Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr-be: experiment with ipv6/ipv4 x 80/443

Browse source 
This is according to lighttpd best practices?
https://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config#Recommended-IPv6-setup
This commit is contained in:
Pavel Raiskup 2021-01-22 16:29:32 +01:00
parent f615877ec7
commit e7badfc679
1 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/copr/backend/templates/lighttpd/lighttpd.conf
View file

@ -103,12 +103,11 @@ cgi.assign = ( ".pl" => "/usr/bin/perl",
## Basic Configuration
## ---------------------
##
server.port = 80
##
## Use IPv6?
##
server.use-ipv6 = "enable"
# Per https://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config#Recommended-IPv6-setup
server.bind = "0.0.0.0"
server.port = 80
$SERVER["socket"] == "[::]:80" { }
##
## bind to a specific IP
@ -485,7 +484,9 @@ $HTTP["url"] =~ "^/.well-known/" {
}
# Enable HTTPS
$SERVER["socket"] == "0.0.0.0:443" {
{% for https_bind in ["0.0.0.0:443", "[::]:443"] %}
# we need to have this twice: https://redmine.lighttpd.net/projects/lighttpd/wiki/IPv6-Config#Recommended-IPv6-setup
$SERVER["socket"] == "{{ https_bind }}" {
ssl.engine = "enable"
{% for hostname, _ in letsencrypt.certificates.items() %}
ssl.ca-file = "/etc/letsencrypt/live/{{ hostname }}/chain.pem"
@ -499,8 +500,7 @@ $SERVER["socket"] == "0.0.0.0:443" {
ssl.use-sslv3 = "disable"
}
{% endif %}
$SERVER["socket"] == "0.0.0.0:80" {}
{% endfor %}
url.redirect = ( "^/results/sgallagh/cockpit-preview/(.+)" => "/results/@cockpit/cockpit-preview/$1" )