]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
spk-jenkins - create separate vhost vor registry
authorThomas Dalichow <thomas.dalichow@publicispixelpark.de>
Tue, 31 Jul 2018 13:46:52 +0000 (15:46 +0200)
committerThomas Dalichow <thomas.dalichow@publicispixelpark.de>
Tue, 31 Jul 2018 13:47:02 +0000 (15:47 +0200)
customer/spk-jenkins/stage-services01.sfp.devops.pixelpark.net.yaml

index fbc343dd3f2aff249c6ae9332ed070f47179dcb2..a52f88bb8cd10f7f923379891497bc08c90c7ef6 100644 (file)
@@ -34,3 +34,31 @@ infra::profile::apache::pp_vhosts:
           - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
     request_headers_ssl:
       - 'set X-Forwarded-Proto "https"'
+  stage_sfp_registry:
+    docroot: '/srv'
+    servername: 'stage-sfp-registry.pixelpark.net'
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    proxy_preserve_host: true
+    proxy_pass:
+      - { path: /, url: 'http://127.0.0.1:8082/' }
+    directories:
+      # Root Directory
+      - provider: directory
+        path: '/srv'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+    rewrites:
+      - comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%{literal("%")}{HTTP_HOST}$1 [R=301,L]
+    request_headers_ssl:
+      - 'set X-Forwarded-Proto "https"'