]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
sirona-aem - add zironia vhosts
authorPhilipp Dallig <philipp.dallig@pixelpark.com>
Thu, 29 Jun 2017 07:56:55 +0000 (09:56 +0200)
committerPhilipp Dallig <philipp.dallig@pixelpark.com>
Thu, 29 Jun 2017 07:56:55 +0000 (09:56 +0200)
customer/sirona-aem/production.yaml

index 80dcf54c039264f7fe4eabacbb9d65b8802bec0b..88c8059c0abe46f5e6fda5c8089b4e436df6c486 100644 (file)
@@ -187,6 +187,15 @@ aem::domain_mappings:
   www.dentsplysironasupport.com:
     aem_path: '/content/dentsplysironasupport'
     create_sling_mapping: true
+  www.simply-faster-zirconia.es:
+    aem_path: '/content/Zirconia'
+    create_sling_mapping: true
+  www.simply-faster-zirconia.fr:
+    aem_path: '/content/Zirconia'
+    create_sling_mapping: true
+  www.simply-faster-zirconia.it:
+    aem_path: '/content/Zirconia'
+    create_sling_mapping: true
   assets.dentsplysirona.com:
     aem_path: '/content/dam'
     create_sling_mapping: true
@@ -1261,17 +1270,35 @@ infra::profile::aem::publish::pp_vhosts:
       - der-zahntechniker-kongress.de
     ssl: false
     redirect_dest: 'https://lp.dentsplysirona.com/de-de/zahntechniker-kongress-2018.html'
-# Sirona simply-faster-zirconia - kein AEM VHost
+# Sirona simply-faster-zirconia
   zirconia:
     serveraliases:
       # die Domains sollten fuer einen Rewrite auf die AEM Umgebungen zeigen
       - www.simply-faster-zirconia.com simply-faster-zirconia.com www.simplyfasterzirconia.com simplyfasterzirconia.com
       - www.simply-faster-zirconia.de simply-faster-zirconia.de www.simplyfasterzirconia.de simplyfasterzirconia.de
-      # die restlichen Domains werden noch laenger mittels Azure Webapp betrieben
+      # die restlichen Domains werden derzeit mit AEM ausgeliefert
       - www.simply-faster-zirconia.fr simply-faster-zirconia.fr www.simplyfasterzirconia.fr simplyfasterzirconia.fr
       - www.simply-faster-zirconia.es simply-faster-zirconia.es www.simplyfasterzirconia.es simplyfasterzirconia.es
       - www.simply-faster-zirconia.it simply-faster-zirconia.it www.simplyfasterzirconia.it simplyfasterzirconia.it
+    docroot: '/opt/adobe/www/cache/content/Zirconia'
     ssl: false
+    aliases:
+      - { alias: /error_custom/ , path: /var/www/html/error_custom/ }
+    error_documents:
+      - { error_code: 502 , document: "/error_custom/error.shtml" }
+      - { error_code: 503 , document: "/error_custom/error.shtml" }
+    directories:
+      # docroot:
+      - provider: directory
+        path: '/opt/adobe/www/cache/content/Zirconia'
+        sethandler: dispatcher-handler
+        options:
+          - FollowSymLinks
+      # error_documents
+      - provider: directory
+        path: /var/www/html/error_custom/
+        options:
+          - +Includes
     rewrites:
       - comment: 'Rewrites zirconia.com'
         rewrite_cond:
@@ -1283,6 +1310,21 @@ infra::profile::aem::publish::pp_vhosts:
           - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?(simply-faster-zirconia|simplyfasterzirconia)\.de$'
         rewrite_rule:
           - ^(.*)$ https://www1.dentsplysirona.com/de-de/loesungen/themen/single-visit-dentistry-mit-cerec/vorteile/zirkonoxid.html [R=301,L]
+      - comment: 'Rewrite zur Startseite zirconia.es'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?(simply-faster-zirconia|simplyfasterzirconia)\.es$'
+        rewrite_rule:
+          - '^/$ %%{ich-trickse}{REQUEST_SCHEME}://www.simply-faster-zirconia.es/es.html [R=302,L]'
+      - comment: 'Rewrite zur Startseite zirconia.fr'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?(simply-faster-zirconia|simplyfasterzirconia)\.fr$'
+        rewrite_rule:
+          - '^/$ %%{ich-trickse}{REQUEST_SCHEME}://www.simply-faster-zirconia.fr/fr.html [R=302,L]'
+      - comment: 'Rewrite zur Startseite zirconia.it'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?(simply-faster-zirconia|simplyfasterzirconia)\.it$'
+        rewrite_rule:
+          - '^/$ %%{ich-trickse}{REQUEST_SCHEME}://www.simply-faster-zirconia.it/it.html [R=302,L]'
 # Sirona lp.dentsplysirona.com
   landingpages:
     serveraliases:
@@ -3676,6 +3718,90 @@ aem::dispatcher::publish_farm:
       - 'Expires'
       - 'Content-Type'
       - 'Access-Control-Allow-Origin'
+  zirconia:
+    virtualhosts:
+      - www.simply-faster-zirconia.fr
+      - www.simply-faster-zirconia.es
+      - www.simply-faster-zirconia.it
+    clientheaders:
+      - '*'
+    renders:
+      - { hostname: "127.0.0.1", port: '4503' }
+    filter:
+      - { type: 'deny', glob: '*' }
+      - { type: 'allow', url: '/' }
+      - { type: 'allow', url: '*.html' }
+      - { type: 'allow', url: '*.css'   }  # enable css
+      - { type: 'allow', url: '*.gif'   }  # enable gifs
+      - { type: 'allow', url: '*.ico'   }  # enable icos
+      - { type: 'allow', url: '*.js'    }  # enable javascript
+      - { type: 'allow', url: '*.png'   }  # enable png
+      - { type: 'allow', url: '*.swf'   }  # enable flash
+      - { type: 'allow', url: '*.jpg'   }  # enable jpg
+      - { type: 'allow', url: '*.jpeg'  }  # enable jpeg
+      - { type: 'allow', url: '*.svg'  }  # enable svg
+      - { type: 'allow', url: '*.ttf'  }  # enable ttf
+      - { type: 'allow', url: '*.woff'  }  # enable woff
+      - { type: 'allow', url: '*.woff2'  }  # enable woff2
+      - { type: 'allow', url: '*.eot'  }  # enable eot
+      - { type: 'allow', url: '*.pdf'  }  # enable pdf
+      - { type: 'allow', url: '*.wmv'  }  # enable wmv
+      - { type: 'allow', url: '*.psd'  }  # enable psd (Adobe Photoshop Dokument)
+      - { type: 'allow', url: '*.tif'  }  # enable tif
+      - { type: 'allow', url: '*.zip'  }  # enable zip
+      - { type: 'allow', url: '*.exe'  }  # enable exe
+      - { type: 'allow', url: '*.msi'  }  # enable msi
+      - { type: 'allow', url: '*.indd'  }  # enable indd (Adobe Indesign Dokument)
+      # Enable features
+      - { type: 'allow', url: '/libs/cq/personalization/*' } # enable personalization
+      - { type: 'allow', url: '/content/dam/api.json' } # enable generic asset JSON API
+      - { type: 'allow', url: '*.assetlibrary.json' } # enable asset library JSON API
+      - { type: 'allow', url: '*.articlelibrary.json' } # enable article library JSON API
+      - { type: 'allow', url: '*.assetdata.json' } # enable download basket JSON API
+      - { type: 'allow', url: '*.updatecheck.json' } # enable update check
+      - { type: 'allow', method: 'post', url: '*.forms.html' } # enable forms
+      # Security Rules
+      - { type: 'deny', url: '/etc/'  }
+      - { type: 'deny', url: '/libs/'  }
+      - { type: 'allow', url: '/etc/designs/*'  }
+      - { type: 'allow', url: '/etc/clientlibs/*'  }
+      - { type: 'allow', url: '/etc/segmentation.segment.js'  }
+      - { type: 'allow', url: '/libs/cq/personalization/components/clickstreamcloud/content/config.json'  }
+      - { type: 'allow', url: '/libs/wcm/stats/tracker.js'  }
+      - { type: 'allow', url: '/libs/cq/personalization/*'  }  #  (JS, CSS and JSON)
+      - { type: 'allow', url: '/libs/cq/security/userinfo.json'  }  #  (CQ user information)
+      - { type: 'allow', url: '/libs/granite/security/currentuser.json'  }  #  (data must not be cached)
+      - { type: 'allow', url: '/libs/cq/i18n/*'  }  #  (Internalization)
+      # CSRF
+      - { type: 'allow', url: '/libs/granite/csrf/token.json' } # enable CSRF token
+      # Deny content grabbing
+      - { type: 'deny', url: '*.infinity.json' }
+      - { type: 'deny', url: '*.tidy.json'     }
+      - { type: 'deny', url: '*.sysview.xml'   }
+      - { type: 'deny', url: '*.docview.json'  }
+      - { type: 'deny', url: '*.docview.xml'   }
+      - { type: 'deny', url: '*.*[0-9].json'   }
+      # Deny query
+      - { type: 'deny', url: '*.query.json' }
+    cache_docroot: '/opt/adobe/www/cache/content/Zirconia'
+    cache_rules:
+      - { type: 'allow', glob: '*' }
+    cache_invalidate:
+      - { type: 'deny', glob: '*' }
+      - { type: 'allow', glob: '*.html' }
+      - { type: 'allow', glob: '/etc/segmentation.segment.js' }
+      - { type: 'allow', glob: '*/analytics.sitecatalyst.js' }
+    cache_allowed_clients:
+      - { type: 'deny', glob: '*' }
+      - { type: 'allow', glob: '127.0.0.1' }
+    cache_headers:
+      - 'X-Content-Type-Options'
+      - 'X-Frame-Options'
+      - 'X-XSS-Protection'
+      - 'Last-Modified'
+      - 'Expires'
+      - 'Content-Type'
+      - 'Access-Control-Allow-Origin'
   assets:
     virtualhosts:
       - 'assets.dentsplysirona.com'