jenkins ssl stuff

inventory/host_vars/jenkins.fedorainfracloud.org

@@ -2,7 +2,7 @@
 image: "{{ fedora24_x86_64 }}"
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443, 8080]
 

playbooks/groups/jenkins-master.yml

@@ -38,10 +38,13 @@
   - jenkins/master
   #- fedmsg/base
   - apache
+  - certbot
   - role: httpd/website
     name: jenkins.fedorainfracloud.org
-    ssl: false
+    ssl: true
+    sslonly: true
   - role: httpd/reverseproxy
+    header_scheme: true
     website: jenkins.fedorainfracloud.org
     destname: jenkins
     proxyurl: http://localhost:8080