Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Move COPR to its new home

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-01-22 01:38:08 +00:00
parent c5c0a90660
commit d2ec98c7a2
2 changed files with 21 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/copr/frontend/files/httpd/coprs.conf
View file

@ -3,7 +3,8 @@ LoadModule wsgi_module modules/mod_wsgi.so
WSGISocketPrefix /var/run/wsgi WSGISocketPrefix /var/run/wsgi
<VirtualHost *:80> <VirtualHost *:80>
ServerName copr-fe.cloud.fedoraproject.org ServerName copr.fedorainfracloud.org
ServerAlias copr-fe.cloud.fedoraproject.org
WSGIPassAuthorization On WSGIPassAuthorization On
WSGIDaemonProcess 127.0.0.1 user=copr-fe group=copr-fe threads=15 display-name=other WSGIDaemonProcess 127.0.0.1 user=copr-fe group=copr-fe threads=15 display-name=other

65
roles/copr/frontend/files/httpd/coprs_ssl.conf
View file

@ -1,49 +1,3 @@
<VirtualHost *:443>
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
# Use secure TLSv1.1 and TLSv1.2 ciphers
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
Header always add Strict-Transport-Security "max-age=15768000; preload"
SSLCertificateFile /etc/pki/tls/certs/copr-fe.fedoraproject.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/copr-fe.fedoraproject.org.key
SSLCertificateChainFile /etc/pki/tls/certs/DigiCertCA.crt
ServerName copr-fe.cloud.fedoraproject.org:443
# Redirect once the other url is confirmed working
#Redirect 301 / https://copr.fedorainfracloud.org/
WSGIPassAuthorization On
WSGIScriptAlias / /usr/share/copr/coprs_frontend/application
WSGIProcessGroup 127.0.0.1
<Location /api>
WSGIProcessGroup api
</Location>
<Location /backend>
WSGIProcessGroup backend
</Location>
<Location /stats_rcv>
WSGIProcessGroup stats
</Location>
<Location /tmp>
WSGIProcessGroup tmp
</Location>
#ErrorLog logs/error_coprs
#CustomLog logs/access_coprs common
<Directory /usr/share/copr>
WSGIApplicationGroup %{GLOBAL}
Require all granted
</Directory>
RewriteEngine on
RewriteRule ^/coprs/sgallagh/cockpit-preview/repo/(.*)/.*\.repo$ /coprs/g/cockpit/cockpit-preview/repo/$1/ [R=301]
RewriteRule ^/coprs/sgallagh/cockpit-preview/(.*)$ /coprs/g/cockpit/cockpit-preview/$1 [R=301]
</VirtualHost>
<VirtualHost *:443> <VirtualHost *:443>
SSLEngine on SSLEngine on
SSLProtocol all -SSLv2 -SSLv3 SSLProtocol all -SSLv2 -SSLv3
@ -88,3 +42,22 @@
RewriteRule ^/coprs/sgallagh/cockpit-preview/(.*)$ /coprs/g/cockpit/cockpit-preview/$1 [R=301] RewriteRule ^/coprs/sgallagh/cockpit-preview/(.*)$ /coprs/g/cockpit/cockpit-preview/$1 [R=301]
</VirtualHost> </VirtualHost>
<VirtualHost *:443>
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
# Use secure TLSv1.1 and TLSv1.2 ciphers
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
Header always add Strict-Transport-Security "max-age=15768000; preload"
SSLCertificateFile /etc/pki/tls/certs/copr-fe.fedoraproject.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/copr-fe.fedoraproject.org.key
SSLCertificateChainFile /etc/pki/tls/certs/DigiCertCA.crt
ServerName copr-fe.cloud.fedoraproject.org
ServerAlias copr.fedoraproject.org
Redirect 302 / https://copr.fedorainfracloud.org/
</VirtualHost>