]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
created new jenkins vhost
authorThomas Heller <thomas.heller@pixelpark.com>
Fri, 24 Aug 2018 09:02:39 +0000 (11:02 +0200)
committerThomas Heller <thomas.heller@pixelpark.com>
Fri, 24 Aug 2018 09:02:39 +0000 (11:02 +0200)
customer/spk-jenkins/stage-services01.sfp.devops.pixelpark.net.yaml

index 9ce66418970ec655d13850d5306699b0787fd9b9..6b592caf87cf7e6650b79c3d8a9206f93d9eb866 100644 (file)
 ---
 infra::additional_classes:
-#  - infra::profile::apache
-#  - apache::mod::headers
-  - nginx
+  - infra::profile::apache
+  - apache::mod::headers
+#  - nginx
 
 repo::remi_php72: true
 
-#infra::profile::apache::pp_vhosts:
-#  nexus:
-#    docroot: '/srv'
-#    servername: 'stage-services01-sfp-devops.pixelpark.net'
-#    cert_servername: 'wildcard.pixelpark.net'
-#    cert_customer: 'pixelpark'
-#    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-#    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
-#    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-#    proxy_preserve_host: true
-#    proxy_pass:
-#      - { path: /nexus, url: 'http://127.0.0.1:8081/nexus' }
-#    directories:
-#      # Root Directory
-#      - provider: directory
-#        path: '/srv'
-#        options:
-#          - FollowSymLinks
-#          - MultiViews
-#        allow_override:
-#          - None
-#    rewrites:
-#      - comment: 'Alles auf https umleiten.'
-#        rewrite_cond:
-#          - '%%{ich-trickse}{HTTPS} !=on'
-#        rewrite_rule:
-#          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
-#    request_headers_ssl:
-#      - 'set X-Forwarded-Proto "https"'
-#  jenkins:
-#    docroot: '/srv'
-#    servername: 'stage-jenkins-sfp-devops.pixelpark.net'
-#    cert_servername: 'wildcard.pixelpark.net'
-#    cert_customer: 'pixelpark'
-#    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-#    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
-#    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-#    proxy_preserve_host: true
-#    proxy_pass:
-#      - { path: /, url: 'http://127.0.0.1:8080/' }
-#    directories:
-#      # Root Directory
-#      - provider: directory
-#        path: '/srv'
-#        options:
-#          - FollowSymLinks
-#          - MultiViews
-#        allow_override:
-#          - None
-#    rewrites:
-#      - comment: 'Alles auf https umleiten.'
-#        rewrite_cond:
-#          - '%%{ich-trickse}{HTTPS} !=on'
-#        rewrite_rule:
-#          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
-#    request_headers_ssl:
-#      - 'set X-Forwarded-Proto "https"'
-#  stage_sfp_registry:
-#    docroot: '/srv'
-#    servername: 'stage-sfp-registry.pixelpark.net'
-#    cert_servername: 'wildcard.pixelpark.net'
-#    cert_customer: 'pixelpark'
-#    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-#    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
-#    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-#    proxy_preserve_host: true
-#    proxy_pass:
-#      - { path: /, url: 'http://127.0.0.1:8082/' }
-#    directories:
-#      # Root Directory
-#      - provider: directory
-#        path: '/srv'
-#        options:
-#          - FollowSymLinks
-#          - MultiViews
-#        allow_override:
-#          - None
-#    rewrites:
-#      - comment: 'Alles auf https umleiten.'
-#        rewrite_cond:
-#          - '%%{ich-trickse}{HTTPS} !=on'
-#        rewrite_rule:
-#          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
-#    request_headers_ssl:
-#      - 'set X-Forwarded-Proto "https"'
-
-nginx::nginx_vhosts:
+infra::profile::apache::pp_vhosts:
+  nexus:
+    docroot: '/srv'
+    servername: 'stage-services01-sfp-devops.pixelpark.net'
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    proxy_preserve_host: true
+    proxy_pass:
+      - { path: /nexus, url: 'http://127.0.0.1:8081/nexus' }
+    directories:
+      # Root Directory
+      - provider: directory
+        path: '/srv'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+    rewrites:
+      - comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+        - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
+    request_headers_ssl:
+      - 'set X-Forwarded-Proto "https"'
   jenkins:
-    server_name:
-      - stage-jenkins-sfp-devops.pixelpark.net
-    proxy: http://localhost:8080
-    proxy_set_header:
-      - 'X-Forwarded-Proto "https"'
-      - 'X-Forwarded-For $proxy_add_x_forwarded_for'
-      - 'X-Real-IP $remote_addr'
-      - 'Host $host'
-    ssl: true
-    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
-    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
-    rewrite_to_https: true
-    proxy_connect_timeout: "600"
-    proxy_read_timeout: "600"
-    proxy_connect_timeout: "600"
+    docroot: '/srv'
+    servername: 'stage-jenkins-sfp-devops.pixelpark.net'
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    proxy_preserve_host: true
+    proxy_pass:
+      - { path: /, url: 'http://127.0.0.1:8080/' }
+    directories:
+      # Root Directory
+      - provider: directory
+        path: '/srv'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+    rewrites:
+      - comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
+    request_headers_ssl:
+      - 'set X-Forwarded-Proto "https"'
+  stage_sfp_registry:
+    docroot: '/srv'
+  servername: 'stage-sfp-registry.pixelpark.net'
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    proxy_preserve_host: true
+    proxy_pass:
+      - { path: /, url: 'http://127.0.0.1:8082/' }
+    directories:
+      # Root Directory
+      - provider: directory
+        path: '/srv'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+    rewrites:
+      - comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
+    request_headers_ssl:
+      - 'set X-Forwarded-Proto "https"'
+
+#nginx::nginx_vhosts:
+#  jenkins:
+#    server_name:
+#      - stage-jenkins-sfp-devops.pixelpark.net
+#    proxy: http://localhost:8080
+#    proxy_set_header:
+#      - 'X-Forwarded-Proto "https"'
+#      - 'X-Forwarded-For $proxy_add_x_forwarded_for'
+#      - 'X-Real-IP $remote_addr'
+#      - 'Host $host'
+#    ssl: true
+#    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+#    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
+#    rewrite_to_https: true
+#    proxy_connect_timeout: "600"
+#    proxy_read_timeout: "600"
+#    proxy_connect_timeout: "600"
+#