From afd0ef1c9e37f2b33442fae7f0f79221c98375ac Mon Sep 17 00:00:00 2001 From: Adam Williamson Date: Fri, 23 Nov 2018 11:23:39 -0800 Subject: [PATCH] Switch openQA stg to use balancer reverse proxying This should, we hope, make websockets proxying work right. @puiterwijk says he eventually wants to move everything to this system to get haproxy out of the loop in any case. Signed-off-by: Adam Williamson --- playbooks/include/proxies-reverseproxy.yml | 6 ++++++ playbooks/include/proxies-websites.yml | 6 +++++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml index 6916c3993e..3d36657296 100644 --- a/playbooks/include/proxies-reverseproxy.yml +++ b/playbooks/include/proxies-reverseproxy.yml @@ -323,6 +323,12 @@ localpath: / proxyurl: http://localhost:10044 + - role: httpd/reverseproxy + website: openqa.stg.fedoraproject.org + destname: openqa + balancer_name: openqa-stg + balancer_members: ['openqa-stg01.qa.fedoraproject.org:80'] + - role: httpd/reverseproxy website: apps.fedoraproject.org destname: autocloud diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index 6984803cef..411b5f0f3a 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -757,7 +757,11 @@ - role: httpd/website site_name: openqa.fedoraproject.org cert_name: "{{wildcard_cert_name}}" - server_aliases: [openqa.stg.fedoraproject.org] + sslonly: true + + - role: httpd/website + site_name: openqa.stg.fedoraproject.org + cert_name: "{{wildcard_cert_name}}" sslonly: true - role: httpd/website