Kevin Fenzi
8a4a4469e4
proxies: Override the httpd systemd unit file to up file limit and restart on failure
...
The proxies seem to be hitting file limits, so try increasing them.
Also, set httpd to restart on failure, this should help mask the problem
if it persists with the higher limit.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2023-01-22 13:51:23 -08:00
Kevin Fenzi
57250588d3
proxies: disable systemd-oomd
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2022-09-20 12:29:27 -07:00
Francois Andrieu
a3021f650c
httpd: remove deprecated NamedVirtualHost
2021-04-03 18:10:47 +00:00
Rick Elrod
f7d01587a3
httpd/proxy: libsemanage here too, we should abstract this out...
...
Signed-off-by: Rick Elrod <relrod@redhat.com >
2020-04-24 21:34:18 +02:00
Patrick Uiterwijk
ac055b3927
Deploy ticketkey as part of proxy role
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-11-25 00:02:26 +00:00
Patrick Uiterwijk
039b08354a
Yum allowed state=installed. Lets use state=present consistently
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 22:31:03 +00:00
Patrick Uiterwijk
a9e616022f
Also package-ize this
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 22:03:18 +00:00
Patrick Uiterwijk
fbbf28f32c
Remove keepalives configuration in production
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-02-14 16:11:09 +00:00
Kevin Fenzi
1effd347df
Setup a proxyreload for httpd that looks for the ticketkey. If it's not there, assume the proxy is just being configured and don't reload httpd.
2016-12-01 21:36:07 +00:00
Patrick Uiterwijk
98a1619e01
Let's use the existing pki path
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-04-12 14:16:56 +00:00
Patrick Uiterwijk
08568865fe
Replace all restart httpd with reload httpd
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-11-04 23:40:01 +00:00
Patrick Uiterwijk
2f3988868c
Set requesttimeout on headers
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-15 17:34:08 +00:00
Kevin Fenzi
17b4748e4e
Switch proxies to use the mpm event module instead of prefork.
2015-10-09 15:34:17 +00:00
Kevin Fenzi
b34edf77a7
Move the haveged install to the mod_ssl role
2015-10-07 23:24:41 +00:00
Patrick Uiterwijk
4fa59b5ce8
Enable ticket keys
2015-10-07 23:04:25 +00:00
Patrick Uiterwijk
7106486ce3
Add haveged to proxies for entropy
2015-10-07 20:12:14 +00:00
Kevin Fenzi
73dee1dc7f
Stab at making our lower mem proxies happier so they don't nagios flood us
2015-02-06 18:16:31 +00:00
Kevin Fenzi
a5d5bfff7f
Try and make proxies not replace files twice and also fix el7 python hash hotfix.
2015-02-02 00:39:49 +00:00
Ralph Bean
968b26b882
Install libsemanage-python so we can manage selinux with python...
2015-01-06 19:26:55 +00:00
Ralph Bean
2053ae2d31
Turn on httpd_can_network_connect for reverseproxy.
2015-01-06 19:23:43 +00:00
Ralph Bean
7d06598fa8
Set up proxy basics first.
2014-12-18 18:34:05 +00:00
