Fix websockets for prod openshift

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>

playbooks/include/proxies-websites.yml

@@ -576,6 +576,9 @@
     site_name: os.fedoraproject.org
     sslonly: true
     cert_name: "{{wildcard_cert_name}}"
+    # The Connection and Upgrade headers don't work for h2
+    # So non-h2 is needed to fix websockets.
+    use_h2: false
     tags:
     - os.fedoraproject.org
 
@@ -585,6 +588,9 @@
     sslonly: true
     cert_name: "{{os_wildcard_cert_name}}"
     SSLCertificateChainFile: "{{os_wildcard_int_file}}"
+    # The Connection and Upgrade headers don't work for h2
+    # So non-h2 is needed to fix websockets.
+    use_h2: false
     tags:
     - app.os.fedoraproject.org
 

roles/httpd/reverseproxy/templates/reversepassproxy.conf

@@ -19,7 +19,6 @@ ProxyPreserveHost On
 
 {% if balancer_name is defined %}
 SSLProxyEngine On
-{% if env == "staging" %}
 
 <Proxy "balancer://{{balancer_name}}-websocket">
   {% for member in balancer_members %}
@@ -32,7 +31,6 @@ RewriteCond %{HTTP:Upgrade} ^WebSocket$ [NC]
 RewriteCond %{HTTP:Connection} ^Upgrade$ [NC]
 RewriteRule .* "balancer://{{ balancer_name }}-websocket%{REQUEST_URI}" [P]
 
-{% endif %}
 <Proxy "balancer://{{balancer_name}}">
   {% for member in balancer_members %}
     BalancerMember "https://{{ member }}"