This is one part of a change to try and make pki.fedoraproject.org not
spit out an ugly "you are going to a bad site" warning. The other
change is taking out the cname and making pki go to wildcard.
diff --git a/playbooks/include/proxies-redirects.yml
b/playbooks/include/proxies-redirects.yml
index 21b1583..919d911 100644
--- a/playbooks/include/proxies-redirects.yml
+++ b/playbooks/include/proxies-redirects.yml
@@ -539,6 +539,11 @@
target: https://fedorahosted.org/k12linux/
+ - role: httpd/redirect
+ shortname: dogtagpki
+ website: pki.fedoraproject.org
+ target: http://dogtagpki.org/
+
# Cloudy bits
- role: httpd/redirect
shortname: cloud-front-page
diff --git a/playbooks/include/proxies-websites.yml
b/playbooks/include/proxies-websites.yml
index 132bea5..9c0e173 100644
--- a/playbooks/include/proxies-websites.yml
+++ b/playbooks/include/proxies-websites.yml
@@ -190,6 +190,11 @@
cert_name: "{{wildcard_cert_name}}"
- role: httpd/website
+ site_name: pki.fedoraproject.org
+ sslonly: true
+ cert_name: "{{wildcard_cert_name}}"
+
+ - role: httpd/website
site_name: spins.fedoraproject.org
server_aliases:
- spins.stg.fedoraproject.org
--
Stephen J Smoogen.
_______________________________________________
infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
