infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
19883 commits 9 branches 0 tags 110 MiB
Commit graph

60 commits

Author SHA1 Message Date
Patrick Uiterwijk
e680b96895 On proxies, varnish is on port 6081 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-10-08 22:18:37 +00:00
Patrick Uiterwijk
73bd8b0db0 Add a default varnish storage config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-10-08 22:13:39 +00:00
Stephen Smoogen
2734bbec05 move everything in staging except koji/proxy/pgdbr/pkgs to 10.5.128 2017-09-28 19:51:57 +00:00
Stephen Smoogen
3ce4b872d3 move wiki 2017-08-22 23:24:07 +00:00
Dennis Gilmore
96567f1db3 expose via http the shiny new location for mass rebuild failures 
Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
 2017-07-25 21:39:21 +00:00
Kevin Fenzi
959db4c149 reduce varnish cache to allow memory for apache processes 2017-06-28 21:49:30 +00:00
Kevin Fenzi
7aca0c8328 up the timeouts on kojipkgs varnish to hopefully make up for slow storage issues 2017-05-31 14:57:22 +00:00
Kevin Fenzi
c749b92cb7 we just need to use kojipkgs directly because varnish does not do https backends 2017-04-27 21:55:45 +00:00
Kevin Fenzi
579f598dc1 add libsemanage-python here in case it was not installed 2017-04-27 20:46:32 +00:00
Kevin Fenzi
f839d0404f we need == here 2017-04-27 20:35:01 +00:00
Kevin Fenzi
9bc9a4065d add varnish config for buildvm-s390x-07.s390.fedoraproject.org which needs to cache packages for s390x builders in bos 2017-04-27 20:25:26 +00:00
Kevin Fenzi
70a62b3cdd up this varnish limit now 2017-04-07 20:01:18 +00:00
Patrick Uiterwijk
483c774e5c We need to typecast this. String != IP 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-06 00:17:28 +00:00
Patrick Uiterwijk
3c12da859e Normalize the X-Forwarded-For header 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-05 23:57:30 +00:00
Patrick Uiterwijk
0a7e1e0c03 Client.ip is unusable due to proxies, look at forwarded-for 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-05 23:51:12 +00:00
Kevin Fenzi
47dfdb7792 we are not using these acls anymore 2017-04-05 22:39:39 +00:00
Kevin Fenzi
9b0ebffd55 cannot use a dash in a backend name 2017-04-05 22:13:52 +00:00
Kevin Fenzi
24d4dea8fb apparently varnish 5.0 still uses vcl 4.0 2017-04-05 22:12:42 +00:00
Kevin Fenzi
7686e28971 make varnish role not care about yum 2017-04-05 22:08:05 +00:00
Patrick Uiterwijk
69c3e7174b Some improvements to kojipkgs vcl 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-05 21:49:10 +00:00
Kevin Fenzi
ee90934d26 some default settings for varnish on fedora 2017-04-05 19:15:14 +00:00
Kevin Fenzi
eb787777b0 make varnish role more general and add in config for a new varnish on kojipkgs 2017-04-05 19:07:01 +00:00
Kevin Fenzi
b5c4af2f26 add modernpaste02 to haproxy and varnish to cache paste static stuff 2017-03-04 19:32:54 +00:00
Patrick Uiterwijk
2969cf485e Do not cache registry blobs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-09 20:58:28 +00:00
Patrick Uiterwijk
a7d6b0052f Put staging stable registry behind varnish and redirect to external registry 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-01-14 18:35:45 +00:00
Kevin Fenzi
ef951a49fa Adjust mailman wsgi and proxy timeouts for mailman 2016-05-30 20:06:46 +00:00
Kevin Fenzi
a6b9550d5f Set the first byte timeout to 2min here. 2016-05-18 23:13:27 +00:00
Kevin Fenzi
3414da9d17 add lists.fedorahosted.org into the mix 2016-05-18 20:05:24 +00:00
Kevin Fenzi
6f5b8f1017 Also add lists.stg here. 2016-05-18 18:15:56 +00:00
Kevin Fenzi
71f5bd9bb5 Setup varnish to handle lists.fedoraproject.org. 2016-05-18 17:39:43 +00:00
Kevin Fenzi
e802d4d1ea Also fix varnish to understand qa.stg 2016-04-26 22:30:53 +00:00
Patrick Uiterwijk
1a3df38b19 varnish: drop response cookies if we dropped request cookies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-04-11 14:45:09 +00:00
Michael Scherer
0dccd89858 Fix edafebe7dc, varnish file was missing 2016-04-04 20:44:54 +00:00
Patrick Uiterwijk
ee4b5edc64 Merge varnish patch to production 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-31 11:40:21 +00:00
Patrick Uiterwijk
e094e36ffd with_items is not actually used here 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-10 14:16:15 +00:00
Patrick Uiterwijk
6f915a15a7 Deploy a testing haproxy vcl to stg (ticket#3294C30) 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-10 14:13:42 +00:00
Patrick Uiterwijk
f8767fae87 Be a bit more verbose on varnish cache clear 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-05 15:06:11 +00:00
Patrick Uiterwijk
53b20e51da Merge patch to have nuancier use Varnish (#3294C14,17) 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-12-01 19:56:11 +00:00
Patrick Uiterwijk
6d4eee6c92 Use the other one instead 2015-06-17 07:21:16 +00:00
Patrick Uiterwijk
21a5e0b019 Fix wrong name 2015-06-17 07:10:32 +00:00
Patrick Uiterwijk
46d2abf3f7 Show proxy name on varnish errors 2015-06-17 07:07:24 +00:00
Adrian Reber
408935f826 Increase cache time for mirrorlist 
The mirrorlist which can be viewed in the browser used to be generated
once or twice per day with MM1. This is listed is now cached in varnish
but only for two minutes. This patch increases the cache time to 6 hours.
Also increase cache time for the static mirrormanager content.
 2015-06-12 16:09:14 +00:00
Patrick Uiterwijk
b236fdfe29 Remove the unused mirrormanager2 backend from varnish 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-06-12 07:59:19 +00:00
Adrian Reber
9a90bb869f Re-enable /mirrormanager without slash at the end 
The mirrormanager application and the publiclist re-write used to work
without a slash at the end. Re-enable /mirrormanager without a slash at
the end of the URL.
 2015-05-31 09:27:54 +00:00
Patrick Uiterwijk
77668348c0 Use varnish for mirrormanager2 publiclist 
This change makes us use varnish for the mm2 publiclist
and configures varnish to ignore cookies on the /mirrors
subpath.
The cookie ignore is only valid after the master-noauth
Pull Request #80 is merged, as that hides all authed
information from the publiclist pages.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-05-20 13:35:02 +00:00
Patrick Uiterwijk
f4cce884f3 Fix koschei url 2015-05-07 10:27:25 +00:00
Mikolaj Izdebski
7d480abcbf Add proxy configuration for Koschei staging 2015-05-07 09:25:27 +00:00
Patrick Uiterwijk
621c373b17 Fix varnish PURGE requests 
These are used by the wiki to purge updated pages

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-03-04 21:31:18 +00:00
Kevin Fenzi
546ad2148a Enable varnish to start on boot also 2015-01-28 01:52:50 +00:00
Kevin Fenzi
caa8c29611 Add varnishd sebool 2015-01-26 22:55:28 +00:00