playbooks/groups/secondary.yml

@@ -47,6 +47,7 @@
     vars:
     - site_name: secondary.fedoraproject.org
     - cert_name: "{{wildcard_cert_name}}"
+    - sslonly: true
     server_aliases:
     - archive.fedoraproject.org
     - archives.fedoraproject.org

roles/download/templates/httpd/dl.fedoraproject.org.conf

@@ -4,6 +4,12 @@
   ServerAdmin webmaster@fedoraproject.org
   TraceEnable Off
 
+  #
+  # redirect everyone to use https
+  #
+  RewriteEngine on
+  RewriteCond %{SERVER_PORT} !^443$
+  RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [L,R]
 
   Include "conf.d/dl.fedoraproject.org/*.conf"
 </VirtualHost>