Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

first cut at using letsencrypt cert for fpaste.org. ticket 5784

Browse source
This commit is contained in:
Kevin Fenzi 2017-04-06 20:31:39 +00:00
parent 170270f1cb
commit 38884a1b7c
3 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
files/httpd/fpaste.org.conf Normal file
View file

@ -0,0 +1,2 @@
RewriteEngine on
RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L]

5
playbooks/groups/proxies.yml
View file

@ -23,9 +23,14 @@
when: env == "staging" or "'mirrorlist-proxy' in group_names" } when: env == "staging" or "'mirrorlist-proxy' in group_names" }
- { role: openvpn/client, - { role: openvpn/client,
when: env != "staging" } when: env != "staging" }
- { role: certbot,
when: inventory_hostname == 'proxy01.phx2.fedoraproject.org' }
- apache - apache
tasks: tasks:
- name: install special fpaste.conf with letsencrypt info
copy: src={{ files }}/files/httpd/fpaste.conf dest=/etc/httpd/conf.d/fpaste.org/fpaste.org.conf
when: inventory_hostname == 'proxy01.phx2.fedoraproject.org'
- include: "{{ tasks }}/yumrepos.yml" - include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml" - include: "{{ tasks }}/2fa_client.yml"
- include: "{{ tasks }}/motd.yml" - include: "{{ tasks }}/motd.yml"

8
playbooks/include/proxies-websites.yml
View file

@ -463,11 +463,19 @@
# #
# Make a website here so we can redirect it to paste.fedoraproject.org # Make a website here so we can redirect it to paste.fedoraproject.org
# #
- role: httpd/website
name: fpaste.org
server_aliases:
- www.fpaste.org
cert_name: fpaste.org
when: inventory_hostname == 'proxy01.phx2.fedoraproject.org'
- role: httpd/website - role: httpd/website
name: fpaste.org name: fpaste.org
server_aliases: server_aliases:
- www.fpaste.org - www.fpaste.org
cert_name: "{{wildcard_cert_name}}" cert_name: "{{wildcard_cert_name}}"
when: inventory_hostname != 'proxy01.phx2.fedoraproject.org'
- role: httpd/website - role: httpd/website
name: koji.fedoraproject.org name: koji.fedoraproject.org