From: sascha.strassheim <sascha.strassheim@pixelpark.com>
Date: Fri, 16 Feb 2018 13:45:12 +0000 (+0100)
Subject: changed cipher suites on my proj dev/test instances to get rid of tls1.0
X-Git-Tag: v0.1.0~1603^2~4
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=d3c1bae7b61a42111305783ad003a2a6616d4e93;p=pixelpark%2Fhiera.git

changed cipher suites on my proj dev/test instances to get rid of tls1.0
---

diff --git a/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml b/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml
index 22d0b96b..26b1dc5d 100644
--- a/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml
+++ b/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml
@@ -28,6 +28,8 @@ infra::additional_classes:
 #zabbix::agent::manage_repo: false
 #zabbix::repo::version: '3.4'
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 accounts::users:
   jenkins:
     apply: true
diff --git a/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml b/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml
index b3c5ee2e..1e056c8c 100644
--- a/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml
+++ b/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml
@@ -28,6 +28,8 @@ infra::additional_classes:
 #zabbix::agent::manage_repo: false
 #zabbix::repo::version: '3.4'
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 accounts::users:
   jenkins:
     apply: true
diff --git a/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml b/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml
index 827ffe3d..1e14bc44 100644
--- a/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml
+++ b/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml
@@ -5,6 +5,8 @@ infra::additional_classes:
   - infra::profile::drupal
   - solr
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 sudo::configs:
   becomeApache:
     priority: "06"
diff --git a/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml b/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml
index cd58dfab..bdec46bd 100644
--- a/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml
+++ b/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml
@@ -5,6 +5,8 @@ infra::additional_classes:
   - infra::profile::drupal
   - solr
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'  
+
 sudo::configs:
   becomeApache:
     priority: "06"
@@ -24,7 +26,7 @@ accounts::users:
   andreas.pinto-koehler:
     apply: true
     sudo: true
-    
+
 mysql::server::root_password: ENC[PKCS7,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]
 
 
diff --git a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
index 17ca5306..d179b5f6 100644
--- a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
@@ -9,6 +9,8 @@ infra::additional_classes:
   - infra::profile::postfix
   - infra::profile::apache_php
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 # users and deploy users
 accounts::users:
   jenkins: