From d6aaaeed351b9208e327603913f473771c0aff1b Mon Sep 17 00:00:00 2001
From: Till Maas <opensource@till.name>
Date: Sat, 21 Feb 2015 01:45:41 +0100
Subject: [PATCH] Add plain HTTP note for id.fpo

---
 playbooks/include/proxies-websites.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml
index 3ad3214d47..746395b6b5 100644
--- a/playbooks/include/proxies-websites.yml
+++ b/playbooks/include/proxies-websites.yml
@@ -408,6 +408,8 @@
     server_aliases:
     - "*.id.fedoraproject.org"
     ips: "{{wildcard_fpo_ips}}"
+    # Must not be sslonly, because example.id.fedoraproject.org must be reachable
+    # via plain http for openid identity support
     cert_name: wildcard-2014.id.fedoraproject.org
     SSLCertificateChainFile: wildcard-2014.id.fedoraproject.org.intermediate.cert
 
@@ -416,6 +418,8 @@
     server_aliases:
     - "*.id.stg.fedoraproject.org"
     ips: "{{wildcard_fpo_ips}}"
+    # Must not be sslonly, because example.id.fedoraproject.org must be reachable
+    # via plain http for openid identity support
     cert_name: "{{wildcard_cert_name}}"
     SSLCertificateChainFile: wildcard-2014.stg.fedoraproject.org.intermediate.cert
     when: env == "staging"