From 147fc829f8add279e95c56bec88a91dbb90fa11a Mon Sep 17 00:00:00 2001
From: Till Maas <opensource@till.name>
Date: Tue, 25 Aug 2015 21:56:37 +0200
Subject: [PATCH] Enforce TLS for more websites

---
 playbooks/include/proxies-websites.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml
index 4aa9b8ce93..8d2679a0d7 100644
--- a/playbooks/include/proxies-websites.yml
+++ b/playbooks/include/proxies-websites.yml
@@ -223,6 +223,7 @@
     server_aliases:
     - doc.fedoraproject.org
     - docs.stg.fedoraproject.org
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
@@ -248,6 +249,7 @@
   - role: httpd/website
     name: bugz.fedoraproject.org
     server_aliases: [bugz.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
@@ -255,6 +257,7 @@
     server_aliases:
     - fas.stg.fedoraproject.org
     - accounts.fedoraproject.org
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
@@ -277,6 +280,7 @@
   - role: httpd/website
     name: help.fedoraproject.org
     server_aliases: [help.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
@@ -294,33 +298,40 @@
   - role: httpd/website
     name: people.fedoraproject.org
     server_aliases: [people.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: join.fedoraproject.org
     server_aliases: [join.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: l10n.fedoraproject.org
     server_aliases: [l10n.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: start.fedoraproject.org
     server_aliases: [start.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: kde.fedoraproject.org
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: nightly.fedoraproject.org
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: store.fedoraproject.org
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
@@ -356,21 +367,25 @@
   - role: httpd/website
     name: fonts.fedoraproject.org
     server_aliases: [fonts.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: meetbot.fedoraproject.org
     server_aliases: [meetbot.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: meetbot-raw.fedoraproject.org
     server_aliases: [meetbot-raw.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website
     name: fudcon.fedoraproject.org
     server_aliases: [fudcon.stg.fedoraproject.org]
+    sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
   - role: httpd/website