]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
pixelpark-puppet - use a proxy connection to puppetdb
authorPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 18 Aug 2017 10:08:29 +0000 (12:08 +0200)
committerPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 18 Aug 2017 10:08:29 +0000 (12:08 +0200)
customer/pixelpark-puppet/puppetdb01.pixelpark.com.yaml

index 42985d79e4dd163f40ea10c8cb1644f581066950..e7858ec1595b832a6b2ce75d37e831579f214e26 100644 (file)
@@ -56,3 +56,20 @@ infra::profile::apache::pp_vhosts:
         path: '/usr/lib/python2.7/site-packages/puppetboard/static'
       - alias: '/favicon.ico'
         path: '/var/www/puppetboard/favicon.ico'
+  puppetboard:
+    servername: puppetdb01.pixelpark.com
+    serveraliases:
+      - puppetdb.pixelpark.com
+    cert_servername: 'wildcard.pixelpark.com'
+    cert_customer: 'pixelpark'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    proxy_dest: http://localhost:8080
+    rewrites:
+      - comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+