Files
fedora-infra_ansible/roles/httpd/proxy/tasks/main.yml
Patrick Uiterwijk fbbf28f32c Remove keepalives configuration in production
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-02-14 16:11:09 +00:00

73 lines
1.6 KiB
YAML

- name: Copy in the main httpd.conf file for proxy nodes
template: >
src=httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf
owner=root group=root mode=0644
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/proxy
- name: Make sure certain files are gone
file: dest=/etc/httpd/conf.d/{{item}} state=absent
with_items:
- welcome.conf
tags:
- httpd
- httpd/proxy
- name: Copy over some basic configs into /etc/httpd/conf.d/
template: >
src={{item}} dest=/etc/httpd/conf.d/{{item}}
owner=root group=root mode=0644
with_items:
- forwarded.conf
- 00-namevirtualhost.conf
- 02-ticketkey.conf
- 03-reqtimeout.conf
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/proxy
- name: Remove the keepalives configuration
file: path=/etc/httpd/conf.d/01-keepalives.conf state=absent
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/proxy
- name: set the apache mpm to use event MPM
copy: src=00-mpm.conf dest=/etc/httpd/conf.modules.d/00-mpm.conf
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/proxy
- name: Install libsemanage-python so we can manage selinux with python...
yum: name=libsemanage-python state=installed
tags:
- httpd
- httpd/proxy
- selinux
- name: Turn on certain selinux booleans we need for our proxy layer
seboolean: name={{ item }} state=true persistent=true
with_items:
# We need this for httpd to be able to reverseproxy to other machines.
- httpd_can_network_connect
tags:
- httpd
- httpd/proxy
- selinux
- name: Create pki/httpd
file: path=/etc/pki/httpd state=directory
owner=root group=root mode=0600
tags:
- httpd
- httpd/proxy