diff --git a/roles/pagure/frontend/tasks/main.yml b/roles/pagure/frontend/tasks/main.yml index 7a3d8503d9..778f1ccf1a 100644 --- a/roles/pagure/frontend/tasks/main.yml +++ b/roles/pagure/frontend/tasks/main.yml @@ -453,6 +453,12 @@ site_name: releases.stg.pagure.org when: env == 'pagure-staging' +- name: Letsencrypt for docs.stg.pagure.org + include_role: name=letsencrypt + vars: + site_name: docs.stg.pagure.org + when: env == 'pagure-staging' + - name: Letsencrypt for stg.pagure.org include_role: name=letsencrypt vars: diff --git a/roles/pagure/frontend/templates/0_pagure.conf b/roles/pagure/frontend/templates/0_pagure.conf index 57f475697d..8968f11cae 100644 --- a/roles/pagure/frontend/templates/0_pagure.conf +++ b/roles/pagure/frontend/templates/0_pagure.conf @@ -163,9 +163,15 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na # Use secure TLSv1.1 and TLSv1.2 ciphers Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" +{% if env == 'pagure-staging' %} + SSLCertificateFile /etc/pki/tls/certs/docs.stg.pagure.org.cert + SSLCertificateChainFile /etc/pki/tls/certs/docs.stg.pagure.org.intermediate.cert + SSLCertificateKeyFile /etc/pki/tls/private/docs.stg.pagure.org.key +{% else %} SSLCertificateFile /etc/pki/tls/certs/pagure.io.cert SSLCertificateChainFile /etc/pki/tls/certs/pagure.io.intermediate.cert SSLCertificateKeyFile /etc/pki/tls/certs/pagure.io.key +{% endif %} Alias /static /usr/lib/python2.7/site-packages/pagure/static/