infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Combine all rules into one

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-02-02 20:52:55 +00:00
parent daef9222ad
commit 6fee027d40
1 changed files with 3 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/kojipkgs/files/kojipkgs.conf
View file

@ -103,20 +103,10 @@ Alias /pub /pub
Require all granted
</Directory>
# This IP is sign-bridge01.phx2.fedoraproject.org.
# It needs to be able to sign openh264 packages.
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.x86_64.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.armv7hl.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.i686.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.ppc64.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.ppc64le.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.aarch64.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteCond %{HTTP:X-Forwarded-For} !10.5.125.71
RewriteRule ".*/.*openh264.*.s390x.rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
RewriteRule ".*/.*openh264.*.(x86_64|armv7hl|i686|ppc64|ppc64le|aarch64|s390x).rpm$" "https://fedoraproject.org/wiki/non-distributable-rpms" [R=302,L]
# Set HSTS header via HTTP since it cannot be easily set in squid, which terminates HTTPS
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"