Commit graph

51 commits

Author SHA1 Message Date
Patrick Uiterwijk
b69187c61c COPR API goes over SSL 2016-01-22 01:04:50 +00:00
Patrick Uiterwijk
62a0372a38 Add the de-facto x-forwarded-proto
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-15 09:34:32 +00:00
Patrick Uiterwijk
7d179ed9dc Merge patch to enable HSTS on id.fp.o. #4991
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-12-01 21:34:46 +00:00
Patrick Uiterwijk
a0cf3666ce Cherrypy wants -Proto. Lets make it happy
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-12-01 21:15:03 +00:00
Kevin Fenzi
7b8f1624bf Gte another reload place 2015-10-11 19:53:20 +00:00
Ralph Bean
b0d3350791 Revert "robots.txt for bodhi.fp.o."
This reverts commit dd76e91f2f.
2015-10-11 19:14:42 +00:00
Ralph Bean
dd76e91f2f robots.txt for bodhi.fp.o. 2015-10-11 19:09:17 +00:00
Adrian Reber
0c710e5d60 The crawler logs are now on mm-frontend01.
ProxyPass to the crawler is no longer required.
2015-06-23 07:39:18 +00:00
Adrian Reber
4d80aff5f1 The crawler logs are now on mm-crawler01 2015-06-12 16:11:00 +00:00
Adrian Reber
74c772f99f Fix redirect from publiclist to mirrormanager.
There have been reports that the old links pointing to the mirrorlist
are no longer working:

 $ curl -I http://mirrors.fedoraproject.org/publiclist/
 Location: https://admin.fedoraproject.org/mirrormanager///

This redirect still works but trying to access a specific mirrorlist
fails:

 $ curl -I http://mirrors.fedoraproject.org/publiclist/EPEL/7/
 Location: https://admin.fedoraproject.org/mirrormanager///EPEL/7/
 $ curl -I https://admin.fedoraproject.org/mirrormanager///EPEL/7/
 HTTP/1.1 404 NOT FOUND

At different places there are just too many slashes added. Removing the
slashes seems to help.
2015-05-15 19:06:05 +00:00
Patrick Uiterwijk
fa1f170788 Revert "Set HSTS on id.fp.o manually to disable subdomains"
This reverts commit 62c73923f3.
2015-02-20 21:41:32 +00:00
Patrick Uiterwijk
62c73923f3 Set HSTS on id.fp.o manually to disable subdomains 2015-02-20 21:32:18 +00:00
Till Maas
ce8655f7d1 Set HSTS for sslonly websites in roles/httpd/reverseproxy 2015-02-12 21:41:27 +01:00
Patrick Uiterwijk
2b1d97f004 Set the X-Scheme header as we agreed on
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-02-11 09:47:49 +00:00
Till Maas
bd5407d679 Add HSTS header to bodhi, elections, fas, pkgdb
Seems like this needs to be configured in the reverse proxy config as it
is done for id.
2015-02-04 15:24:01 +01:00
Till Maas
e67081afe1 Improve HSTS header
- always set the header to make it hopefully appear on redirect as well
  (https://fedorahosted.org/fedora-infrastructure/ticket/2888#comment:11)
- set preload, to make it more likely that subdomains can be
  added to preload list
2015-02-04 11:49:05 +01:00
Ralph Bean
f3bdf81c89 Whitespace and slashes. 2014-12-19 15:26:44 +00:00
Ralph Bean
1ff17f6b21 Special-case out mirrormanager2. 2014-12-19 15:25:14 +00:00
Ralph Bean
cc8e08e90b proxy config for docs-backend. 2014-12-18 19:18:00 +00:00
Ralph Bean
246e1d4700 Special-case fedora-mobile (reverseproxy). 2014-12-08 21:15:23 +00:00
Ralph Bean
a398ff8bc1 Whitespace. 2014-12-08 20:57:25 +00:00
Ralph Bean
3098a79758 Whitespace. 2014-12-08 20:53:14 +00:00
Ralph Bean
9e69c0cbbd boolean not defined. 2014-12-08 20:51:33 +00:00
Ralph Bean
00eeee6193 Special-case mediawiki (reverseproxy). 2014-12-08 20:50:28 +00:00
Ralph Bean
08152258f0 Special-case pkgdb (reverseproxy). 2014-12-08 20:43:55 +00:00
Ralph Bean
4ba76cb94f Special-case bodhi (reverseproxy). 2014-12-08 20:35:29 +00:00
Ralph Bean
ecbc3764f8 Special-case mirrormanager main app (reverseproxy). 2014-12-08 20:28:50 +00:00
Ralph Bean
410876543a Special-case elections (reverseproxy). 2014-12-08 20:21:12 +00:00
Ralph Bean
ae1e36c5c8 Redundant slash. 2014-12-08 20:21:12 +00:00
Ralph Bean
5e3831a12b Special-case mirrormanager (reverseproxy). 2014-12-08 20:16:24 +00:00
Ralph Bean
06a7fd8e48 Typofix. 2014-12-08 20:12:16 +00:00
Ralph Bean
df30b9fa9d Special-case fedoauth (reverseproxy). 2014-12-08 19:53:15 +00:00
Ralph Bean
5c29359f1d Special-case fas (reverseproxy). 2014-12-08 19:45:32 +00:00
Ralph Bean
3c98163c4c Special-case awstats. 2014-12-08 19:41:05 +00:00
Ralph Bean
d49ef72141 Rename. 2014-12-08 19:33:14 +00:00
Ralph Bean
11aa655c9a Special-case geoip-city-wsgi. 2014-12-08 19:30:30 +00:00
Ralph Bean
36de1fb87b Try fully qualifying these. 2014-12-08 19:28:11 +00:00
Ralph Bean
671d1f9360 This isn't working. Try this. 2014-12-08 19:18:44 +00:00
Ralph Bean
e396051ff0 That didn't do it. 2014-12-08 18:05:25 +00:00
Ralph Bean
12c1bfacba It wasn't able to find any. Do you have to specify templates/? 2014-12-08 18:03:55 +00:00
Ralph Bean
d323e54053 Redundant slash. 2014-12-08 18:00:48 +00:00
Ralph Bean
f1b20d1a39 Let's try a with_first_found here to special case some entries. 2014-12-08 17:58:51 +00:00
Ralph Bean
2b558a478f Help debug. 2014-12-08 17:50:32 +00:00
Ralph Bean
0ec6d0e2e1 Whitespace. 2014-12-08 17:40:07 +00:00
Ralph Bean
5ac9136973 Some apps need to set this header. 2014-12-08 17:37:48 +00:00
Ralph Bean
bfd7cb3b5f whitespace. 2014-12-08 17:22:20 +00:00
Ralph Bean
edec8eb95e This is non-essential. 2014-12-08 15:50:34 +00:00
Ralph Bean
4dce7b2b3a Whitespace. 2014-12-08 15:48:38 +00:00
Ralph Bean
d2502b2754 Prune reversepassproxy configs. 2014-12-08 15:47:36 +00:00
Ralph Bean
a81bc16c74 Remove erroneously copied config files. 2014-12-08 15:44:47 +00:00