41 Commits

Author	SHA1	Message	Date
clime	6ea07e8871	libravatar: keep http host for 80->443 redirection so that HSTS is recorded for toplevel domain	2019-02-21 14:57:05 +01:00
clime	36b2550810	libravatar: specify HSTS with IncludeSubDomains	2019-02-21 14:37:27 +01:00
clime	3dbed1b7d1	libravatar: do not use server_alias directive for the main virthost... ... ...and move redirection virthost below the main virthost	2019-02-18 16:10:38 +01:00
clime	aad071a358	libravatar: change order of virthosts due to priority	2019-02-18 16:01:58 +01:00
clime	904a5d5192	libravatar: wsgi daemon definitions are not scoped by virthost	2019-02-18 14:24:56 +01:00
clime	e75f1366cc	libravatar: we need a separate ssl configuration for seccdn.libravatar.org	2019-02-18 14:14:24 +01:00
clime	18d5117890	libravatar: fix httpd config to also accept cdn.libravatar.org and seccdn.libravatar.org	2019-02-18 13:03:03 +01:00
clime	da673ca4d3	libravatar: remove unneded welcome.conf replacement	2019-02-17 17:37:38 +01:00
clime	c29b40f141	libravatar: preparation for libravatar.org switch	2019-02-17 15:06:42 +01:00
clime	37802e5189	libravatar: update httpd config	2019-02-05 17:55:11 +01:00
clime	0317c50c03	libravatar: do not relay messages to bastion	2019-02-05 17:45:00 +01:00
clime	d3bc4400d0	libravatar: drop "-" from command at postfix conf and the double quotes	2019-02-05 17:34:31 +01:00
clime	7587faded2	libravatar: configure postfix to encrypt emails	2019-02-05 17:30:13 +01:00
clime	82539ae00b	libravatar: fix relay configuration	2019-02-05 17:09:39 +01:00
clime	bce20fb57f	libravatar: drop certbot role, do the config manually	2019-02-05 17:09:39 +01:00
clime	b8c16fece3	libravatar: create bind mount for letsencrypt	2019-02-05 17:09:39 +01:00
clime	bbe8997421	libravatar: add mod_ssl package	2019-02-05 17:09:39 +01:00
clime	3ad124b0f4	libravatar: include certbot role	2019-02-04 20:09:35 +01:00
clime	fbd83d02a0	libravatar: don't relay email through bastion	2019-02-04 18:08:16 +01:00
clime	fe0c798ab3	libravatar: add postfix to requirements	2019-02-04 17:51:26 +01:00
clime	0c363a77a6	libravatar: the httpd_execmem was only needed for f27 according to the bug	2018-11-18 11:43:53 +01:00
clime	5e402fa1df	libravatar: ensure correct selinux context and perms after we haver run collectstatic	2018-11-18 11:42:52 +01:00
clime	d364970549	libravatar: fix quoting	2018-11-18 10:54:19 +01:00
clime	5dd20fa63b	libravatar: SELinux fixes (enable sebooleans, use only apache user instead of www)	2018-11-18 10:18:52 +01:00
clime	db972fba36	libravatar: add quotes	2018-11-14 15:50:45 +01:00
clime	972942b8f5	libravatar: checkout different branches based on staging/production status	2018-11-14 15:47:54 +01:00
clime	1769c3f7b6	libravatar: add cgi-bin script alias for update hook on staging-only	2018-11-01 13:58:09 +01:00
clime	260d0c817b	libravatar: set httpd_can_network_connect_db for PostgreSQL	2018-10-11 13:20:30 +02:00
clime	ecbaba4301	libravatar: minor fixes	2018-10-11 12:53:08 +02:00
clime	bd7f9f8f0c	libravatar: ensure correct selinux type for /srv/libravatar	2018-10-11 12:52:27 +02:00
clime	352f17a767	libravatar: fix acme-challenge rules	2018-10-11 12:01:45 +02:00
clime	86d4e883d3	libravatar: set httpd_unified to on	2018-10-11 10:40:18 +02:00
clime	78775f1b36	libravatar: update srv to mnt for data path	2018-10-10 18:57:14 +02:00
clime	87c350f293	libravatar: fix selinux type	2018-10-10 18:52:05 +02:00
clime	33c6c15c3e	libravatar: add missing dep, fix selinux rules	2018-10-10 18:48:32 +02:00
clime	10eec33a73	libravatar: add acme-challenge rules	2018-10-10 18:39:27 +02:00
clime	146380d0ae	libravatar: move data dir to /mnt	2018-10-10 18:36:33 +02:00
clime	1d861d6b28	libravatar: set selinux contexts on /srv/libravatar and /srv/.well-known	2018-10-10 18:33:39 +02:00
clime	389bd76a14	libravatar: copy custom pg_hba.conf	2018-10-10 16:07:57 +02:00
clime	323635bc29	libravatar: fix copying run-in-venv.sh script from mounted volume on node	2018-10-08 13:26:16 +02:00
clime	927b108466	add libravatar playbooks	2018-10-06 23:55:35 +02:00