diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml index f1646f6920..f4780d2d35 100644 --- a/playbooks/include/proxies-reverseproxy.yml +++ b/playbooks/include/proxies-reverseproxy.yml @@ -497,17 +497,22 @@ website: geoip.fedoraproject.org proxyurl: http://localhost:10029 - # Reverse proxy pkgs for integrity protection of anonymous clones - role: httpd/reverseproxy website: src.fedoraproject.org destname: git proxyurl: http://localhost:10057 + header_scheme: true + header_expect: true + keephost: true when: env == "production" - role: httpd/reverseproxy website: src.stg.fedoraproject.org destname: git proxyurl: http://localhost:10057 + header_scheme: true + header_expect: true + keephost: true when: env == "staging" - role: httpd/reverseproxy diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.conf index b7d6ff06d0..86f30caae5 100644 --- a/roles/httpd/reverseproxy/templates/reversepassproxy.conf +++ b/roles/httpd/reverseproxy/templates/reversepassproxy.conf @@ -9,7 +9,10 @@ RequestHeader set X-Scheme https early RequestHeader set X-Forwarded-Proto https early {% endif %} +{% if header_expect %} +RequestHeader unset Expect early +{% endif %} {% if keephost %} ProxyPreserveHost On {% endif %}