From: Thomas Heller <thomas.heller@pixelpark.com>
Date: Mon, 18 Jul 2016 14:24:48 +0000 (+0200)
Subject: bkk-vbu - added new passenger express vhost
X-Git-Tag: v0.1.0~4514
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=48ddf04a236f8dbd12d90dddbe4b32d6d8e7d2ee;p=pixelpark%2Fhiera.git

bkk-vbu - added new passenger express vhost
---

diff --git a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml
index 8170f86d..91adc3ab 100644
--- a/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml
+++ b/customer/bkk-vbu/dev-web01-meine-krankenkasse-de.pixelpark.net.yaml
@@ -27,6 +27,8 @@ php::pear: true
 site::profile::apache::htdigest:
   cms:
     www: 'D8isyxDMU27X'
+  image:
+    imagetool: 'h6n6HNeQ'
 
 site::profile::apache::pp_vhosts:
   web01:
@@ -36,6 +38,11 @@ site::profile::apache::pp_vhosts:
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    redirect_dest_non_ssl: 'https://dev-web01-meine-krankenkasse-de.pixelpark.net/'
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+    headers_ssl:
+      - 'always set Strict-Transport-Security "max-age=31556926"'
     custom_fragment: |
       PassengerStickySessions on
       PassengerNodejs /usr/bin/node
@@ -45,7 +52,7 @@ site::profile::apache::pp_vhosts:
     docroot_owner: apache
     docroot_group: apache
     directories:
-      - docroot: 
+      - docroot:
         provider: directory
         path: '/var/www/bkk-express-proxy/frontend/dist/static'
         options:
@@ -58,6 +65,14 @@ site::profile::apache::pp_vhosts:
         path: '/var/www/bkk-express-proxy'
         options:
           - None
+    rewrites:
+      - BKKVBU-509:
+        comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+
 site::profile::typo3::projects:
   cms01:
     version: '7.6.9'
@@ -70,6 +85,7 @@ site::profile::typo3::projects:
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    redirect_dest_non_ssl: 'https://dev-cms01-meine-krankenkasse-de.pixelpark.net/'
     directories:
       - location1:
         provider: location
@@ -93,5 +109,55 @@ site::profile::symfony::projects:
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    redirect_dest_non_ssl: 'dev-member01-meine-krankenkasse-de.pixelpark.net'
     user: deploy.vogel
     mode: '2775'
+
+site::profile::apache::pp_vhosts:
+  imagetool01:
+    docroot: '/var/www/bkk-imagetool/frontend/dist/static'
+    ip: 77.74.239.130
+    servername: dev-imagetool01-meine-krankenkasse-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    redirect_dest_non_ssl: 'https://dev-imagetool01-meine-krankenkasse-de.pixelpark.net/'
+    headers:
+      - 'set X-Frame-Options: sameorigin'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Content-Type-Options: nosniff'
+    headers_ssl:
+      - 'always set Strict-Transport-Security "max-age=31556926"'
+    custom_fragment: |
+      PassengerStickySessions on
+      PassengerNodejs /usr/bin/node
+      PassengerStartupFile bin/www
+    passenger_app_root: /var/www/bkk-imagetool/express
+    passenger_app_env: production
+    docroot_owner: apache
+    docroot_group: apache
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: image
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - docroot:
+        provider: directory
+        path: '/var/www/bkk-imagetool/frontend/dist/static'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+        - None
+      - preapproot:
+        provider: directory
+        path: '/var/www/bkk-imagetool'
+        options:
+        - None