infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Try to proxy keys.fpo to pool.sks-keyservers.net

Browse source
This commit is contained in:
Nick Bebout 2019-08-08 08:51:02 +00:00 • committed by Pierre-Yves Chibon
parent ee273f2a58
commit 8038f865c8
3 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
playbooks/include/proxies-reverseproxy.yml
View file

@ -50,6 +50,12 @@
remotepath: / remotepath: /
proxyurl: http://noc01.phx2.fedoraproject.org proxyurl: http://noc01.phx2.fedoraproject.org
- role: httpd/reverseproxy
website: keys.fedoraproject.org
destname: keys
remotepath: /
proxyurl: http://pool.sks-keyservers.net
- role: httpd/reverseproxy - role: httpd/reverseproxy
website: lists.fedoraproject.org website: lists.fedoraproject.org
destname: mailman3 destname: mailman3

6
playbooks/include/proxies-websites.yml
View file

@ -392,6 +392,12 @@
sslonly: true sslonly: true
cert_name: "{{wildcard_cert_name}}" cert_name: "{{wildcard_cert_name}}"
- role: httpd/website
site_name: keys.fedoraproject.org
server_aliases: [keys.fedoraproject.org]
sslonly: true
cert_name: "{{wildcard_cert_name}}"
- role: httpd/website - role: httpd/website
site_name: people.fedoraproject.org site_name: people.fedoraproject.org
server_aliases: [people.fedoraproject.org] server_aliases: [people.fedoraproject.org]

4
roles/keyserver/tasks/main.yml
View file

@ -76,7 +76,7 @@
state=present state=present
- name: Set sks-db to run on boot - name: Set sks-db to run on boot
service: name=sks-db enabled=yes service: name=sks-db enabled=no
ignore_errors: true ignore_errors: true
notify: notify:
- restart sks-db - restart sks-db
@ -84,7 +84,7 @@
- service - service
- name: Set sks-recon to run on boot - name: Set sks-recon to run on boot
service: name=sks-recon enabled=yes service: name=sks-recon enabled=no
ignore_errors: true ignore_errors: true
notify: notify:
- restart sks-recon - restart sks-recon