formatters]
|
|
||||||
keys = generic
|
|
||||||
|
|
||||||
[logger_root]
|
|
||||||
level = WARN
|
|
||||||
handlers = console
|
|
||||||
qualname =
|
|
||||||
|
|
||||||
[logger_sqlalchemy]
|
|
||||||
level = WARN
|
|
||||||
handlers =
|
|
||||||
qualname = sqlalchemy.engine
|
|
||||||
|
|
||||||
[logger_alembic]
|
|
||||||
level = INFO
|
|
||||||
handlers =
|
|
||||||
qualname = alembic
|
|
||||||
|
|
||||||
[handler_console]
|
|
||||||
class = StreamHandler
|
|
||||||
args = (sys.stderr,)
|
|
||||||
level = NOTSET
|
|
||||||
formatter = generic
|
|
||||||
|
|
||||||
[formatter_generic]
|
|
||||||
format = %(levelname)-5.5s [%(name)s] %(message)s
|
|
||||||
datefmt = %H:%M:%S
|
|
||||||
|
|
@ -1,22 +0,0 @@
|
||||||
#-*- coding: utf-8 -*-
|
|
||||||
|
|
||||||
# The three lines below are required to run on EL6 as EL6 has
|
|
||||||
# two possible version of python-sqlalchemy and python-jinja2
|
|
||||||
# These lines make sure the application uses the correct version.
|
|
||||||
import __main__
|
|
||||||
__main__.__requires__ = ['SQLAlchemy >= 0.8', 'jinja2 >= 2.4']
|
|
||||||
import pkg_resources
|
|
||||||
|
|
||||||
import os
|
|
||||||
## Set the environment variable pointing to the configuration file
|
|
||||||
os.environ['PAGURE_CONFIG'] = '/etc/pagure/pagure.cfg'
|
|
||||||
|
|
||||||
## The following is only needed if you did not install pagure
|
|
||||||
## as a python module (for example if you run it from a git clone).
|
|
||||||
#import sys
|
|
||||||
#sys.path.insert(0, '/path/to/pagure/')
|
|
||||||
|
|
||||||
|
|
||||||
## The most import line to make the wsgi working
|
|
||||||
from pagure.docs_server import APP as application
|
|
||||||
#application.debug = True
|
|
||||||
|
|
@ -1,195 +0,0 @@
|
||||||
# configuration variables for gitolite
|
|
||||||
|
|
||||||
# This file is in perl syntax. But you do NOT need to know perl to edit it --
|
|
||||||
# just mind the commas, use single quotes unless you know what you're doing,
|
|
||||||
# and make sure the brackets and braces stay matched up!
|
|
||||||
|
|
||||||
# (Tip: perl allows a comma after the last item in a list also!)
|
|
||||||
|
|
||||||
# HELP for commands can be had by running the command with "-h".
|
|
||||||
|
|
||||||
# HELP for all the other FEATURES can be found in the documentation (look for
|
|
||||||
# "list of non-core programs shipped with gitolite" in the master index) or
|
|
||||||
# directly in the corresponding source file.
|
|
||||||
|
|
||||||
%RC = (
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# default umask gives you perms of '0700'; see the rc file docs for
|
|
||||||
# how/why you might change this
|
|
||||||
UMASK => 0077,
|
|
||||||
|
|
||||||
# look for "git-config" in the documentation
|
|
||||||
GIT_CONFIG_KEYS => '',
|
|
||||||
|
|
||||||
# comment out if you don't need all the extra detail in the logfile
|
|
||||||
LOG_EXTRA => 1,
|
|
||||||
# syslog options
|
|
||||||
# 1. leave this section as is for normal gitolite logging
|
|
||||||
# 2. uncomment this line to log only to syslog:
|
|
||||||
# LOG_DEST => 'syslog',
|
|
||||||
# 3. uncomment this line to log to syslog and the normal gitolite log:
|
|
||||||
# LOG_DEST => 'syslog,normal',
|
|
||||||
|
|
||||||
# roles. add more roles (like MANAGER, TESTER, ...) here.
|
|
||||||
# WARNING: if you make changes to this hash, you MUST run 'gitolite
|
|
||||||
# compile' afterward, and possibly also 'gitolite trigger POST_COMPILE'
|
|
||||||
ROLES => {
|
|
||||||
READERS => 1,
|
|
||||||
WRITERS => 1,
|
|
||||||
},
|
|
||||||
|
|
||||||
# enable caching (currently only Redis). PLEASE RTFM BEFORE USING!!!
|
|
||||||
# CACHE => 'Redis',
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# rc variables used by various features
|
|
||||||
|
|
||||||
# the 'info' command prints this as additional info, if it is set
|
|
||||||
# SITE_INFO => 'Please see http://blahblah/gitolite for more help',
|
|
||||||
|
|
||||||
# the CpuTime feature uses these
|
|
||||||
# display user, system, and elapsed times to user after each git operation
|
|
||||||
# DISPLAY_CPU_TIME => 1,
|
|
||||||
# display a warning if total CPU times (u, s, cu, cs) crosses this limit
|
|
||||||
# CPU_TIME_WARN_LIMIT => 0.1,
|
|
||||||
|
|
||||||
# the Mirroring feature needs this
|
|
||||||
# HOSTNAME => "foo",
|
|
||||||
|
|
||||||
# TTL for redis cache; PLEASE SEE DOCUMENTATION BEFORE UNCOMMENTING!
|
|
||||||
# CACHE_TTL => 600,
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# suggested locations for site-local gitolite code (see cust.html)
|
|
||||||
|
|
||||||
# this one is managed directly on the server
|
|
||||||
# LOCAL_CODE => "$ENV{HOME}/local",
|
|
||||||
|
|
||||||
# or you can use this, which lets you put everything in a subdirectory
|
|
||||||
# called "local" in your gitolite-admin repo. For a SECURITY WARNING
|
|
||||||
# on this, see http://gitolite.com/gitolite/non-core.html#pushcode
|
|
||||||
# LOCAL_CODE => "$rc{GL_ADMIN_BASE}/local",
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# List of commands and features to enable
|
|
||||||
|
|
||||||
ENABLE => [
|
|
||||||
|
|
||||||
# COMMANDS
|
|
||||||
|
|
||||||
# These are the commands enabled by default
|
|
||||||
'help',
|
|
||||||
'desc',
|
|
||||||
'info',
|
|
||||||
'perms',
|
|
||||||
'writable',
|
|
||||||
|
|
||||||
# Uncomment or add new commands here.
|
|
||||||
# 'create',
|
|
||||||
# 'fork',
|
|
||||||
# 'mirror',
|
|
||||||
# 'readme',
|
|
||||||
# 'sskm',
|
|
||||||
# 'D',
|
|
||||||
|
|
||||||
# These FEATURES are enabled by default.
|
|
||||||
|
|
||||||
# essential (unless you're using smart-http mode)
|
|
||||||
'ssh-authkeys',
|
|
||||||
|
|
||||||
# creates git-config enties from gitolite.conf file entries like 'config foo.bar = baz'
|
|
||||||
'git-config',
|
|
||||||
|
|
||||||
# creates git-daemon-export-ok files; if you don't use git-daemon, comment this out
|
|
||||||
'daemon',
|
|
||||||
|
|
||||||
# creates projects.list file; if you don't use gitweb, comment this out
|
|
||||||
#'gitweb',
|
|
||||||
|
|
||||||
# These FEATURES are disabled by default; uncomment to enable. If you
|
|
||||||
# need to add new ones, ask on the mailing list :-)
|
|
||||||
|
|
||||||
# user-visible behaviour
|
|
||||||
|
|
||||||
# prevent wild repos auto-create on fetch/clone
|
|
||||||
# 'no-create-on-read',
|
|
||||||
# no auto-create at all (don't forget to enable the 'create' command!)
|
|
||||||
# 'no-auto-create',
|
|
||||||
|
|
||||||
# access a repo by another (possibly legacy) name
|
|
||||||
# 'Alias',
|
|
||||||
|
|
||||||
# give some users direct shell access. See documentation in
|
|
||||||
# sts.html for details on the following two choices.
|
|
||||||
# "Shell $ENV{HOME}/.gitolite.shell-users",
|
|
||||||
# 'Shell alice bob',
|
|
||||||
|
|
||||||
# set default roles from lines like 'option default.roles-1 = ...', etc.
|
|
||||||
# 'set-default-roles',
|
|
||||||
|
|
||||||
# show more detailed messages on deny
|
|
||||||
# 'expand-deny-messages',
|
|
||||||
|
|
||||||
# show a message of the day
|
|
||||||
# 'Motd',
|
|
||||||
|
|
||||||
# system admin stuff
|
|
||||||
|
|
||||||
# enable mirroring (don't forget to set the HOSTNAME too!)
|
|
||||||
# 'Mirroring',
|
|
||||||
|
|
||||||
# allow people to submit pub files with more than one key in them
|
|
||||||
# 'ssh-authkeys-split',
|
|
||||||
|
|
||||||
# selective read control hack
|
|
||||||
# 'partial-copy',
|
|
||||||
|
|
||||||
# manage local, gitolite-controlled, copies of read-only upstream repos
|
|
||||||
# 'upstream',
|
|
||||||
|
|
||||||
# updates 'description' file instead of 'gitweb.description' config item
|
|
||||||
# 'cgit',
|
|
||||||
|
|
||||||
# allow repo-specific hooks to be added
|
|
||||||
# 'repo-specific-hooks',
|
|
||||||
|
|
||||||
# performance, logging, monitoring...
|
|
||||||
|
|
||||||
# be nice
|
|
||||||
# 'renice 10',
|
|
||||||
|
|
||||||
# log CPU times (user, system, cumulative user, cumulative system)
|
|
||||||
# 'CpuTime',
|
|
||||||
|
|
||||||
# syntactic_sugar for gitolite.conf and included files
|
|
||||||
|
|
||||||
# allow backslash-escaped continuation lines in gitolite.conf
|
|
||||||
# 'continuation-lines',
|
|
||||||
|
|
||||||
# create implicit user groups from directory names in keydir/
|
|
||||||
# 'keysubdirs-as-groups',
|
|
||||||
|
|
||||||
# allow simple line-oriented macros
|
|
||||||
# 'macros',
|
|
||||||
|
|
||||||
# Kindergarten mode
|
|
||||||
|
|
||||||
# disallow various things that sensible people shouldn't be doing anyway
|
|
||||||
# 'Kindergarten',
|
|
||||||
],
|
|
||||||
|
|
||||||
);
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------------------
|
|
||||||
# per perl rules, this should be the last line in such a file:
|
|
||||||
1;
|
|
||||||
|
|
||||||
# Local variables:
|
|
||||||
# mode: perl
|
|
||||||
# End:
|
|
||||||
# vim: set syn=perl:
|
|
||||||
|
|
@ -1,241 +0,0 @@
|
||||||
from datetime import timedelta
|
|
||||||
|
|
||||||
INSTANCE_NAME= '{{ pagure_instance_name }}'
|
|
||||||
|
|
||||||
THEME_TEMPLATE_FOLDER='{{ pagure_theme_template_dir }}'
|
|
||||||
THEME_STATIC_FOLDER='{{ pagure_theme_static_dir }}'
|
|
||||||
|
|
||||||
### Set the time after which the admin session expires
|
|
||||||
# There are two sessions on pagure, login that holds for 31 days and
|
|
||||||
# the session defined here after which an user has to re-login.
|
|
||||||
# This session is used when accessing all administrative parts of pagure
|
|
||||||
# (ie: changing a project's or a user's settings)
|
|
||||||
ADMIN_SESSION_LIFETIME = timedelta(minutes=20)
|
|
||||||
|
|
||||||
# Make the CSRF token not-time limited, this way it is valid for the entire
|
|
||||||
# duration of the session.
|
|
||||||
WTF_CSRF_TIME_LIMIT=None
|
|
||||||
|
|
||||||
### Secret key for the Flask application
|
|
||||||
SECRET_KEY='{{ pagure_secret_key }}'
|
|
||||||
SALT_EMAIL='{{ pagure_secret_salt_email }}'
|
|
||||||
|
|
||||||
EMAIL_SEND = True
|
|
||||||
|
|
||||||
# This is required so that login specifies https
|
|
||||||
PREFERRED_URL_SCHEME='https'
|
|
||||||
|
|
||||||
### url to the database server:
|
|
||||||
#DB_URL=mysql://user:pass@host/db_name
|
|
||||||
#DB_URL=postgres://user:pass@host/db_name
|
|
||||||
# removing host for local postgres connection
|
|
||||||
DB_URL = 'postgresql://{{ new_pagure_db_user }}:{{ new_pagure_db_pass }}@{{ new_pagure_db_host }}/{{ new_pagure_db_name }}'
|
|
||||||
|
|
||||||
### The FAS group in which the admin of pagure are
|
|
||||||
ADMIN_GROUP = {{ new_pagure_admin_groups }}
|
|
||||||
|
|
||||||
# The publicly visible admin email address
|
|
||||||
ADMIN_EMAIL = 'admin@fedoraproject.org'
|
|
||||||
|
|
||||||
### The email address to which the flask.log will send the errors (tracebacks)
|
|
||||||
EMAIL_ERROR = '{{ pagure_admin_email }}'
|
|
||||||
|
|
||||||
### Default SMTP server to use for sending emails
|
|
||||||
SMTP_SERVER = 'localhost'
|
|
||||||
|
|
||||||
### Email used to sent emails
|
|
||||||
FROM_EMAIL = 'pagure@{{ external_hostname }}'
|
|
||||||
DOMAIN_EMAIL_NOTIFICATIONS = '{{ external_hostname }}'
|
|
||||||
|
|
||||||
### The URL at which the project is available.
|
|
||||||
APP_URL = 'https://{{ external_hostname }}/'
|
|
||||||
DOC_APP_URL = 'https://docs.{{ external_hostname }}'
|
|
||||||
|
|
||||||
### Datagrepper info for the user profile
|
|
||||||
DATAGREPPER_URL = 'https://apps.fedoraproject.org/datagrepper'
|
|
||||||
DATAGREPPER_CATEGORY = 'pagure'
|
|
||||||
|
|
||||||
### The URL to use to clone git repositories.
|
|
||||||
GIT_URL_SSH = 'ssh://git@{{ external_hostname }}/'
|
|
||||||
GIT_URL_GIT = 'https://{{ external_hostname }}/'
|
|
||||||
|
|
||||||
### The IP addresses allowed for the internal endpoints
|
|
||||||
IP_ALLOWED_INTERNAL = ['127.0.0.1', 'localhost', '::1', '{{ public_ip }}']
|
|
||||||
|
|
||||||
# Redis configuration
|
|
||||||
EVENTSOURCE_SOURCE = 'https://{{ external_hostname }}:8088'
|
|
||||||
REDIS_HOST = '0.0.0.0'
|
|
||||||
REDIS_PORT = 6379
|
|
||||||
REDIS_DB = 0
|
|
||||||
|
|
||||||
EV_STATS_PORT = '8888'
|
|
||||||
|
|
||||||
WEBHOOK = True
|
|
||||||
|
|
||||||
### Folder containing to the git repos
|
|
||||||
GIT_FOLDER = '/srv/git/repositories'
|
|
||||||
|
|
||||||
### Folder containing the forks repos
|
|
||||||
FORK_FOLDER = '/srv/git/repositories/forks'
|
|
||||||
|
|
||||||
### Folder containing the docs repos
|
|
||||||
DOCS_FOLDER = '/srv/git/repositories/docs'
|
|
||||||
|
|
||||||
### Folder containing the pull-requests repos
|
|
||||||
REQUESTS_FOLDER = '/srv/git/repositories/requests'
|
|
||||||
|
|
||||||
### Folder containing the tickets repos
|
|
||||||
TICKETS_FOLDER = '/srv/git/repositories/tickets'
|
|
||||||
|
|
||||||
### Folder containing the clones of the remotes git repo
|
|
||||||
REMOTE_GIT_FOLDER = '/srv/git/remotes'
|
|
||||||
|
|
||||||
### Configuration file for gitolite
|
|
||||||
GITOLITE_CONFIG = '/srv/git/.gitolite/conf/gitolite.conf'
|
|
||||||
|
|
||||||
### Path of the release folder
|
|
||||||
UPLOAD_FOLDER_URL = 'https://releases.{{ external_hostname }}/'
|
|
||||||
UPLOAD_FOLDER_PATH = '/var/www/releases/'
|
|
||||||
|
|
||||||
|
|
||||||
### Home folder of the gitolite user
|
|
||||||
### Folder where to run gl-compile-conf from
|
|
||||||
GITOLITE_HOME = '/srv/git/'
|
|
||||||
|
|
||||||
### Folder containing all the public ssh keys for gitolite
|
|
||||||
GITOLITE_KEYDIR = '/srv/git/.gitolite/keydir/'
|
|
||||||
|
|
||||||
### Path to the gitolite.rc file
|
|
||||||
GL_RC = '/srv/git/.gitolite.rc'
|
|
||||||
|
|
||||||
### Path to the /bin directory where the gitolite tools can be found
|
|
||||||
GL_BINDIR = '/usr/bin/'
|
|
||||||
|
|
||||||
|
|
||||||
### Temp folder to be used to make the clones to work around bug in libgit2:
|
|
||||||
## refs: https://github.com/libgit2/libgit2/issues/2965
|
|
||||||
## and https://github.com/libgit2/libgit2/issues/2797
|
|
||||||
TMP_FOLDER = '/srv/tmp'
|
|
||||||
|
|
||||||
# Optional configuration
|
|
||||||
|
|
||||||
### Number of items displayed per page
|
|
||||||
# Used when listing items
|
|
||||||
ITEM_PER_PAGE = 50
|
|
||||||
|
|
||||||
### Maximum size of the uploaded content
|
|
||||||
# Used to limit the size of file attached to a ticket for example
|
|
||||||
MAX_CONTENT_LENGTH = 60 * 1024 * 1024 # 60 megabytes
|
|
||||||
|
|
||||||
### Lenght for short commits ids or file hex
|
|
||||||
SHORT_LENGTH = 7
|
|
||||||
|
|
||||||
### List of blacklisted project names that can conflicts for pagure's URLs
|
|
||||||
### or other
|
|
||||||
BLACKLISTED_PROJECTS = [
|
|
||||||
'static', 'pv', 'releases', 'new', 'api', 'settings',
|
|
||||||
'logout', 'login', 'users', 'groups', 'projects', 'ssh_info'
|
|
||||||
'issues', 'pull-requests', 'commits', 'tree', 'forks',
|
|
||||||
]
|
|
||||||
|
|
||||||
DISABLED_PLUGINS = ['IRC']
|
|
||||||
|
|
||||||
|
|
||||||
# Authentication related configuration option
|
|
||||||
|
|
||||||
### Switch the authentication method
|
|
||||||
# Specify which authentication method to use, defaults to `fas` can be or
|
|
||||||
# `local`
|
|
||||||
# Default: ``fas``.
|
|
||||||
PAGURE_AUTH = 'openid'
|
|
||||||
|
|
||||||
# When this is set to True, the session cookie will only be returned to the
|
|
||||||
# server via ssl (https). If you connect to the server via plain http, the
|
|
||||||
# cookie will not be sent. This prevents sniffing of the cookie contents.
|
|
||||||
# This may be set to False when testing your application but should always
|
|
||||||
# be set to True in production.
|
|
||||||
# Default: ``True``.
|
|
||||||
SESSION_COOKIE_SECURE = True
|
|
||||||
|
|
||||||
# The name of the cookie used to store the session id.
|
|
||||||
# Default: ``.pagure``.
|
|
||||||
SESSION_COOKIE_NAME = 'upstreamfirstpagure'
|
|
||||||
|
|
||||||
# Boolean specifying wether to check the user's IP address when retrieving
|
|
||||||
# its session. This make things more secure (thus is on by default) but
|
|
||||||
# under certain setup it might not work (for example is there are proxies
|
|
||||||
# in front of the application).
|
|
||||||
CHECK_SESSION_IP = True
|
|
||||||
|
|
||||||
# Used by SESSION_COOKIE_PATH
|
|
||||||
APPLICATION_ROOT = '/'
|
|
||||||
|
|
||||||
# Set the SSH certs/keys
|
|
||||||
SSH_KEYS = {
|
|
||||||
'RSA': {
|
|
||||||
'fingerprint': '2048 69:50:46:24:c7:94:44:f8:8d:83:05:5c:eb:73:fb:c4 (RSA)',
|
|
||||||
'pubkey': '{{ external_hostname }},{{ public_ip }} {{ pagure_ssh_host_pubkey }}',
|
|
||||||
'SHA256': '{{ pagure_ssh_host_sha256 }}',
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Allow the backward compatiblity endpoints for the old URLs schema to
|
|
||||||
# see the commits of a repo. This is only interesting if you pagure instance
|
|
||||||
# was running since before version 1.3 and if you care about backward
|
|
||||||
# compatibility in your URLs.
|
|
||||||
OLD_VIEW_COMMIT_ENABLED = False
|
|
||||||
|
|
||||||
#PAGURE_CI_SERVICES=['jenkins']
|
|
||||||
PAGURE_CI_SERVICES=[]
|
|
||||||
|
|
||||||
LOGGING = {
|
|
||||||
'version': 1,
|
|
||||||
'disable_existing_loggers': False,
|
|
||||||
'formatters': {
|
|
||||||
'standard': {
|
|
||||||
'format': '%(asctime)s [%(levelname)s] %(name)s: %(message)s'
|
|
||||||
},
|
|
||||||
},
|
|
||||||
'handlers': {
|
|
||||||
'console': {
|
|
||||||
'level': 'INFO',
|
|
||||||
'formatter': 'standard',
|
|
||||||
'class': 'logging.StreamHandler',
|
|
||||||
'stream': 'ext://sys.stdout',
|
|
||||||
},
|
|
||||||
},
|
|
||||||
# The root logger configuration; this is a catch-all configuration
|
|
||||||
# that applies to all log messages not handled by a different logger
|
|
||||||
'root': {
|
|
||||||
'level': 'INFO',
|
|
||||||
'handlers': ['console'],
|
|
||||||
},
|
|
||||||
'loggers': {
|
|
||||||
'pagure': {
|
|
||||||
'handlers': ['console'],
|
|
||||||
'level': 'DEBUG',
|
|
||||||
'propagate': True
|
|
||||||
},
|
|
||||||
'pagure.lib.encoding_utils': {
|
|
||||||
'handlers': ['console'],
|
|
||||||
'level': 'WARN',
|
|
||||||
'propagate': False
|
|
||||||
},
|
|
||||||
'flask': {
|
|
||||||
'handlers': ['console'],
|
|
||||||
'level': 'INFO',
|
|
||||||
'propagate': False
|
|
||||||
},
|
|
||||||
'sqlalchemy': {
|
|
||||||
'handlers': ['console'],
|
|
||||||
'level': 'WARN',
|
|
||||||
'propagate': False
|
|
||||||
},
|
|
||||||
'binaryornot': {
|
|
||||||
'handlers': ['console'],
|
|
||||||
'level': 'WARN',
|
|
||||||
'propagate': True
|
|
||||||
},
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
@ -1,30 +0,0 @@
|
||||||
#-*- coding: utf-8 -*-
|
|
||||||
|
|
||||||
# The three lines below are required to run on EL6 as EL6 has
|
|
||||||
# two possible version of python-sqlalchemy and python-jinja2
|
|
||||||
# These lines make sure the application uses the correct version.
|
|
||||||
import __main__
|
|
||||||
__main__.__requires__ = ['SQLAlchemy >= 0.8', 'jinja2 >= 2.4', 'Pygments>=2.1.0']
|
|
||||||
import pkg_resources
|
|
||||||
|
|
||||||
import os
|
|
||||||
## Set the environment variable pointing to the configuration file
|
|
||||||
os.environ['PAGURE_CONFIG'] = '/etc/pagure/pagure.cfg'
|
|
||||||
|
|
||||||
## Set the environment variable if the tmp folder needs to be moved
|
|
||||||
## Is necessary to work around bug in libgit2:
|
|
||||||
## refs: https://github.com/libgit2/libgit2/issues/2965
|
|
||||||
## and https://github.com/libgit2/libgit2/issues/2797
|
|
||||||
os.environ['TEMP'] = '/srv/tmp/'
|
|
||||||
|
|
||||||
## The following is only needed if you did not install pagure
|
|
||||||
## as a python module (for example if you run it from a git clone).
|
|
||||||
#import sys
|
|
||||||
#sys.path.insert(0, '/path/to/pagure/')
|
|
||||||
|
|
||||||
|
|
||||||
# The most import line to make the wsgi working
|
|
||||||
from pagure.flask_app import create_app
|
|
||||||
|
|
||||||
application = create_app()
|
|
||||||
application.debug = True
|
|
||||||
|
|
@ -1,8 +0,0 @@
|
||||||
cert = /etc/pki/tls/certs/pagure.io.cert
|
|
||||||
key = /etc/pki/tls/certs/pagure.io.key
|
|
||||||
pid = /var/run/stunnel.pid
|
|
||||||
|
|
||||||
[{{ stunnel_service }}]
|
|
||||||
|
|
||||||
accept = {{ stunnel_source_port }}
|
|
||||||
connect = {{ stunnel_destination_port }}
|
|
||||||
|
|
@ -1,8 +0,0 @@
|
||||||
apiserver_container_image: "docker.io/fedoraqa/ufmonitor-apiserver:latest"
|
|
||||||
updater_container_image: "docker.io/fedoraqa/ufmonitor-updater:latest"
|
|
||||||
ufmonitor_db_host: "172.17.0.1"
|
|
||||||
ufmonitor_db_name: "ufmonitor"
|
|
||||||
ufmonitor_db_user: "ufmonitor"
|
|
||||||
ufmonitor_db_password: "terribleinsecurepassword"
|
|
||||||
ufmonitor_config_path: "/etc/sysconfig/ufmonitor"
|
|
||||||
ufmonitor_home: "/var/www/ufmonitor"
|
|
||||||
|
|
@ -1,167 +0,0 @@
|
||||||
/*-- Chart --*/
|
|
||||||
.c3 svg {
|
|
||||||
font: 10px sans-serif;
|
|
||||||
-webkit-tap-highlight-color: transparent; }
|
|
||||||
|
|
||||||
.c3 path, .c3 line {
|
|
||||||
fill: none;
|
|
||||||
stroke: #000; }
|
|
||||||
|
|
||||||
.c3 text {
|
|
||||||
-webkit-user-select: none;
|
|
||||||
-moz-user-select: none;
|
|
||||||
user-select: none; }
|
|
||||||
|
|
||||||
.c3-legend-item-tile,
|
|
||||||
.c3-xgrid-focus,
|
|
||||||
.c3-ygrid,
|
|
||||||
.c3-event-rect,
|
|
||||||
.c3-bars path {
|
|
||||||
shape-rendering: crispEdges; }
|
|
||||||
|
|
||||||
.c3-chart-arc path {
|
|
||||||
stroke: #fff; }
|
|
||||||
|
|
||||||
.c3-chart-arc text {
|
|
||||||
fill: #fff;
|
|
||||||
font-size: 13px; }
|
|
||||||
|
|
||||||
/*-- Axis --*/
|
|
||||||
/*-- Grid --*/
|
|
||||||
.c3-grid line {
|
|
||||||
stroke: #aaa; }
|
|
||||||
|
|
||||||
.c3-grid text {
|
|
||||||
fill: #aaa; }
|
|
||||||
|
|
||||||
.c3-xgrid, .c3-ygrid {
|
|
||||||
stroke-dasharray: 3 3; }
|
|
||||||
|
|
||||||
/*-- Text on Chart --*/
|
|
||||||
.c3-text.c3-empty {
|
|
||||||
fill: #808080;
|
|
||||||
font-size: 2em; }
|
|
||||||
|
|
||||||
/*-- Line --*/
|
|
||||||
.c3-line {
|
|
||||||
stroke-width: 1px; }
|
|
||||||
|
|
||||||
/*-- Point --*/
|
|
||||||
.c3-circle._expanded_ {
|
|
||||||
stroke-width: 1px;
|
|
||||||
stroke: white; }
|
|
||||||
|
|
||||||
.c3-selected-circle {
|
|
||||||
fill: white;
|
|
||||||
stroke-width: 2px; }
|
|
||||||
|
|
||||||
/*-- Bar --*/
|
|
||||||
.c3-bar {
|
|
||||||
stroke-width: 0; }
|
|
||||||
|
|
||||||
.c3-bar._expanded_ {
|
|
||||||
fill-opacity: 0.75; }
|
|
||||||
|
|
||||||
/*-- Focus --*/
|
|
||||||
.c3-target.c3-focused {
|
|
||||||
opacity: 1; }
|
|
||||||
|
|
||||||
.c3-target.c3-focused path.c3-line, .c3-target.c3-focused path.c3-step {
|
|
||||||
stroke-width: 2px; }
|
|
||||||
|
|
||||||
.c3-target.c3-defocused {
|
|
||||||
opacity: 0.3 !important; }
|
|
||||||
|
|
||||||
/*-- Region --*/
|
|
||||||
.c3-region {
|
|
||||||
fill: steelblue;
|
|
||||||
fill-opacity: .1; }
|
|
||||||
|
|
||||||
/*-- Brush --*/
|
|
||||||
.c3-brush .extent {
|
|
||||||
fill-opacity: .1; }
|
|
||||||
|
|
||||||
/*-- Select - Drag --*/
|
|
||||||
/*-- Legend --*/
|
|
||||||
.c3-legend-item {
|
|
||||||
font-size: 12px; }
|
|
||||||
|
|
||||||
.c3-legend-item-hidden {
|
|
||||||
opacity: 0.15; }
|
|
||||||
|
|
||||||
.c3-legend-background {
|
|
||||||
opacity: 0.75;
|
|
||||||
fill: white;
|
|
||||||
stroke: lightgray;
|
|
||||||
stroke-width: 1; }
|
|
||||||
|
|
||||||
/*-- Title --*/
|
|
||||||
.c3-title {
|
|
||||||
font: 14px sans-serif; }
|
|
||||||
|
|
||||||
/*-- Tooltip --*/
|
|
||||||
.c3-tooltip-container {
|
|
||||||
z-index: 10; }
|
|
||||||
|
|
||||||
.c3-tooltip {
|
|
||||||
border-collapse: collapse;
|
|
||||||
border-spacing: 0;
|
|
||||||
background-color: #fff;
|
|
||||||
empty-cells: show;
|
|
||||||
-webkit-box-shadow: 7px 7px 12px -9px #777777;
|
|
||||||
-moz-box-shadow: 7px 7px 12px -9px #777777;
|
|
||||||
box-shadow: 7px 7px 12px -9px #777777;
|
|
||||||
opacity: 0.9; }
|
|
||||||
|
|
||||||
.c3-tooltip tr {
|
|
||||||
border: 1px solid #CCC; }
|
|
||||||
|
|
||||||
.c3-tooltip th {
|
|
||||||
background-color: #aaa;
|
|
||||||
font-size: 14px;
|
|
||||||
padding: 2px 5px;
|
|
||||||
text-align: left;
|
|
||||||
color: #FFF; }
|
|
||||||
|
|
||||||
.c3-tooltip td {
|
|
||||||
font-size: 13px;
|
|
||||||
padding: 3px 6px;
|
|
||||||
background-color: #fff;
|
|
||||||
border-left: 1px dotted #999; }
|
|
||||||
|
|
||||||
.c3-tooltip td > span {
|
|
||||||
display: inline-block;
|
|
||||||
width: 10px;
|
|
||||||
height: 10px;
|
|
||||||
margin-right: 6px; }
|
|
||||||
|
|
||||||
.c3-tooltip td.value {
|
|
||||||
text-align: right; }
|
|
||||||
|
|
||||||
/*-- Area --*/
|
|
||||||
.c3-area {
|
|
||||||
stroke-width: 0;
|
|
||||||
opacity: 0.2; }
|
|
||||||
|
|
||||||
/*-- Arc --*/
|
|
||||||
.c3-chart-arcs-title {
|
|
||||||
dominant-baseline: middle;
|
|
||||||
font-size: 1.3em; }
|
|
||||||
|
|
||||||
.c3-chart-arcs .c3-chart-arcs-background {
|
|
||||||
fill: #e0e0e0;
|
|
||||||
stroke: none; }
|
|
||||||
|
|
||||||
.c3-chart-arcs .c3-chart-arcs-gauge-unit {
|
|
||||||
fill: #000;
|
|
||||||
font-size: 16px; }
|
|
||||||
|
|
||||||
.c3-chart-arcs .c3-chart-arcs-gauge-max {
|
|
||||||
fill: #777; }
|
|
||||||
|
|
||||||
.c3-chart-arcs .c3-chart-arcs-gauge-min {
|
|
||||||
fill: #777; }
|
|
||||||
|
|
||||||
.c3-chart-arc .c3-gauge-value {
|
|
||||||
fill: #000;
|
|
||||||
/* font-size: 28px !important;*/ }
|
|
||||||
1
roles/ufmonitor/files/media/js/c3.min.js
vendored
1
roles/ufmonitor/files/media/js/c3.min.js
vendored
File diff suppressed because one or more lines are too long
5
roles/ufmonitor/files/media/js/d3.min.js
vendored
5
roles/ufmonitor/files/media/js/d3.min.js
vendored
File diff suppressed because one or more lines are too long
|
|
@ -1,61 +0,0 @@
|
||||||
---
|
|
||||||
# tasklist for setting up upstreamfirst-monitor (uf-monitor) on an el7 host
|
|
||||||
|
|
||||||
|
|
||||||
- name: Install docker
|
|
||||||
package: name={{item}} state=present
|
|
||||||
with_items:
|
|
||||||
- docker
|
|
||||||
- python-docker-py
|
|
||||||
|
|
||||||
- name: Run docker
|
|
||||||
service: name=docker state=started enabled=yes
|
|
||||||
|
|
||||||
- name: Pull apiserver image
|
|
||||||
docker_image:
|
|
||||||
name: "{{ apiserver_container_image }}"
|
|
||||||
tls_verify: true
|
|
||||||
|
|
||||||
- name: Pull updater image
|
|
||||||
docker_image:
|
|
||||||
name: "{{ apiserver_container_image }}"
|
|
||||||
tls_verify: true
|
|
||||||
|
|
||||||
- name: ensure ufmonitor database is created
|
|
||||||
become: true
|
|
||||||
become_user: postgres
|
|
||||||
postgresql_db: db={{ ufmonitor_db_name }}
|
|
||||||
|
|
||||||
- name: ensure ufmonitor db user has access to dev database
|
|
||||||
become: true
|
|
||||||
become_user: postgres
|
|
||||||
postgresql_user: db={{ ufmonitor_db_name }} user={{ ufmonitor_db_user }} password={{ ufmonitor_db_password }} role_attr_flags=NOSUPERUSER
|
|
||||||
|
|
||||||
- name: Deploy service file for apiserver
|
|
||||||
template: src=ufmonitor-apiserver.service.j2 dest=/etc/systemd/system/ufmonitor-apiserver.service
|
|
||||||
notify:
|
|
||||||
- reload systemd
|
|
||||||
|
|
||||||
- name: Enable apiserver
|
|
||||||
service: name=ufmonitor-apiserver enabled=yes
|
|
||||||
|
|
||||||
- name: install script to update ufmonitor database
|
|
||||||
template: src=update-ufmonitor.j2 dest=/usr/local/bin/update-ufmonitor mode=0755
|
|
||||||
|
|
||||||
- name: Setup cron to update ufmonitor database
|
|
||||||
cron: name="update-ufmonitor-database" minute="15" user="root"
|
|
||||||
job="/usr/local/bin/update-ufmonitor > /dev/null"
|
|
||||||
cron_file=update-ufmonitor-database
|
|
||||||
|
|
||||||
- name: ensure ufmonitor document root exists
|
|
||||||
file: path="{{ ufmonitor_home }}" state=directory owner=apache group=apache mode=0775
|
|
||||||
|
|
||||||
- name: copy over index.html
|
|
||||||
template: src=index.html.j2 dest="{{ ufmonitor_home }}/index.html" owner=apache group=apache mode=0775
|
|
||||||
|
|
||||||
- name: copy over static support files
|
|
||||||
copy: src=media dest="{{ ufmonitor_home }}" owner=apache group=apache mode=0775
|
|
||||||
|
|
||||||
- name: generate httpd config
|
|
||||||
template: src=ufmonitor.conf.j2 dest=/etc/httpd/conf.d/ufmonitor.conf mode=0755
|
|
||||||
|
|
||||||
|
|
@ -1,189 +0,0 @@
|
||||||
<!DOCTYPE html>
|
|
||||||
<html lang="en">
|
|
||||||
<head>
|
|
||||||
|
|
||||||
<meta charset="utf-8">
|
|
||||||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
||||||
|
|
||||||
<title>Upstream First - Monitoring</title>
|
|
||||||
|
|
||||||
<!-- Load c3.css -->
|
|
||||||
<link href="media/css/c3.css" rel="stylesheet">
|
|
||||||
|
|
||||||
<!-- Load d3.js (v4.9.1) and c3.js (v0.4.12) -->
|
|
||||||
<script src="media/js/d3.min.js" charset="utf-8"></script>
|
|
||||||
<script src="media/js/c3.min.js"></script>
|
|
||||||
|
|
||||||
<script src="https://code.jquery.com/jquery-3.2.1.min.js"></script>
|
|
||||||
<!-- Latest compiled and minified CSS -->
|
|
||||||
|
|
||||||
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
|
|
||||||
|
|
||||||
<!-- Optional theme -->
|
|
||||||
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
|
|
||||||
|
|
||||||
<!-- Latest compiled and minified JavaScript -->
|
|
||||||
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
|
|
||||||
<!-- Latest compiled and minified CSS -->
|
|
||||||
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-table/1.11.1/bootstrap-table.min.css">
|
|
||||||
|
|
||||||
<!-- Latest compiled and minified JavaScript -->
|
|
||||||
<script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-table/1.11.1/bootstrap-table.min.js"></script>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
</head>
|
|
||||||
|
|
||||||
<body>
|
|
||||||
|
|
||||||
<h1>Background</h1>
|
|
||||||
|
|
||||||
<p>The purpose of this page is to be a quick reference on how far along the "<a href="https://fedoraproject.org/wiki/UpstreamFirstTesting/HowToMoveTests" target="new">Upstream First"</a> initiative is. There are currently 410 packages that Red Hat has internal tests for, which are all being moved upstream to their respective packages. Packages that have a repo on our <a href="https://upstreamfirst.fedorainfracloud.org/">forge</a> are counted as "moved," packages with open issues are counted as "working on." If there is no repo on the forge for a package, it's counted in the "untouched" category.</p>
|
|
||||||
|
|
||||||
<h4>Raw Numbers:</h4>
|
|
||||||
<p>
|
|
||||||
<ul>
|
|
||||||
<li id="total-tests">Total Tests: Loading...</li>
|
|
||||||
<li id="migrated-tests">Migrated: Loading...</li>
|
|
||||||
<li id="working-on">Working on: Loading...</li>
|
|
||||||
</ul>
|
|
||||||
</p>
|
|
||||||
|
|
||||||
<h3>Current Status</h3>
|
|
||||||
|
|
||||||
<div id="chart"></div>
|
|
||||||
|
|
||||||
<div id="tables">
|
|
||||||
|
|
||||||
<h3>Package List</h3>
|
|
||||||
<table id='table' data-search='true'
|
|
||||||
data-show-refresh="true"
|
|
||||||
data-sort-name='name'
|
|
||||||
data-sort-desc='desc'
|
|
||||||
data-show-toggle="true" data-show-columns="true"></table>
|
|
||||||
|
|
||||||
</div> <!-- End of tables div -->
|
|
||||||
|
|
||||||
<p> <sub>(Updated every hour)</sub></p>
|
|
||||||
|
|
||||||
<script type="text/javascript">
|
|
||||||
|
|
||||||
apiRequest = new XMLHttpRequest();
|
|
||||||
|
|
||||||
apiRequest.onreadystatechange = getString;
|
|
||||||
apiRequest.open("GET", "https://status.{{ external_hostname }}/api/all", false);
|
|
||||||
apiRequest.send();
|
|
||||||
|
|
||||||
function getString() {
|
|
||||||
if (apiRequest.readyState === XMLHttpRequest.DONE) {
|
|
||||||
if (apiRequest.status === 200) {
|
|
||||||
return apiRequest.responseText;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
results = apiRequest.responseText;
|
|
||||||
results = JSON.parse(results);
|
|
||||||
|
|
||||||
$('#table').bootstrapTable({
|
|
||||||
data: results,
|
|
||||||
columns:[{
|
|
||||||
field: 'id',
|
|
||||||
title: 'id'
|
|
||||||
}, {
|
|
||||||
field: 'name',
|
|
||||||
title: 'Name'
|
|
||||||
}, {
|
|
||||||
field: 'status',
|
|
||||||
title: 'Status'
|
|
||||||
}, {
|
|
||||||
field: 'contact',
|
|
||||||
title: 'Contact'
|
|
||||||
}, {
|
|
||||||
field: 'pagure_link',
|
|
||||||
title: 'Forge Link'
|
|
||||||
}]
|
|
||||||
});
|
|
||||||
|
|
||||||
|
|
||||||
</script>
|
|
||||||
|
|
||||||
<script type="text/javascript">
|
|
||||||
$(document).ready(function () {
|
|
||||||
var moved = "Moved to Forge";
|
|
||||||
var untouched = "Untouched";
|
|
||||||
var working_on = "Working On";
|
|
||||||
|
|
||||||
<!-- Write out our AJAX calls to update the page counts. -->
|
|
||||||
apiRequest = new XMLHttpRequest();
|
|
||||||
|
|
||||||
apiRequest.onreadystatechange = getString;
|
|
||||||
apiRequest.open("GET", "https://status.{{ external_hostname }}/api/counts", false);
|
|
||||||
apiRequest.send();
|
|
||||||
|
|
||||||
function getString() {
|
|
||||||
if (apiRequest.readyState === XMLHttpRequest.DONE) {
|
|
||||||
if (apiRequest.status === 200) {
|
|
||||||
return apiRequest.responseText;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
results = apiRequest.responseText;
|
|
||||||
results = JSON.parse(results);
|
|
||||||
|
|
||||||
var moved_number = results.total_moved.valueOf();
|
|
||||||
var working_on_number = results.WORKING.valueOf();
|
|
||||||
var untouched_number = results.UNKNOWN.valueOf();
|
|
||||||
|
|
||||||
// Fill out the actual values in the table
|
|
||||||
document.getElementById("total-tests").innerText = "Total Tests: " + results.total;
|
|
||||||
document.getElementById("migrated-tests").innerText = "Migrated: " + moved_number;
|
|
||||||
document.getElementById("working-on").innerText = "Working-on: " + working_on_number;
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
var chart = c3.generate({
|
|
||||||
data: {
|
|
||||||
columns: [
|
|
||||||
[moved, moved_number],
|
|
||||||
[working_on, working_on_number ],
|
|
||||||
[untouched, untouched_number],
|
|
||||||
],
|
|
||||||
type : 'donut',
|
|
||||||
onclick: function (d, i) { console.log("onclick", d, i); },
|
|
||||||
onmouseover: function (d, i) { console.log("onmouseover", d, i); },
|
|
||||||
onmouseout: function (d, i) { console.log("onmouseout", d, i); }
|
|
||||||
},
|
|
||||||
donut: {
|
|
||||||
title: "Migration Status"
|
|
||||||
},
|
|
||||||
color: {
|
|
||||||
pattern: ['#0000ff', '#00ff00', '#ff0000']
|
|
||||||
}
|
|
||||||
});
|
|
||||||
|
|
||||||
setTimeout(function () {
|
|
||||||
chart.load({
|
|
||||||
columns: [
|
|
||||||
[moved, moved_number],
|
|
||||||
[untouched, untouched_number],
|
|
||||||
]
|
|
||||||
});
|
|
||||||
}, 1500);
|
|
||||||
|
|
||||||
setTimeout(function () {
|
|
||||||
chart.unload({
|
|
||||||
ids: 'data1'
|
|
||||||
});
|
|
||||||
chart.unload({
|
|
||||||
ids: 'data2'
|
|
||||||
});
|
|
||||||
}, 2500);
|
|
||||||
});
|
|
||||||
</script>
|
|
||||||
|
|
||||||
</body>
|
|
||||||
|
|
||||||
</html>
|
|
||||||
|
|
@ -1,16 +0,0 @@
|
||||||
[Unit]
|
|
||||||
Description=ufmonitor apiserver
|
|
||||||
After=docker.service
|
|
||||||
Requires=docker.service
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
TimeoutStartSec=0
|
|
||||||
Type=oneshot
|
|
||||||
RemainAfterExit=yes
|
|
||||||
EnvironmentFile=-{{ ufmonitor_config_path }}
|
|
||||||
ExecStart=/usr/bin/docker run --detach --log-driver none --name %n -p 8000:8000 -e POSTGRES_DB_PASSWORD={{ ufmonitor_db_password }} --add-host=postgres:{{ ufmonitor_db_host }} {{ apiserver_container_image }}
|
|
||||||
ExecStop=/usr/bin/docker rm --force %n
|
|
||||||
TimeoutStopSec=180
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
|
|
@ -1,37 +0,0 @@
|
||||||
## Redirects http -> https
|
|
||||||
<VirtualHost *:80>
|
|
||||||
RewriteEngine on
|
|
||||||
RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L]
|
|
||||||
ServerName {{ external_hostname }}
|
|
||||||
Redirect permanent / https://{{ external_hostname }}/
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
||||||
## End of redirects http -> https
|
|
||||||
|
|
||||||
<VirtualHost *:443>
|
|
||||||
ServerName status.{{ external_hostname }}
|
|
||||||
|
|
||||||
Alias "/robots.txt" "/var/www/html/robots.txt"
|
|
||||||
|
|
||||||
ServerAdmin admin@fedoraproject.org
|
|
||||||
|
|
||||||
SSLEngine on
|
|
||||||
SSLProtocol {{ ssl_protocols }}
|
|
||||||
SSLCipherSuite {{ ssl_ciphers }}
|
|
||||||
# Use secure TLSv1.1 and TLSv1.2 ciphers
|
|
||||||
Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
|
||||||
|
|
||||||
SSLCertificateFile /etc/letsencrypt/live/{{ external_hostname }}/cert.pem
|
|
||||||
SSLCertificateKeyFile /etc/letsencrypt/live/{{ external_hostname }}/privkey.pem
|
|
||||||
SSLCertificateChainFile /etc/letsencrypt/live/{{ external_hostname }}/fullchain.pem
|
|
||||||
SSLHonorCipherOrder On
|
|
||||||
|
|
||||||
DocumentRoot "{{ ufmonitor_home }}"
|
|
||||||
|
|
||||||
# proxy the docker containers running the actual api process
|
|
||||||
<Location /api/ >
|
|
||||||
ProxyPass http://127.0.0.1:8000/
|
|
||||||
ProxyPassReverse http://127.0.0.1:8000/
|
|
||||||
</Location>
|
|
||||||
|
|
||||||
</VirtualHost>
|
|
||||||
|
|
@ -1,7 +0,0 @@
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
#
|
|
||||||
# This job handles updating the ufmonitor database with new data from a pagure instance
|
|
||||||
#
|
|
||||||
|
|
||||||
docker run --add-host=postgres:{{ ufmonitor_db_host}} -e POSTGRES_DB_PASSWORD="{{ ufmonitor_db_password }}" {{ updater_container_image }}
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
mirrormanager_uid: 441
|
|
||||||
mirrormanager_gid: 441
|
|
||||||
mirrors_gid: 263
|
|
||||||
mirrors2_gid: 529
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue