Dzahn has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/389457 )
Change subject: phabricator: drop ferm rule to open port 443
......................................................................
phabricator: drop ferm rule to open port 443
Phabricator is behind misc-web. This means we only
talk http betweeen varnish and Apache on phab servers.
Port 443 does not need to be open on phab servers.
(unless we want to be https-only on the backends in the future)
Change-Id: I7bc34e56d54d0fe80bee56899f430f93dec51787
---
M modules/profile/manifests/phabricator/main.pp
1 file changed, 0 insertions(+), 6 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/57/389457/1
diff --git a/modules/profile/manifests/phabricator/main.pp
b/modules/profile/manifests/phabricator/main.pp
index 1a0bede..423654c 100644
--- a/modules/profile/manifests/phabricator/main.pp
+++ b/modules/profile/manifests/phabricator/main.pp
@@ -269,12 +269,6 @@
port => '80',
}
- ferm::service { 'phabmain_https':
- ensure => $ferm_ensure,
- proto => 'tcp',
- port => '443',
- }
-
# receive mail from mail smarthosts
ferm::service { 'phabmain-smtp':
ensure => $ferm_ensure,
--
To view, visit https://gerrit.wikimedia.org/r/389457
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I7bc34e56d54d0fe80bee56899f430f93dec51787
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
