WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-26 03:23:08 +08:00
Code Issues Packages Projects Releases Wiki Activity
17,902 Commits 9 Branches 0 Tags
99d5c3dfd2cd88f6bb4e3a44fbfeeff9e1035158
Commit Graph

90 Commits

Author SHA1 Message Date
Kevin Fenzi
058f6a84ec missed a few of these due to spacing 2017-04-13 18:35:43 +00:00
Patrick Uiterwijk
3a8e11cf7e Split staging and prod docker push certs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-10 22:06:52 +02:00
Patrick Uiterwijk
9841d619fc Why, Docker, why? I thought we were friends 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-03-15 22:56:21 +00:00
Patrick Uiterwijk
4289a2056c Alias and mod_rewrite mixing doesn't go too well 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-21 15:06:51 +00:00
Patrick Uiterwijk
49323cdec7 Create directory for registry-signatures 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-21 14:34:47 +00:00
Patrick Uiterwijk
7fdfd90dad CDN has no clue about staging 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-16 20:03:33 +00:00
Patrick Uiterwijk
9453a5cba0 Do this the other way around. And Docker... 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-16 19:57:12 +00:00
Patrick Uiterwijk
47c396423d Do not send update requests to CDN 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-16 19:47:09 +00:00
Ricky Elrod
a78a6d2bec redirect mirrors.fp.o/publiclist to admin.fp.o/mirrormanager 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2017-02-16 17:56:08 +00:00
Patrick Uiterwijk
e1601ca869 More flexible regex 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-15 15:59:46 +00:00
Patrick Uiterwijk
c1b28e4568 Redirect blob requests to CDN 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-15 15:48:20 +00:00
Patrick Uiterwijk
40476d05a2 Because Docker 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-13 22:37:39 +00:00
Patrick Uiterwijk
2aa9950702 Block all traffic for this paste at the proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-01-23 14:06:42 +00:00
Patrick Uiterwijk
dd905e5917 Disable for now, but keep around 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-01-14 18:40:44 +00:00
Patrick Uiterwijk
a7d6b0052f Put staging stable registry behind varnish and redirect to external registry 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-01-14 18:35:45 +00:00
Patrick Uiterwijk
ebf89e06c9 Texlive needs ALMOST two full hours. Let's raise to just above the actual time 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-30 00:51:56 +00:00
Patrick Uiterwijk
98100b01fd Also raise apache koji timeout 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-29 18:10:08 +00:00
Patrick Uiterwijk
795c659f7a Only use IPA01 for API access since sessions are not synchronized 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-20 05:50:43 +00:00
Patrick Uiterwijk
658cad48e2 Fix IPA reverse cookie domain 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-20 05:33:05 +00:00
Patrick Uiterwijk
fb4899e0c5 Add header_expect: false as default 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-09 14:22:35 +00:00
Patrick Uiterwijk
e714c9dcb5 Add expect clear header 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-09 14:18:30 +00:00
Kevin Fenzi
1effd347df Setup a proxyreload for httpd that looks for the ticketkey. If it's not there, assume the proxy is just being configured and don't reload httpd. 2016-12-01 21:36:07 +00:00
Ricky Elrod
dcb984c6d2 add python2-mock here 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-09-06 20:15:05 +00:00
Patrick Uiterwijk
b6dda2c8b3 Create candidate registry at proxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-29 19:09:38 +00:00
Ricky Elrod
f1e82e00ca set https so styles work 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-08-03 09:30:02 +00:00
Ricky Elrod
ff9c55e1e8 set ProxyPreserveHost 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-08-03 09:16:38 +00:00
Patrick Uiterwijk
46629ba55c Route all xmlrpc requests to mm-frontend-checkin01 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-06-17 20:33:44 +00:00
Ricky Elrod
1463224098 Nuke fedora-mobile website reverse proxy 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-06-05 21:22:11 +00:00
Patrick Uiterwijk
e34d1ff891 Remove temporary download.fp.o to dl.fp.o 24 Beta redirect 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-05-10 16:56:25 +00:00
Patrick Uiterwijk
80b8e5f6f5 Fix redirects for all images for F24 beta 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-05-10 15:36:12 +00:00
Patrick Uiterwijk
7d6d10e7e5 ProxyPass and redirect don't collaborate nicely 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-05-10 15:24:17 +00:00
Kevin Fenzi
26868b53bc Remove $ 2016-05-10 15:10:50 +00:00
Kevin Fenzi
e24c3cc5f8 Redirect workstation beta to dl for now. 2016-05-10 14:52:44 +00:00
Patrick Uiterwijk
d99cc31de5 Well, maybe you can register at a registry? 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-04-12 17:43:02 +00:00
Patrick Uiterwijk
b14a7b3b1b This needs to be under Location 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-04-12 16:21:25 +00:00
Patrick Uiterwijk
5888a3c32b Only allow containerbuild to push to the registry 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-04-12 16:12:50 +00:00
Patrick Uiterwijk
98a1619e01 Let's use the existing pki path 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-04-12 14:16:56 +00:00
Patrick Uiterwijk
97b00e90ab Use Fedora proxies as only proxy for Docker Registry 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-04-12 13:56:26 +00:00
Patrick Uiterwijk
c0b7382df2 Allow to keep the host header through a setting 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-10 22:07:34 +00:00
Patrick Uiterwijk
b69187c61c COPR API goes over SSL 2016-01-22 01:04:50 +00:00
Patrick Uiterwijk
62a0372a38 Add the de-facto x-forwarded-proto 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-01-15 09:34:32 +00:00
Patrick Uiterwijk
7d179ed9dc Merge patch to enable HSTS on id.fp.o. #4991 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-12-01 21:34:46 +00:00
Patrick Uiterwijk
a0cf3666ce Cherrypy wants -Proto. Lets make it happy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-12-01 21:15:03 +00:00
Kevin Fenzi
7b8f1624bf Gte another reload place 2015-10-11 19:53:20 +00:00
Ralph Bean
b0d3350791 Revert "robots.txt for bodhi.fp.o." 
This reverts commit dd76e91f2f.
 2015-10-11 19:14:42 +00:00
Ralph Bean
dd76e91f2f robots.txt for bodhi.fp.o. 2015-10-11 19:09:17 +00:00
Adrian Reber
0c710e5d60 The crawler logs are now on mm-frontend01. 
ProxyPass to the crawler is no longer required.
 2015-06-23 07:39:18 +00:00
Adrian Reber
4d80aff5f1 The crawler logs are now on mm-crawler01 2015-06-12 16:11:00 +00:00
Adrian Reber
74c772f99f Fix redirect from publiclist to mirrormanager. 
There have been reports that the old links pointing to the mirrorlist
are no longer working:

 $ curl -I http://mirrors.fedoraproject.org/publiclist/
 Location: https://admin.fedoraproject.org/mirrormanager///

This redirect still works but trying to access a specific mirrorlist
fails:

 $ curl -I http://mirrors.fedoraproject.org/publiclist/EPEL/7/
 Location: https://admin.fedoraproject.org/mirrormanager///EPEL/7/
 $ curl -I https://admin.fedoraproject.org/mirrormanager///EPEL/7/
 HTTP/1.1 404 NOT FOUND

At different places there are just too many slashes added. Removing the
slashes seems to help.
 2015-05-15 19:06:05 +00:00
Patrick Uiterwijk
fa1f170788 Revert "Set HSTS on id.fp.o manually to disable subdomains" 
This reverts commit 62c73923f3.
 2015-02-20 21:41:32 +00:00