954 lines
26 KiB
YAML
954 lines
26 KiB
YAML
- name: Set up those ProxyPassReverse statements. Somebody get me a cup of coffee..
|
|
hosts: proxies_stg:proxies
|
|
user: root
|
|
gather_facts: True
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
handlers:
|
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
|
|
|
vars:
|
|
- varnish_url: http://localhost:6081
|
|
|
|
pre_tasks:
|
|
|
|
- name: Remove some crusty files from bygone eras
|
|
file: dest=/etc/httpd/conf.d/{{item}} state=absent
|
|
with_items:
|
|
- meetbot.fedoraproject.org/reversepassproxy.conf
|
|
- meetbot.fedoraproject.org/meetbot.conf
|
|
notify:
|
|
- reload proxyhttpd
|
|
tags:
|
|
- httpd
|
|
- httpd/reverseproxy
|
|
|
|
|
|
roles:
|
|
|
|
- role: httpd/reverseproxy
|
|
website: copr.fedoraproject.org
|
|
destname: coprapi
|
|
when: env != "staging"
|
|
tags: copr
|
|
|
|
- role: httpd/reverseproxy
|
|
website: copr.fedoraproject.org
|
|
destname: copr
|
|
proxyurl: http://localhost:10070
|
|
keephost: true
|
|
when: env == "staging"
|
|
tags: copr
|
|
|
|
- role: httpd/reverseproxy
|
|
website: nagios.fedoraproject.org
|
|
destname: nagios
|
|
remotepath: /
|
|
proxyurl: http://noc01.{{ datacenter }}.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: zabbix.fedoraproject.org
|
|
destname: zabbix
|
|
remotepath: /
|
|
proxyurl: http://localhost:10068
|
|
keephost: true
|
|
header_scheme: true
|
|
when: env == "production"
|
|
tags: zabbix
|
|
|
|
- role: httpd/reverseproxy
|
|
website: zabbix.stg.fedoraproject.org
|
|
destname: zabbix
|
|
remotepath: /
|
|
proxyurl: http://localhost:10068
|
|
keephost: true
|
|
header_scheme: true
|
|
when: env == "staging"
|
|
tags: zabbix
|
|
|
|
- role: httpd/reverseproxy
|
|
website: lists.fedoraproject.org
|
|
destname: mailman3
|
|
localpath: /
|
|
remotepath: /
|
|
header_scheme: true
|
|
keephost: true
|
|
proxyurl: "{{ varnish_url }}"
|
|
tags: lists.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: lists.fedorahosted.org
|
|
destname: mailman3
|
|
localpath: /
|
|
remotepath: /
|
|
header_scheme: true
|
|
keephost: true
|
|
proxyurl: "{{ varnish_url }}"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: lists.pagure.io
|
|
destname: mailman3
|
|
localpath: /
|
|
remotepath: /
|
|
header_scheme: true
|
|
keephost: true
|
|
proxyurl: "{{ varnish_url }}"
|
|
|
|
# The place for the raw originals
|
|
- role: httpd/reverseproxy
|
|
website: meetbot-raw.fedoraproject.org
|
|
destname: meetbot
|
|
remotepath: /meetbot/
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://value02
|
|
when: env != "staging"
|
|
|
|
# The place for the fancy mote view
|
|
- role: httpd/reverseproxy
|
|
website: meetbot.fedoraproject.org
|
|
destname: mote
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: mote
|
|
|
|
# The place for the raw originals
|
|
- role: httpd/reverseproxy
|
|
website: meetbot-raw.fedoraproject.org
|
|
destname: meetbot
|
|
remotepath: /meetbot/
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://value02
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: apps.fedoraproject.org
|
|
destname: github2fedmsg
|
|
localpath: /github2fedmsg
|
|
remotepath: /github2fedmsg
|
|
header_scheme: true
|
|
proxyurl: http://localhost:10037
|
|
|
|
- role: httpd/reverseproxy
|
|
website: apps.fedoraproject.org
|
|
destname: fedora-notifications
|
|
localpath: /notifications-old
|
|
remotepath: /notifications-old
|
|
header_scheme: true
|
|
proxyurl: http://localhost:10036
|
|
tags:
|
|
- fmn
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "notifications{{ env_suffix }}.fedoraproject.org"
|
|
destname: fmn
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- fmn
|
|
|
|
- role: httpd/reverseproxy
|
|
website: ask.fedoraproject.org
|
|
destname: askbot
|
|
proxyurl: "{{ varnish_url }}"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "accounts{{ env_suffix }}.fedoraproject.org"
|
|
destname: noggin
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- noggin
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "fasjson{{ env_suffix }}.fedoraproject.org"
|
|
destname: fasjson
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- fasjson
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "id{{ env_suffix }}.fedoraproject.org"
|
|
destname: id
|
|
proxyurl: http://localhost:10020
|
|
keephost: true
|
|
header_scheme: true
|
|
tags:
|
|
- id.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "sso{{ env_suffix }}.fedoraproject.org"
|
|
destname: id
|
|
proxyurl: http://localhost:10020
|
|
keephost: true
|
|
tags:
|
|
- sso.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "username.id{{ env_suffix }}.fedoraproject.org"
|
|
destname: usernameid
|
|
proxyurl: http://localhost:10020
|
|
keephost: true
|
|
tags:
|
|
- id.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "id{{ env_suffix }}.fedoraproject.org"
|
|
destname: 00-kdcproxy
|
|
remotepath: /KdcProxy
|
|
localpath: /KdcProxy
|
|
proxyurl: http://localhost:10053
|
|
tags:
|
|
- id.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "id{{ env_suffix }}.fedoraproject.org"
|
|
destname: 00-ipa
|
|
remotepath: /ipa
|
|
localpath: /ipa
|
|
proxyurl: http://localhost:10061
|
|
tags:
|
|
- id.fedoraproject.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: apps.fedoraproject.org
|
|
destname: datagrepper
|
|
remotepath: /datagrepper
|
|
localpath: /datagrepper
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- datagrepper
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "badges.fedoraproject.org"
|
|
destname: badges
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- badges
|
|
|
|
- role: httpd/reverseproxy
|
|
website: kerneltest.fedoraproject.org
|
|
destname: kerneltest
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
header_scheme: true
|
|
tags: kerneltest
|
|
|
|
- role: httpd/reverseproxy
|
|
website: qa.fedoraproject.org
|
|
destname: blockerbugs
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
remotepath: /blockerbugs
|
|
localpath: /blockerbugs
|
|
tags: blockerbugs
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: qa.fedoraproject.org
|
|
destname: qa-landingpage
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags: qa-landingpage
|
|
|
|
- role: httpd/reverseproxy
|
|
website: qa.fedoraproject.org
|
|
destname: blockerbugs
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
remotepath: /blockerbugs
|
|
localpath: /blockerbugs
|
|
tags: blockerbugs
|
|
when: env != "staging"
|
|
|
|
|
|
- role: httpd/reverseproxy
|
|
website: fedoraproject.org
|
|
destname: fp-wiki
|
|
wpath: /w
|
|
wikipath: /wiki
|
|
proxyurl: "{{ varnish_url }}"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: bodhi.fedoraproject.org
|
|
destname: bodhi
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags: bodhi
|
|
when: env == "staging"
|
|
- role: httpd/reverseproxy
|
|
website: bodhi.fedoraproject.org
|
|
destname: bodhi
|
|
balancer_name: apps-ocp
|
|
targettype: openshift
|
|
balancer_members: "{{ocp_nodes}}"
|
|
ocp4: true
|
|
keephost: true
|
|
tags: bodhi
|
|
when: env != "staging"
|
|
|
|
#
|
|
# fedora core os routes
|
|
# These point to openshift
|
|
#
|
|
- role: httpd/reverseproxy
|
|
website: "updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env != "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "status.updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env != "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env != "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "status.raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env != "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "status.updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "status.raw-updates.coreos{{ env_suffix }}.fedoraproject.org"
|
|
destname: cincinnati
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
ocp4: true
|
|
targettype: openshift
|
|
keephost: true
|
|
tags:
|
|
- updates.coreos.fedoraproject.org
|
|
when: env == "staging"
|
|
|
|
|
|
#
|
|
# end coreos
|
|
#
|
|
|
|
- role: httpd/reverseproxy
|
|
website: transtats.fedoraproject.org
|
|
destname: transtats
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: transtats
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "mirrormanager{{ env_suffix }}.fedoraproject.org"
|
|
destname: mirrormanager
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- mirrormanager
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: mirrormanager-old
|
|
remotepath: /mirrormanager
|
|
localpath: /mirrormanager
|
|
proxyurl: "{{ varnish_url }}"
|
|
tags:
|
|
- mirrormanager
|
|
|
|
- role: httpd/reverseproxy
|
|
website: mirrors.fedoraproject.org
|
|
destname: mirrormanager-mirrorlist
|
|
proxyurl: http://localhost:10002
|
|
|
|
- role: httpd/reverseproxy
|
|
website: mirrors.centos.org
|
|
destname: mirrormanager-mirrorlist
|
|
proxyurl: http://localhost:10002
|
|
tags: mirrors.centos.org
|
|
when: env != "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: mirrors.stg.centos.org
|
|
destname: mirrormanager-mirrorlist
|
|
proxyurl: http://localhost:10002
|
|
tags: mirrors.stg.centos.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: download.fedoraproject.org
|
|
destname: mirrormanager-redirector
|
|
proxyurl: http://localhost:10002
|
|
|
|
- role: httpd/reverseproxy
|
|
website: koschei.fedoraproject.org
|
|
destname: koschei
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: koschei
|
|
|
|
- role: httpd/reverseproxy
|
|
website: openqa.fedoraproject.org
|
|
destname: openqa
|
|
balancer_name: openqa
|
|
balancer_members: ['openqa01:80']
|
|
http_not_https_yes_this_is_insecure_and_i_feel_bad: true
|
|
when: env == "production"
|
|
tags: openqa
|
|
|
|
- role: httpd/reverseproxy
|
|
website: openqa.fedoraproject.org
|
|
destname: openqa
|
|
balancer_name: openqa-stg
|
|
balancer_members: ['openqa-lab01.iad2.fedoraproject.org:80']
|
|
http_not_https_yes_this_is_insecure_and_i_feel_bad: true
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: yk-val
|
|
remotepath: /yk-val/verify
|
|
localpath: /yk-val/verify
|
|
proxyurl: http://localhost:10004
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: pager
|
|
remotepath: /pager
|
|
localpath: /pager
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://sundries01
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: awstats
|
|
remotepath: /awstats
|
|
localpath: /awstats
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://log01
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: epylog
|
|
remotepath: /epylog
|
|
localpath: /epylog
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://log01
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: maps
|
|
remotepath: /maps
|
|
localpath: /maps
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://log01
|
|
|
|
- role: httpd/reverseproxy
|
|
website: fedoraproject.org
|
|
destname: freemedia
|
|
remotepath: /freemedia
|
|
localpath: /freemedia
|
|
proxyurl: http://localhost:10011
|
|
|
|
- role: httpd/reverseproxy
|
|
website: admin.fedoraproject.org
|
|
destname: collectd
|
|
localpath: /collectd
|
|
remotepath: /collectd
|
|
# Talk directly to the app server, not haproxy
|
|
proxyurl: http://log01
|
|
tags: data-analysis
|
|
|
|
- role: httpd/reverseproxy
|
|
website: data-analysis.fedoraproject.org
|
|
destname: data-analysis
|
|
remotepath: /
|
|
localpath: /
|
|
proxyurl: http://log01
|
|
tags: data-analysis
|
|
|
|
### staging entries for resultsdb and resultsdb_frontend
|
|
- role: httpd/reverseproxy
|
|
website: resultsdb.stg.fedoraproject.org
|
|
destname: zz-resultsdb-resultsdb
|
|
localpath: /
|
|
remotepath: /
|
|
balancer_name: resultsdb-stg
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
when: env == "staging"
|
|
tags: resultsdb
|
|
|
|
### production entries for resultsdb and resultsdb_frontend
|
|
- role: httpd/reverseproxy
|
|
website: resultsdb.fedoraproject.org
|
|
destname: zz-resultsdb-resultsdb
|
|
localpath: /
|
|
remotepath: /
|
|
balancer_name: resultsdb
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
when: env != "staging"
|
|
tags: resultsdb
|
|
|
|
# This one gets its own role (instead of httpd/reverseproxy) so that it can
|
|
# copy in some silly static resources (globe.png, index.html)
|
|
- role: geoip-city-wsgi/proxy
|
|
website: geoip.fedoraproject.org
|
|
proxyurl: http://localhost:10029
|
|
|
|
- role: httpd/reverseproxy
|
|
website: src.fedoraproject.org
|
|
destname: git
|
|
proxyurl: http://localhost:10057
|
|
header_scheme: true
|
|
keephost: true
|
|
|
|
- role: httpd/reverseproxy
|
|
website: registry.fedoraproject.org
|
|
destname: registry-fedora
|
|
# proxyurl in this one is totally ignored, because Docker.
|
|
# (turns out it uses PATCH requests that Varnish cannot deal with)
|
|
proxyurl: "{{ varnish_url }}"
|
|
tags:
|
|
- registry
|
|
|
|
- role: httpd/reverseproxy
|
|
website: candidate-registry.fedoraproject.org
|
|
destname: candidate-registry
|
|
proxyurl: http://localhost:10054
|
|
|
|
- role: httpd/reverseproxy
|
|
website: retrace.fedoraproject.org
|
|
destname: retrace
|
|
proxyurl: http://localhost:10049
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: faf.fedoraproject.org
|
|
destname: faf
|
|
proxyurl: http://localhost:10050
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: apps.fedoraproject.org
|
|
destname: pps
|
|
remotepath: /pps
|
|
localpath: /pps
|
|
proxyurl: http://localhost:10051
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: koji.fedoraproject.org
|
|
destname: koji
|
|
keephost: true
|
|
balancer_name: koji
|
|
balancer_members:
|
|
- "koji01.{{ datacenter }}.fedoraproject.org"
|
|
- "koji02.{{ datacenter }}.fedoraproject.org"
|
|
http_not_https_yes_this_is_insecure_and_i_feel_bad: true
|
|
when: env == "production"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: koji.fedoraproject.org
|
|
destname: koji
|
|
keephost: true
|
|
balancer_name: koji
|
|
balancer_members:
|
|
- "koji01.stg.{{ datacenter }}.fedoraproject.org"
|
|
http_not_https_yes_this_is_insecure_and_i_feel_bad: true
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: kojipkgs.fedoraproject.org
|
|
destname: kojipkgs
|
|
proxyurl: http://localhost:10062
|
|
keephost: true
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "ocp{{ env_suffix }}.fedoraproject.org"
|
|
destname: ocp
|
|
balancer_name: ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- ocp.stg.fedoraproject.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "apps.ocp{{ env_suffix }}.fedoraproject.org"
|
|
destname: apps.ocp
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- apps.ocp.stg.fedoraproject.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "ocp{{ env_suffix }}.fedoraproject.org"
|
|
destname: ocp
|
|
balancer_name: ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- ocp.fedoraproject.org
|
|
when: env == "production"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "apps.ocp{{ env_suffix }}.fedoraproject.org"
|
|
destname: apps.ocp
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- apps.ocp.fedoraproject.org
|
|
when: env == "production"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "provision{{ env_suffix }}.fedoraproject.org"
|
|
destname: zezere
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- zezere
|
|
|
|
- role: httpd/reverseproxy
|
|
website: odcs.fedoraproject.org
|
|
destname: odcs
|
|
proxyurl: http://localhost:10066
|
|
tags:
|
|
- odcs
|
|
|
|
- role: httpd/reverseproxy
|
|
website: greenwave.fedoraproject.org
|
|
destname: greenwave
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: greenwave
|
|
|
|
- role: httpd/reverseproxy
|
|
website: waiverdb.fedoraproject.org
|
|
destname: waiverdb
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: waiverdb
|
|
|
|
- role: httpd/reverseproxy
|
|
website: elections.fedoraproject.org
|
|
destname: elections
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: elections
|
|
header_scheme: true
|
|
|
|
- role: httpd/reverseproxy
|
|
website: calendar.fedoraproject.org
|
|
destname: calendar
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
header_scheme: true
|
|
tags: calendar
|
|
|
|
- role: httpd/reverseproxy
|
|
website: mdapi.fedoraproject.org
|
|
destname: mdapi
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: mdapi
|
|
|
|
- role: httpd/reverseproxy
|
|
website: release-monitoring.org
|
|
destname: release-monitoring
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ocp_nodes}}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: release-montoring.org
|
|
when: env == "production"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: stg.release-monitoring.org
|
|
destname: stg.release-monitoring
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: release-montoring.org
|
|
when: env == "staging"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: whatcanidoforfedora.org
|
|
destname: whatcanidoforfedora
|
|
balancer_name: app-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: whatcanidoforfedora.org
|
|
|
|
- role: httpd/reverseproxy
|
|
website: testdays.fedoraproject.org
|
|
destname: testdays
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: testdays
|
|
|
|
- role: httpd/reverseproxy
|
|
website: packager-dashboard.fedoraproject.org
|
|
destname: packager-dashboard
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: packager-dashboard
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "languages{{ env_suffix }}.fedoraproject.org"
|
|
destname: languages
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- languages
|
|
|
|
- role: httpd/reverseproxy
|
|
website: debuginfod.fedoraproject.org
|
|
destname: debuginfod
|
|
# manage non-trivial reverse-proxy specs in template
|
|
proxyurl: http://debuginfod01:8002
|
|
proxyopts: "connectiontimeout=600 timeout=600 keepalive=on nocanon"
|
|
tags:
|
|
- debuginfod
|
|
|
|
- role: httpd/reverseproxy
|
|
website: packages.fedoraproject.org
|
|
destname: fedora-packages-static
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- fedora-packages-static
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "discourse2fedmsg{{ env_suffix }}.fedoraproject.org"
|
|
destname: discourse2fedmsg
|
|
balancer_name: app-os
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: discourse2fedmsg
|
|
|
|
- role: httpd/reverseproxy
|
|
website: ipsilon-project.org
|
|
destname: ipsilon-website
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags: ipsilon-website
|
|
|
|
- role: httpd/reverseproxy
|
|
website: awx.fedoraproject.org
|
|
destname: awx
|
|
balancer_name: app-ocp
|
|
balancer_members: "{{ ocp_nodes }}"
|
|
targettype: openshift
|
|
ocp4: true
|
|
keephost: true
|
|
tags:
|
|
- awx
|
|
when: env == "production"
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "openscanhub{{ env_suffix }}.fedoraproject.org"
|
|
destname: openscanhub
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags: openscanhub
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "kanban.qa{{ env_suffix }}.fedoraproject.org"
|
|
destname: kanban
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- kanban
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "fedoraplanet.org"
|
|
destname: fedoraplanet
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- fedoraplanet
|
|
|
|
- role: httpd/reverseproxy
|
|
website: "webhook{{ env_suffix }}.fedoraproject.org"
|
|
destname: webhook2fedmsg
|
|
balancer_name: apps-ocp
|
|
balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}"
|
|
targettype: openshift
|
|
keephost: true
|
|
ocp4: true
|
|
tags:
|
|
- webhook2fedmsg
|