From: sascha.strassheim <sascha.strassheim@pixelpark.com>
Date: Fri, 18 May 2018 10:18:26 +0000 (+0200)
Subject: prd setup fbb-api
X-Git-Tag: v0.1.0~1003
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=5aecb99886ecfcafa83612c03bb06be31509973c;p=pixelpark%2Fhiera.git

prd setup fbb-api
---

diff --git a/customer/fbb-passngr/prd-api01-fbb.pixelpark.net b/customer/fbb-passngr/prd-api01-fbb.pixelpark.net
index ed97d539..fb23e1f4 100644
--- a/customer/fbb-passngr/prd-api01-fbb.pixelpark.net
+++ b/customer/fbb-passngr/prd-api01-fbb.pixelpark.net
@@ -1 +1,45 @@
 ---
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAEhHNp9O1ZwXrvSI+ztK8hRVUmB5WSN3wD3Eq5KonQFDhNMPwTXKLGsKZAj6zntROnyzmzoij3beddff2KHi7qFgXkyaa6N/T/l0vBfVwfwKVO0lFEeETwrW49EBF0PKNmgWRDtVIRF50t4K8/e+Fx6q96xHULeWtflz4oats8vm5K5QE0HG1o4VnTNe8JMFF/h6GBbhAq36limSCzW5L2ahfgx3XZGIA0nP+PpuPUEtz3RvG4glfoO+4EHsBvWaRmz9iCMnax/dD3wviJL9ByNYew+crvc1wjF0uKS1pjg1zCsC5MR4JUbuATe3c5Iuun4Xdq2sMFsU4LNlWvGMOEDA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBArNUcgz84mMRYddUDDjpKagBAbUFmU+qdqlDedjVBzTreB]
+
+infra::profile::apache::pp_vhosts:
+  prd-api:
+    docroot: /var/www/api
+    servername: prd-api01-fbb.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/api'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-api.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
diff --git a/customer/fbb-passngr/prd-api02-fbb.pixelpark.net b/customer/fbb-passngr/prd-api02-fbb.pixelpark.net
index ed97d539..155babd7 100644
--- a/customer/fbb-passngr/prd-api02-fbb.pixelpark.net
+++ b/customer/fbb-passngr/prd-api02-fbb.pixelpark.net
@@ -1 +1,45 @@
 ---
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+
+infra::profile::apache::pp_vhosts:
+  prd-api:
+    docroot: /var/www/api
+    servername: prd-api02-fbb.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/api'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-api.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
diff --git a/customer/fbb-passngr/prd-poi01-fbb.pixelpark.net b/customer/fbb-passngr/prd-poi01-fbb.pixelpark.net
index ed97d539..4e00439d 100644
--- a/customer/fbb-passngr/prd-poi01-fbb.pixelpark.net
+++ b/customer/fbb-passngr/prd-poi01-fbb.pixelpark.net
@@ -1 +1,45 @@
 ---
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+
+infra::profile::apache::pp_vhosts:
+  prd-poi:
+    docroot: /var/www/poi
+    servername: prd-poi01-fbb.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/poi'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-api.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'