]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
add ssl rewrite rule
authorAndreas Gerstenberg <gerstenberg@pixelpark.com>
Mon, 5 Dec 2016 15:15:32 +0000 (16:15 +0100)
committerAndreas Gerstenberg <gerstenberg@pixelpark.com>
Mon, 5 Dec 2016 15:17:17 +0000 (16:17 +0100)
customer/mbvd-christmas-greetings-vans/www-christmas-greetings-vans-mercedes-benz-com.pixelpark.net.yaml

index 8f1d1e8783105e0002822f26af195f00c5a46cf3..0d6f67ddfc9858b2a828ace1afb5737a39dcc09e 100644 (file)
@@ -37,9 +37,6 @@ site::profile::apache::pp_vhosts:
   christmas:
     docroot: /var/www/christmas
     servername: christmas-greetings.vans.mercedes-benz.com
-    serveraliases:
-      - www.christmas-greetings.vans.mercedes-benz.com
-      - www-christmas-greetings-vans-mercedes-benz-com.pixelpark.net
     # es werden LB und WAF verwendet - SSL Certs liegen im Loadbalancer
     ssl: false
     docroot_owner: apache
@@ -68,3 +65,18 @@ site::profile::apache::pp_vhosts:
         auth_digest_algorithm: MD5
         auth_user_file: '/etc/httpd/htdigest'
         auth_require: 'valid-user'
+    rewrites:
+      - alias:
+        comment: 'Weiterleitung auf echte URL'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} !^christmas-greetings\.vans\.mercedes-benz\.com$ [NC]'
+        rewrite_rule:
+          - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
+      - alias1:
+        comment: 'Weiterleitung auf https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
+        rewrite_rule:
+          - '^(.*)$ https://www.christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
+    setenvif_ssl:
+      - 'HTTPS on HTTPS=on'