Commit Graph

174 Commits

Author SHA1 Message Date
Michael Simacek
adade90a2c Disallow robots from expensive queries on koschei 2017-02-24 16:02:40 +01:00
Patrick Uiterwijk
4289a2056c Alias and mod_rewrite mixing doesn't go too well
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-21 15:06:51 +00:00
Patrick Uiterwijk
49323cdec7 Create directory for registry-signatures
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-21 14:34:47 +00:00
Patrick Uiterwijk
7fdfd90dad CDN has no clue about staging
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-16 20:03:33 +00:00
Patrick Uiterwijk
9453a5cba0 Do this the other way around. And Docker...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-16 19:57:12 +00:00
Patrick Uiterwijk
47c396423d Do not send update requests to CDN
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-16 19:47:09 +00:00
Ricky Elrod
a78a6d2bec redirect mirrors.fp.o/publiclist to admin.fp.o/mirrormanager
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2017-02-16 17:56:08 +00:00
Patrick Uiterwijk
e1601ca869 More flexible regex
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-15 15:59:46 +00:00
Patrick Uiterwijk
c1b28e4568 Redirect blob requests to CDN
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-15 15:48:20 +00:00
Patrick Uiterwijk
fbbf28f32c Remove keepalives configuration in production
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-14 16:11:09 +00:00
Patrick Uiterwijk
40476d05a2 Because Docker
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-13 22:37:39 +00:00
Patrick Uiterwijk
14d68a4b22 Let's try keepalive
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-13 16:00:29 +00:00
Stephen Smoogen
a59950b213 make a small set of changes before too many 2017-02-01 23:39:23 +00:00
Patrick Uiterwijk
2aa9950702 Block all traffic for this paste at the proxies
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-01-23 14:06:42 +00:00
Stephen Smoogen
4fe0981401 we need to do all this stuff in templates. 2017-01-16 01:01:45 +00:00
Patrick Uiterwijk
dd905e5917 Disable for now, but keep around
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-01-14 18:40:44 +00:00
Patrick Uiterwijk
a7d6b0052f Put staging stable registry behind varnish and redirect to external registry
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-01-14 18:35:45 +00:00
Patrick Uiterwijk
ebf89e06c9 Texlive needs ALMOST two full hours. Let's raise to just above the actual time
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-30 00:51:56 +00:00
Patrick Uiterwijk
98100b01fd Also raise apache koji timeout
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-29 18:10:08 +00:00
Patrick Uiterwijk
795c659f7a Only use IPA01 for API access since sessions are not synchronized
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:50:43 +00:00
Patrick Uiterwijk
658cad48e2 Fix IPA reverse cookie domain
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:33:05 +00:00
Patrick Uiterwijk
fb4899e0c5 Add header_expect: false as default
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-09 14:22:35 +00:00
Patrick Uiterwijk
e714c9dcb5 Add expect clear header
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-09 14:18:30 +00:00
Kevin Fenzi
1effd347df Setup a proxyreload for httpd that looks for the ticketkey. If it's not there, assume the proxy is just being configured and don't reload httpd. 2016-12-01 21:36:07 +00:00
Ricky Elrod
dcb984c6d2 add python2-mock here
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2016-09-06 20:15:05 +00:00
Patrick Uiterwijk
f1dd7a7432 Unify all ssl cipher suite configurations
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-31 19:28:26 +00:00
Patrick Uiterwijk
b6dda2c8b3 Create candidate registry at proxy
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-29 19:09:38 +00:00
Ricky Elrod
f1e82e00ca set https so styles work
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2016-08-03 09:30:02 +00:00
Ricky Elrod
ff9c55e1e8 set ProxyPreserveHost
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2016-08-03 09:16:38 +00:00
Patrick Uiterwijk
46629ba55c Route all xmlrpc requests to mm-frontend-checkin01
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-06-17 20:33:44 +00:00
Ricky Elrod
1463224098 Nuke fedora-mobile website reverse proxy
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2016-06-05 21:22:11 +00:00
Kevin Fenzi
2209cb5efa drop bodhost01 and proxy07 2016-05-31 16:48:17 +00:00
Kevin Fenzi
3b40f60873 Try moving this to defaults instead of vars. 2016-05-26 16:22:55 +00:00
Patrick Uiterwijk
e34d1ff891 Remove temporary download.fp.o to dl.fp.o 24 Beta redirect
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-05-10 16:56:25 +00:00
Patrick Uiterwijk
80b8e5f6f5 Fix redirects for all images for F24 beta
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-05-10 15:36:12 +00:00
Patrick Uiterwijk
7d6d10e7e5 ProxyPass and redirect don't collaborate nicely
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-05-10 15:24:17 +00:00
Kevin Fenzi
26868b53bc Remove $ 2016-05-10 15:10:50 +00:00
Kevin Fenzi
e24c3cc5f8 Redirect workstation beta to dl for now. 2016-05-10 14:52:44 +00:00
Patrick Uiterwijk
d99cc31de5 Well, maybe you can register at a registry?
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-04-12 17:43:02 +00:00
Patrick Uiterwijk
b14a7b3b1b This needs to be under Location
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-04-12 16:21:25 +00:00
Patrick Uiterwijk
5888a3c32b Only allow containerbuild to push to the registry
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-04-12 16:12:50 +00:00
Patrick Uiterwijk
98a1619e01 Let's use the existing pki path
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-04-12 14:16:56 +00:00
Patrick Uiterwijk
97b00e90ab Use Fedora proxies as only proxy for Docker Registry
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-04-12 13:56:26 +00:00
Patrick Uiterwijk
c0b7382df2 Allow to keep the host header through a setting
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-03-10 22:07:34 +00:00
Patrick Uiterwijk
ac83211407 Indexing /datagrepper is useless
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-02-11 13:19:26 +00:00
Patrick Uiterwijk
69aa7513b0 Also match api_2
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-22 02:23:59 +00:00
Patrick Uiterwijk
b69187c61c COPR API goes over SSL 2016-01-22 01:04:50 +00:00
Patrick Uiterwijk
ff3c5dcdf6 Proxy copr api
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-22 00:44:27 +00:00
Patrick Uiterwijk
d0f8126a9a This is called file
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-22 00:41:38 +00:00
Patrick Uiterwijk
6f990c34dd Do not forward COPR /api requests
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-22 00:40:47 +00:00