From b22685d52400a9792b2b66d147092d04261172d2 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Sun, 31 May 2015 16:21:30 +0000
Subject: [PATCH] See if we can easily enable https on mirrorlists (test in
 staging)

---
 playbooks/groups/mirrorlist2.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/playbooks/groups/mirrorlist2.yml b/playbooks/groups/mirrorlist2.yml
index b3767f6aa7..b8718419ef 100644
--- a/playbooks/groups/mirrorlist2.yml
+++ b/playbooks/groups/mirrorlist2.yml
@@ -38,6 +38,22 @@
   - fas_client
   - collectd/base
   - apache
+  - httpd/mod_ssl
+
+  - role: httpd/certificate
+    name: wildcard-2014.fedoraproject.org
+    SSLCertificateChainFile: wildcard-2014.fedoraproject.org.intermediate.cert
+
+  - role: httpd/website
+    name: mirrorlist-phx2.phx2.fedoraproject.org
+    cert_name: "{{wildcard_cert_name}}"
+    server_aliases:
+    - mirrorlist-dedicatedsolutions.fedoraproject.org
+    - mirrorlist-host1plus.fedoraproject.org
+    - mirrorlist-ibiblio.fedoraproject.org
+    - mirrorlist-osuosl.fedoraproject.org
+    - mirrorlist-phx2.stg.phx2.fedoraproject.org
+
   - mirrormanager/mirrorlist2
   - sudo
   - { role: openvpn/client,