On Sat, Sep 22, 2018 at 01:03:29PM -0700, Kevin Fenzi wrote:
> I had to make a few more changes to get lists.pagure.io working.
>
> I haven't pushed these to all the proxies yet, will wait until I get
> +1's or revert.
>
> commit 2359610fd4298fd9e54fbb49bdf809ff387639e5
> Author: Kevin Fenzi <kevin@xxxxxxxxx>
> Date: Sat Sep 22 20:01:06 2018 +0000
>
> add lists.pagure.io to varnish config
>
> diff --git a/roles/varnish/templates/proxies.vcl.j2
> b/roles/varnish/templates/proxies.vcl.j2
> index 121fbec..5150c36 100644
> --- a/roles/varnish/templates/proxies.vcl.j2
> +++ b/roles/varnish/templates/proxies.vcl.j2
> @@ -282,7 +282,7 @@ sub vcl_recv {
> }
> }
> }
> - if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" ||
> req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" ||
> req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" ||
> req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" ) {
> + if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" ||
> req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" ||
> req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" ||
> req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" ||
> req.http.X-Forwarded-Server ~ "^lists.pagure.io" ) {
> set req.backend_hint = mailman;
> }
> if (req.http.X-Forwarded-Server ~ "^apps.fedoraproject.org" ||
> req.http.X-Forwarded-Server ~ "^apps.stg.fedoraproject.org") {
>
> and
>
> commit 3363db41b29f017d1365a91feec102d0b2a5ce7f
> Author: Kevin Fenzi <kevin@xxxxxxxxx>
> Date: Sat Sep 22 19:36:58 2018 +0000
>
> need certbot here and it will use the right names
>
> diff --git a/playbooks/include/proxies-websites.yml
> b/playbooks/include/proxies-websites.yml
> index 65597cd..d76c963 100644
> --- a/playbooks/include/proxies-websites.yml
> +++ b/playbooks/include/proxies-websites.yml
> @@ -904,8 +904,9 @@
> - role: httpd/website
> site_name: lists.pagure.io
> sslonly: true
> - cert_name: lists.pagure.io.cert
> - SSLCertificateChainFile: lists.pagure.io.intermediate.cert
> + certbot: true
> + tags:
> + - lists.pagure.io
>
> # fedorahosted is retired. We have the site here so we can redirect it.
>
+1 for me, thanks :)
Pierre
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
