From: Oliver Böttcher <oliver.boettcher@pixelpark.com>
Date: Wed, 20 Sep 2017 13:24:05 +0000 (+0200)
Subject: MHK - proxy on prod
X-Git-Tag: v0.1.0~2475^2~13
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=73e5c0c10344a455b3f1b6ddcfbb106c6e2494b5;p=pixelpark%2Fhiera.git

MHK - proxy on prod
---

diff --git a/customer/mhk/www01-mhk-kueche-de.pixelpark.net.yaml b/customer/mhk/www01-mhk-kueche-de.pixelpark.net.yaml
index d439cd83..934951dd 100644
--- a/customer/mhk/www01-mhk-kueche-de.pixelpark.net.yaml
+++ b/customer/mhk/www01-mhk-kueche-de.pixelpark.net.yaml
@@ -98,6 +98,9 @@ infra::profile::apache::pp_vhosts:
           - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
         rewrite_rule:
           - '^(.*)$ https://%%{ich-trickse}{SERVER_NAME}$1 [R=301,L]'
+      - comment: 'Proxy'
+        rewrite_rule:
+          - '^/proxy/(.*)\.js$ https://$1.js [P,L,QSA]'
       - comment: 'Redirects'
         rewrite_rule:
           - '^(/)?$ https://%%{ich-trickse}{SERVER_NAME}/de-DE [R=301,L]'
@@ -174,6 +177,18 @@ infra::profile::apache::pp_vhosts:
       - 'set X-Content-Type-Options: nosniff'
       - 'set Strict-Transport-Security: max-age=31536000 env=HTTPS'
     access_log_format: remote_combined
+    custom_fragment: |
+            <Location /proxy>
+                ProxyPreserveHost off
+                Header set Cache-Control "max-age=216000, private"
+                Header unset Expires
+                ExpiresByType text/javascript "access plus 1 month"
+            </Location>
+            SSLProxyEngine on
+            ProxyVia Off
+            #SSLProxyVerify none
+            #SSLProxyCheckPeerCN off
+            #SSLProxyCheckPeerName off
 
 logstash::generic_resource:
   webapp:
diff --git a/customer/mhk/www02-mhk-kueche-de.pixelpark.net.yaml b/customer/mhk/www02-mhk-kueche-de.pixelpark.net.yaml
index c185cfbb..4dc06d97 100644
--- a/customer/mhk/www02-mhk-kueche-de.pixelpark.net.yaml
+++ b/customer/mhk/www02-mhk-kueche-de.pixelpark.net.yaml
@@ -98,6 +98,9 @@ infra::profile::apache::pp_vhosts:
           - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
         rewrite_rule:
           - '^(.*)$ https://%%{ich-trickse}{SERVER_NAME}$1 [R=301,L]'
+      - comment: 'Proxy'
+        rewrite_rule:
+          - '^/proxy/(.*)\.js$ https://$1.js [P,L,QSA]'
       - comment: 'Redirects'
         rewrite_rule:
           - '^(/)?$ https://%%{ich-trickse}{SERVER_NAME}/de-DE [R=301,L]'
@@ -174,6 +177,18 @@ infra::profile::apache::pp_vhosts:
       - 'set X-Content-Type-Options: nosniff'
       - 'set Strict-Transport-Security: max-age=31536000 env=HTTPS'
     access_log_format: remote_combined
+    custom_fragment: |
+            <Location /proxy>
+                ProxyPreserveHost off
+                Header set Cache-Control "max-age=216000, private"
+                Header unset Expires
+                ExpiresByType text/javascript "access plus 1 month"
+            </Location>
+            SSLProxyEngine on
+            ProxyVia Off
+            #SSLProxyVerify none
+            #SSLProxyCheckPeerCN off
+            #SSLProxyCheckPeerName off
 
 logstash::generic_resource:
   webapp:
diff --git a/customer/mhk/www03-mhk-kueche-de.pixelpark.net.yaml b/customer/mhk/www03-mhk-kueche-de.pixelpark.net.yaml
index f3d0c2b0..c91537d8 100644
--- a/customer/mhk/www03-mhk-kueche-de.pixelpark.net.yaml
+++ b/customer/mhk/www03-mhk-kueche-de.pixelpark.net.yaml
@@ -98,6 +98,9 @@ infra::profile::apache::pp_vhosts:
           - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
         rewrite_rule:
           - '^(.*)$ https://%%{ich-trickse}{SERVER_NAME}$1 [R=301,L]'
+      - comment: 'Proxy'
+        rewrite_rule:
+          - '^/proxy/(.*)\.js$ https://$1.js [P,L,QSA]'
       - comment: 'Redirects'
         rewrite_rule:
           - '^(/)?$ https://%%{ich-trickse}{SERVER_NAME}/de-DE [R=301,L]'
@@ -174,6 +177,18 @@ infra::profile::apache::pp_vhosts:
       - 'set X-Content-Type-Options: nosniff'
       - 'set Strict-Transport-Security: max-age=31536000 env=HTTPS'
     access_log_format: remote_combined
+    custom_fragment: |
+            <Location /proxy>
+                ProxyPreserveHost off
+                Header set Cache-Control "max-age=216000, private"
+                Header unset Expires
+                ExpiresByType text/javascript "access plus 1 month"
+            </Location>
+            SSLProxyEngine on
+            ProxyVia Off
+            #SSLProxyVerify none
+            #SSLProxyCheckPeerCN off
+            #SSLProxyCheckPeerName off
 
 logstash::generic_resource:
   webapp: