Commit Graph

1169 Commits

Author SHA1 Message Date
Kevin Fenzi
5091fd4373 ocp-rdu3: retire this host/proxy/cert now that we are moved
There's no need to keep ocp-rdu3 around anymore, we only used
it when we were moving datacenters last year.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 10:35:10 -08:00
James Antill
13d2c38ad0 proxies: Add stg.fp.o tags for wildcard cert changes.
Signed-off-by: James Antill <james@and.org>
2026-01-29 16:12:58 -05:00
James Antill
0dd9a4f2c4 proxies: Renewed stg.fp.o wildcard cert
Signed-off-by: James Antill <james@fedoraproject.org>
2026-01-29 15:30:33 -05:00
Justin Wheeler
5d6a775e51 🔧 proxies-redirects: Write simpler regex for redirect rules
This commit standardizes the regex redirection used for all Fedora Docs
sites where a language code is involved in the original site and the
redirected site. This new regex pattern matches anything between the
slashes where the language code for the Fedora Docs site appears. This
allows for greater flexibility of anything that may appear now or in the
future for the language codes, including some that use two letters and
others that use four letters.

It makes the redirect consistent across all Fedora Docs redirects, in
the general aim of promoting a common best practice for Fedora Docs
redirects for old site names to new ones.

CC: @pbokoc @pboy

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-27 18:01:42 +00:00
Justin Wheeler
7d325cb3ac 🔧 proxies-redirects: docs.fp.o, s/program_management/operations/
This commit adds a new redirect rule for the migration of the Fedora
Operations Architect documentation, or the Fedora Program Management
docs, into their new home as Fedora Program Operations docs. This will
fit in with the new Forgejo home for these docs, and help give a better
home and identity to the efforts around program management for Fedora,
like the release schedule and other core parts of the release program
and schedule.

I also added a `docs` tag since it is a Fedora Docs-specific redirect.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-27 17:31:52 +00:00
Greg Sutcliffe
00e4eb6b3d Proxies: Fixes #13051 - remove old cert management for getfedora
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-22 22:39:24 +00:00
Adam Williamson
d76afa032b Move the qa-landingpage reverse proxy config removal
...we already have a better place to do this, it turns out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:44:01 -08:00
Adam Williamson
a994e1031a Gah, drop the when as well
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:39 -08:00
Adam Williamson
c2f25426e8 Try and fix the qa redirect
ugh, it's hard to understand this stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:16 -08:00
Adam Williamson
2a5465404f proxies-redirects: add a tag for the qa redirects
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:36:47 -08:00
Adam Williamson
382f947eff Drop qa-landingpage, clean up blockerbugs config a bit
Per https://pagure.io/fedora-qa/issue/859 we want to drop the QA
landing page at qa.fedoraproject.org. This should turn it back
into a redirect to the wiki page. We also drop the certificate
for qa.fp.o (since blockerbugs uses the wildcard certificate
anyway) and remove a duplicate reverseproxy entry for blockerbugs
(we had two otherwise-identical entries that were restricted to
prod and stg with `when` conditions).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:29:13 -08:00
Gregory Bartholomew
d0fe436ca2 proxies-redirects: fix extra trailing slash on getfedora.org redirect
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-19 22:28:30 +00:00
Hristo Marinov
b6538653e2 proxies-redirects.yml: Atomic Desktops Docs Fix
See https://pagure.io/fedora-infra/ansible/pull-request/3035
2026-01-15 23:26:10 +00:00
Gregory Bartholomew
0535d64f12 proxies-redirects: point fedoracommunity.org at the fedora wiki
Since there are still a handful of active community sites and they are
documented in the Fedora Wiki, point fedoracommunity.org at the Fedora
Wiki so they can be found.

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-15 23:22:21 +00:00
Hristo Marinov
b07c973305 proxies-redirects.yml: Atomic Desktops docs: Fix regex 2026-01-14 21:23:38 +00:00
Hristo Marinov
10bfb9b3ba proxies-redirects.yml: Atomic Desktops docs
Redirects for individual Atomic Desktops docs URLs to to the unified single one
2026-01-14 21:23:38 +00:00
Gregory Bartholomew
34b9084d52 websites: Revive the Fedora Community website redirect for Brasil
There is a request to fix the link for the Fedora Community Brasil site
that has been open for over a year, but it was filed in the old Pagure
repo, so I hadn't noticed it until now.

https://pagure.io/fedora-websites/pull-request/1246

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-13 23:52:41 +00:00
Michal Konecny
fd247ae355 [proxies] Remove the reverse proxy for languages
This seems to conflict with redirect config. So let's remove it.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-05 15:37:24 +01:00
Michal Konecny
540ec86d79 [proxies] Add redirect for languages.fp.o
See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-05 15:06:18 +01:00
Kevin Fenzi
f5e8dd2a9a proxies: move docs behind anubis too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-11 10:46:49 -08:00
Gregory Bartholomew
bfcd857278 retire legacy fedora websites repo phase 2
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-12-04 20:48:05 +00:00
James Antill
cac4747885 proxies: Renewed id.stg.fp.o / apps.ocp.fp.o wildcard certs
Signed-off-by: James Antill <james@and.org>
2025-11-21 15:43:34 -05:00
Kevin Fenzi
90e279dee1 src: move src behind proxy varnish
Hopefully this will help the high ai scraper load and not break
anything.

In the event we need to revert, simply change the proxyurl back to the
haproxy endpoint instead of the varnish endpoint.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 10:52:07 -08:00
Kevin Fenzi
46f9bcb797 src: try putting src behind varnish in staging.
The scrapers are now downloading js and css files at a really high rate,
and thats causing a lot of load on pkgs01.

So, lets see if we can just move src behind the varnish on proxies.
This should allow it to return those pretty static files a lot
faster and not cause load on the backend.

However, putting varnish in the path might mess up something, so
lets just test in staging first.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 10:05:33 -08:00
Gregory Bartholomew
c509e526fb retire legacy fedora websites repo phase 1
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-11-14 18:31:40 +00:00
Ryan Lerch
1f32b08fcd change attachements redirect regex to match namespaced projcets on pagure
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-12 10:29:36 +10:00
Akashdeep Dhar
051f01e35f forge: proxy Pagure attachment URLs for migrated content
Add Apache reverse proxy configuration to handle Pagure-style attachment
URLs on Fedora Forge. When users paste migrated issue comments containing
attachment links (/<project>/issue/raw/files/<hash>-<filename>), the proxy
transparently fetches them from pagure.io, ensuring attachments display
correctly after migration from Pagure to Forgejo.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-11-12 00:26:25 +00:00
Shaun McCance
8992d7e0b1 Redirect flocktofedora to 2026 page 2025-11-05 19:09:12 +00:00
Michal Konecny
6337df3098 [proxies] Add id.stg.fp.o wildcard cert
There was a wildcard cert for id.stg.fedoraproject.org missing. It's now
available so let's use it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-10-22 11:23:04 +02:00
Kevin Fenzi
146229ae13 proxies: coreos uses env_suffix for website name
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 16:38:33 -07:00
Kevin Fenzi
d8ecaa06dd proxies: jenkins and testdays are both prod only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 16:17:57 -07:00
Kevin Fenzi
535eb3dd1b proxies: drop ipsilon-project from reverproxy too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:54:00 -07:00
Kevin Fenzi
a82dfa1229 proxies: lists.pagure.io is prod only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:33:53 -07:00
Kevin Fenzi
27f007c333 proxies: getfedora.org and fedoracommunity.org only get setup in prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:18:35 -07:00
Kevin Fenzi
867903b998 Revert "proxies / src: switch anubis back off to allow for rust crate building ( infra 12812 )"
This reverts commit 2cdbaa0b28.
2025-10-14 20:04:21 -07:00
Kevin Fenzi
2cdbaa0b28 proxies / src: switch anubis back off to allow for rust crate building ( infra 12812 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-14 15:47:56 -07:00
Kevin Fenzi
d861b438cc proxies / src: enable anubis to prevent outage
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-12 17:39:41 -07:00
Kevin Fenzi
a8628c6934 src / staging: re-enable anubis on src.stg
We want to reenable this so we can test solutions to
https://pagure.io/fedora-infrastructure/issue/12812

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-10 10:45:24 -07:00
Kevin Fenzi
8925ccf7e2 proxies / redirects: do not try and setup redirects for community sites in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-26 08:40:27 -07:00
Kevin Fenzi
3c61b1ecab proxies / websites / getfedora.org: switch this to use a letsencrypt cert
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-25 15:24:02 -07:00
Kevin Fenzi
4d49d0841c ipsilon-website: disable for now
This site is still pointing to iad2, and I can't find anyone who can
point it to rdu3, so I think it's going to just have to go away.

Disable for now, but if no one appears, we should delete it entirely,
as well as the openshift app that serves this website.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-25 15:07:30 -07:00
Kevin Fenzi
775d046d8f proxies / download: switch to new 2025 wildcard fedoraproject.org cert
Switch from the 2024 one that expires in a bit to a new shiny one that
doesn't expire until next year.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-25 14:50:49 -07:00
Gregory Bartholomew
2c70b3b8d8 alt: redirect home page to the new fedoraproject.org/misc page (version 2)
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-09-25 21:18:10 +00:00
Gregory Bartholomew
1531796df7 redirect fedoracommunity.org to fedoraproject.org
also redirect {fr,it,tw}.fedoracommunity.org to their respective sites

closes https://pagure.io/fedora-websites/issue/936

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-09-25 21:11:43 +00:00
Kevin Fenzi
1095db38bf proxies / badges: drop anubis here for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-24 18:11:40 -07:00
Kevin Fenzi
dc5f7ae379 proxies: disable anubis on internal proxies
This should not have caused any issues, but I want to rule out it being
related to the 503 errors we have been seeing.

it also doesn't do any good to have enabled here as these proxies are
internal only and never would have browsers or crawlers hitting them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-24 11:07:10 -07:00
Kevin Fenzi
2b1ac6a2df proxies / staging: switch to new wildcard cert for apps.ocp.stg.fedoraproject.org
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-22 13:48:32 -07:00
Kevin Fenzi
e6f3b12d4e anubis: switch src off to test something
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-21 12:47:54 -07:00
Kevin Fenzi
4e569dd769 anubis: enable for badges
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-19 14:09:18 -07:00
Kevin Fenzi
aad624afe1 anubis: enable for packager-dashboard
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-19 13:49:57 -07:00