]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
jira02 add webserver for jira01 tomcat
authorAndreas Gerstenberg <gerstenberg@pixelpark.com>
Fri, 28 Jul 2017 09:40:47 +0000 (11:40 +0200)
committerAndreas Gerstenberg <gerstenberg@pixelpark.com>
Fri, 28 Jul 2017 09:40:47 +0000 (11:40 +0200)
customer/pixelpark-pmp/jira02.pixelpark.com.yaml

index 0de037d80359d0e59a70e573e1de2a2743385c9e..40e69b1d748ee06c9c5452e60f1f48e44877d98f 100644 (file)
@@ -80,19 +80,42 @@ infra::profile::apache::pp_vhosts:
         rewrite_rule:
           - '^(.*)$ https://pressthebird.pixelpark.com$1 [R=301,L]'
 
-#infra::profile::apache::pp_vhosts:
-#  jira:
-#    docroot: /var/www/jira/public
-#    servername: jira.pixelpark.com
-#    serveraliases:
-#       - jira01.pixelpark.com
-#       - jira01.pixelpark.net
-#    cert_servername: 'wildcard.pixelpark.com'
-#    cert_customer: 'pixelpark'
-#    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
-#    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
-#    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
-#    proxy_dest: 'ajp://jira01.pixelpark.com:8009/jira'
-
-
+  jira:
+    docroot: /var/www/jira
+    servername: jira.pixelpark.com
+    cert_servername: 'wildcard.pixelpark.com'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/jira'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html
+    proxy_pass:
+      - { path: /server-status, url: '!' }
+      - { path: /server-info, url: '!' }
+      - { path: /jira, url: 'ajp://jira01.pixelpark.net:8009/jira' }
+      - { path: /servicedesk, url: 'https://intra.pixelpark.com/servicedesk' }
+      - { path: /alertlog/, url: 'https://xymon.pixelpark.com/xymon-cgi/alertlog.sh' }
+    headers_ssl:
+      - always set Strict-Transport-Security "max-age=31556926"
+    rewrites:
+      - comment: 'Weiterleitung auf JIRA URL'
+        rewrite_rule:
+          - '^(/?)$ https://jira.pixelpark.com/jira [R=301,L]'
 
+      - comment: 'Weiterleitung auf https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on [NC]'
+        rewrite_rule:
+          - '^(.*)$ https://jira.pixelpark.com$1 [R=301,L]'