ansible/roles/koji_hub/templates/kojiweb.conf.j2
Patrick Uiterwijk 6022caa4d6 Configure keytab
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-03 10:01:48 +00:00

106 lines
3.3 KiB
Django/Jinja

RewriteEngine On
RewriteRule ^/$ /koji/ [R,L]
KeepAlive On
#We use wsgi by default
Alias /koji "/usr/share/koji-web/scripts/wsgi_publisher.py"
#(configuration goes in /etc/kojiweb/web.conf)
Alias /robots.txt /var/www/html/robots.txt
<Directory "/var/www/html">
Options None
AllowOverride None
Require all granted
</Directory>
<Directory "/usr/share/koji-web/scripts/">
Options ExecCGI
SetHandler wsgi-script
Require all granted
</Directory>
<Location /koji/login>
AuthType GSSAPI
GssapiSSLonly On
AuthName "GSSAPI Single Sign On Login"
GssapiCredStore keytab:/etc/krb5.HTTP_koji{{env_suffix}}.fedoraproject.org.keytab
Require valid-user
</Location>
Alias /koji-static/ "/usr/share/koji-web/static/"
<Directory "/usr/share/koji-web/static/">
Options None
AllowOverride None
Require all granted
</Directory>
Alias /repos "/mnt/koji/repos/"
<Directory "/mnt/koji/repos/">
Options Indexes FollowSymLinks
Require all granted
</Directory>
Alias /scratch "/mnt/koji/scratch/"
<Directory "/mnt/koji/scratch/">
Options Indexes
Require all granted
</Directory>
Alias /work "/mnt/koji/work/"
<Directory "/mnt/koji/work/">
Options Indexes FollowSymLinks
Require all granted
</Directory>
Alias /buildgroups "/mnt/koji/buildgroups/"
<Directory "/mnt/koji/buildgroups/">
Options Indexes FollowSymLinks
Require all granted
</Directory>
{% if inventory_hostname.startswith('koji') and env == "production" %}
# use redirects for compose and packages locations
RewriteRule ^/compose(.+) https://kojipkgs.fedoraproject.org/compose$1 [R=301,L]
RewriteRule ^/packages(.+) https://kojipkgs.fedoraproject.org/packages$1 [R=301,L]
{% else %}
Alias /compose "/mnt/koji/compose/"
<Directory "/mnt/koji/compose/">
Options Indexes FollowSymLinks
Require all granted
</Directory>
Alias /packages "/mnt/koji/packages/"
<Directory "/mnt/koji/packages/">
Options Indexes FollowSymLinks
Require all granted
</Directory>
# use redirects for compose and packages locations to be consistent with primary hub
{% if inventory_hostname == 'arm-koji01.qa.fedoraproject.org' %}
# Disable these for now since there's a cert issue and no virtual host definition to redirect to
# We need to either add a apache virthost and a proper cert or a seperate vm for packages.
#RewriteRule ^/compose(.+) http://arm.koji.fedoraproject.org/compose$1 [R=301,L]
#RewriteRule ^/packages(.+) http://arm.koji.fedoraproject.org/packages$1 [R=301,L]
{% endif %}
{% if inventory_hostname == 'ppc-koji01.ppc.fedoraproject.org' %}
# Disable these for now since there's a cert issue and no virtual host definition to redirect to
# We need to either add a apache virthost and a proper cert or a seperate vm for packages.
#RewriteRule ^/compose(.+) http://ppc.koji.fedoraproject.org/compose$1 [R=301,L]
#RewriteRule ^/packages(.+) http://ppc.koji.fedoraproject.org/packages$1 [R=301,L]
{% endif %}
{% if inventory_hostname == 's390-koji01.qa.fedoraproject.org' %}
# Disable these for now since there's a cert issue and no virtual host definition to redirect to
# We need to either add a apache virthost and a proper cert or a seperate vm for packages.
#RewriteRule ^/compose(.+) https://s390pkgs.fedoraproject.org/compose$1 [R=301,L]
#RewriteRule ^/packages(.+) https://s390pkgs.fedoraproject.org/packages$1 [R=301,L]
{% endif %}
{% endif %}