WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

pagure: fix order of operations to not block after proxying (which will not work)

Browse Source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2025-12-08 10:00:54 -08:00
parent b88b92a719
commit 8fbcbac96d
1 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
roles/pagure/templates/0_pagure.conf
View File

@@ -161,22 +161,6 @@ MaxConnectionsPerChild 1000
{% endif %}
</Location>
# proxy all requests to anubis after ssl termination
RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR}
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set "X-Http-Version" "%{SERVER_PROTOCOL}s"
# Pagure uses X-Scheme, not X-Forwarded-Proto, see pagure/proxy.py
RequestHeader set X-Scheme "https"
ProxyPreserveHost On
ProxyRequests Off
ProxyVia Off
ProxyPass / http://[::1]:8923/
ProxyPassReverse / http://[::1]:8923/
# Drop distributed web hits
# RewriteEngine On
# RewriteCond %{REQUEST_URI} ^/linux-forgeperf.*$
@@ -193,6 +177,22 @@ MaxConnectionsPerChild 1000
RewriteCond %{HTTP_USER_AGENT} "(Bytespider|ClaudeBot|Amazonbot|YandexBot|ChatGLM-Spider|GPTBot|Barkrowler|YisouSpider|MJ12bot)" [NC]
RewriteRule .* - [F,L]
# proxy all requests to anubis after ssl termination
RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR}
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set "X-Http-Version" "%{SERVER_PROTOCOL}s"
# Pagure uses X-Scheme, not X-Forwarded-Proto, see pagure/proxy.py
RequestHeader set X-Scheme "https"
ProxyPreserveHost On
ProxyRequests Off
ProxyVia Off
ProxyPass / http://[::1]:8923/
ProxyPassReverse / http://[::1]:8923/
<Location /apache-status>
SetHandler server-status
<RequireAny>