infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Some improvements to kojipkgs vcl

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-04-05 21:49:10 +00:00
parent ee90934d26
commit 69c3e7174b
1 changed files with 10 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

46
roles/varnish/templates/kojipkgs.vcl.j2
View file

@ -40,28 +40,11 @@ backend local-apache {
.threshold = 3; } .threshold = 3; }
} }
sub vcl_synth {
set resp.http.Content-Type = "text/html; charset=utf-8";
set resp.http.Retry-After = "5";
synthetic( {"<!DOCTYPE html>
<html>
<head>
<title>"} + resp.status + " " + resp.reason + {"</title>
</head>
<body>
<h1>Error "} + resp.status + " " + resp.reason + {"</h1>
<p>"} + resp.reason + {"</p>
<h3>Guru Meditation:</h3>
<p>XID: "} + req.xid + {"</p>
<hr>
<p>Varnish cache server on {{ inventory_hostname }}</p>
</body>
</html>
"} );
return (deliver);
}
sub vcl_recv { sub vcl_recv {
set req.backend_hint = apache-local;
unset req.http.cookie;
set req.http.clear-cookies = "yes";
if (req.method == "PURGE") { if (req.method == "PURGE") {
if (!client.ip ~ purge) { if (!client.ip ~ purge) {
return (synth(405, "Not allowed")); return (synth(405, "Not allowed"));
@ -69,26 +52,17 @@ sub vcl_recv {
return(purge); return(purge);
} }
if (req.url ~ "^/repo/") { if (req.url ~ "^/repo/" && !(client.ip ~ repoallowed)) {
if (client.ip ~ repoallowed) { return(synth(403, "Access denied."));
set req.backend_hint = apache-local;
unset req.http.cookie;
set req.http.clear-cookies = "yes";
}
else {
return(synth(403, "Access denied."));
}
} }
if (req.url ~ "^/mash/") { if (req.url ~ "^/mash/") {
set req.backend_hint = apache-local;
return (pipe); return (pipe);
} }
if (req.url ~ "^/compose/") { if (req.url ~ "^/compose/") {
set req.backend_hint = apache-local;
return (pipe); return (pipe);
} }
# if (req.url ~ "h264") {
# deny the open264 rpms and such return (pipe);
# if (req.url ~ openh264) }
# return (hash);
} }