mbvd-ngcc - new frontend host

diff --git a/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml b/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml
index 4187b51748ab64db5a581e7a8b676b5907a5408e..0871eb5d8817799b27305b6acb037ef74bdfc518 100644 (file)
--- a/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml
+++ b/customer/mbvd-ngcc/dev-web-ngcc-daimler.pixelpark.net.yaml
@@ -25,30 +25,48 @@ site::profile::apache::htdigest:
   server:
     www: ENC[PKCS7,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]
 
-site::profile::drupal::projects:
-  ngcc:
+site::profile::apache::pp_vhosts:
+  ngcc-web01:
+    docroot: '/var/www/ngcc-express-proxy/frontend/dist/static'
     ip: 192.168.170.35
-    site_path: '/var/www/ngcc/drupal-composer/web'
-    servername: dev-web-ngcc-daimler.pixelpark.net
+    servername: dev-web01-ngcc-daimler.pixelpark.net
     serveraliases:
-      - html.dev-web-ngcc-daimler.pixelpark.net
+      - dev-web-ngcc-daimler.pixelpark.net
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
-    user: apache
-    mode: '2775'
-    use_standard_docroot_directory: false # because of index.html (directoryindex)
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    redirect_dest_non_ssl: 'https://dev-web01-ngcc-daimler.pixelpark.net/'
+    headers:
+      - 'always unset "X-Powered-By"'
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: "ALLOW-FROM https://dev-cms01-ngcc-daimler.pixelpark.net"'
+      - "set Content-Security-Policy: \"default-src 'self'; font-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'\""
+      - "set X-Content-Security-Policy: \"default-src 'self'; font-src 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self'\""
+    headers_ssl:
+      - 'always set Strict-Transport-Security "max-age=31556926"'
+    custom_fragment: |
+      PassengerStickySessions on
+      PassengerNodejs /usr/bin/node
+      PassengerStartupFile bin/www
+    passenger_app_root: '/var/www/ngcc-express-proxy/express'
+    passenger_app_env: development
+    docroot_owner: apache
+    docroot_group: apache
     directories:
-      - directory_root:
+      - docroot:
         provider: directory
-        path: '/var/www/ngcc/drupal-composer/web'
+        path: '/var/www/ngcc-express-proxy/frontend/dist/static'
         options:
           - FollowSymLinks
           - MultiViews
         allow_override:
-          - All
-        addhandlers:
-          - { handler: "proxy:unix:/var/run/php5-fpm-ngcc.sock|fcgi://./" , extensions: '.php' }
+        - None
+      - preapproot:
+        provider: directory
+        path: '/var/www/ngcc-express-proxy'
+        options:
+          - None
       - location_root:
         provider: location
         path: '/'
@@ -60,3 +78,28 @@ site::profile::drupal::projects:
         auth_require: 'valid-user'
         require:
           - local
+
+site::profile::drupal::projects:
+  ngcc-cms01:
+    ip: 192.168.170.36
+    site_path: '/var/www/ngcc/drupal-composer/web'
+    servername: dev-cms01-ngcc-daimler.pixelpark.net
+    serveraliases:
+      - html.dev-web-ngcc-daimler.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    user: apache
+    mode: '2775'
+    use_standard_docroot_directory: false # because of index.html (directoryindex)
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/ngcc/drupal-composer/web'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-ngcc.sock|fcgi://./" , extensions: '.php' }