mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-24 02:20:51 +08:00
66 lines
1.5 KiB
YAML
66 lines
1.5 KiB
YAML
- name: Copy in the main httpd.conf file for proxy nodes
|
|
template: >
|
|
src=httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf
|
|
owner=root group=root mode=0644
|
|
notify:
|
|
- reload proxyhttpd
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|
|
|
|
- name: Make sure certain files are gone
|
|
file: dest=/etc/httpd/conf.d/{{item}} state=absent
|
|
with_items:
|
|
- welcome.conf
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|
|
|
|
- name: Copy over some basic configs into /etc/httpd/conf.d/
|
|
template: >
|
|
src={{item}} dest=/etc/httpd/conf.d/{{item}}
|
|
owner=root group=root mode=0644
|
|
with_items:
|
|
- forwarded.conf
|
|
- 00-namevirtualhost.conf
|
|
- 01-keepalives.conf
|
|
- 02-ticketkey.conf
|
|
- 03-reqtimeout.conf
|
|
notify:
|
|
- reload proxyhttpd
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|
|
|
|
- name: set the apache mpm to use event MPM
|
|
copy: src=00-mpm.conf dest=/etc/httpd/conf.modules.d/00-mpm.conf
|
|
notify:
|
|
- reload proxyhttpd
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|
|
|
|
- name: Install libsemanage-python so we can manage selinux with python...
|
|
yum: name=libsemanage-python state=installed
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|
|
- selinux
|
|
|
|
- name: Turn on certain selinux booleans we need for our proxy layer
|
|
seboolean: name={{ item }} state=true persistent=true
|
|
with_items:
|
|
# We need this for httpd to be able to reverseproxy to other machines.
|
|
- httpd_can_network_connect
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|
|
- selinux
|
|
|
|
- name: Create pki/httpd
|
|
file: path=/etc/pki/httpd state=directory
|
|
owner=root group=root mode=0600
|
|
tags:
|
|
- httpd
|
|
- httpd/proxy
|