John F. Lewis has uploaded a new change for review.
https://gerrit.wikimedia.org/r/181984
Change subject: planets: remove SSL stanza
......................................................................
planets: remove SSL stanza
Change-Id: Ic51c1de8c6a031b2775278322159530b83e9e7e1
---
M modules/planet/templates/apache/planet-language.erb
1 file changed, 3 insertions(+), 15 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/84/181984/1
diff --git a/modules/planet/templates/apache/planet-language.erb
b/modules/planet/templates/apache/planet-language.erb
index d51935c..a619a32 100644
--- a/modules/planet/templates/apache/planet-language.erb
+++ b/modules/planet/templates/apache/planet-language.erb
@@ -5,23 +5,11 @@
ServerName <%= @name %>.planet.<%=
scope.lookupvar('planet::planet_domain_name') %>
php_admin_flag engine off
- <Directory /var/www/planet/<%= @name %>>
- Allow from all
- </Directory>
-</VirtualHost>
-
-<VirtualHost *:443>
- DocumentRoot /var/www/planet/<%= @name %>
-
- ServerName <%= @name %>.planet.<%=
scope.lookupvar('planet::planet_domain_name') %>
- SSLEngine on
- SSLCertificateFile /etc/ssl/certs/star.planet.<%=
scope.lookupvar('planet::planet_domain_name') %>.pem
- SSLCertificateChainFile /etc/ssl/certs/star.planet.<%=
scope.lookupvar('planet::planet_domain_name') %>.chained.pem
- SSLCertificateKeyFile /etc/ssl/private/star.planet.<%=
scope.lookupvar('planet::planet_domain_name') %>.key
- <%= @ssl_settings.join("\n") %>
+ RewriteEngine On
+ RewriteCond %{HTTP:X-Forwarded-Proto} !https
+ RewriteRule ^/(.*)$ https://%{HTTP_HOST}%{REQUEST_URI}
[R=301,E=ProtoRedirect]
<Directory /var/www/planet/<%= @name %>>
Allow from all
</Directory>
-
</VirtualHost>
--
To view, visit https://gerrit.wikimedia.org/r/181984
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic51c1de8c6a031b2775278322159530b83e9e7e1
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: John F. Lewis <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
