I had to make a few more changes to get lists.pagure.io working.
I haven't pushed these to all the proxies yet, will wait until I get +1's or revert.
commit 2359610fd4298fd9e54fbb49bdf809ff387639e5 Author: Kevin Fenzi kevin@scrye.com Date: Sat Sep 22 20:01:06 2018 +0000
add lists.pagure.io to varnish config
diff --git a/roles/varnish/templates/proxies.vcl.j2 b/roles/varnish/templates/proxies.vcl.j2 index 121fbec..5150c36 100644 --- a/roles/varnish/templates/proxies.vcl.j2 +++ b/roles/varnish/templates/proxies.vcl.j2 @@ -282,7 +282,7 @@ sub vcl_recv { } } } - if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" ) { + if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.pagure.io" ) { set req.backend_hint = mailman; } if (req.http.X-Forwarded-Server ~ "^apps.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^apps.stg.fedoraproject.org") {
and
commit 3363db41b29f017d1365a91feec102d0b2a5ce7f Author: Kevin Fenzi kevin@scrye.com Date: Sat Sep 22 19:36:58 2018 +0000
need certbot here and it will use the right names
diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index 65597cd..d76c963 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -904,8 +904,9 @@ - role: httpd/website site_name: lists.pagure.io sslonly: true - cert_name: lists.pagure.io.cert - SSLCertificateChainFile: lists.pagure.io.intermediate.cert + certbot: true + tags: + - lists.pagure.io
# fedorahosted is retired. We have the site here so we can redirect it.
On Sat, Sep 22, 2018 at 01:03:29PM -0700, Kevin Fenzi wrote:
I had to make a few more changes to get lists.pagure.io working.
I haven't pushed these to all the proxies yet, will wait until I get +1's or revert.
commit 2359610fd4298fd9e54fbb49bdf809ff387639e5 Author: Kevin Fenzi kevin@scrye.com Date: Sat Sep 22 20:01:06 2018 +0000
add lists.pagure.io to varnish config
diff --git a/roles/varnish/templates/proxies.vcl.j2 b/roles/varnish/templates/proxies.vcl.j2 index 121fbec..5150c36 100644 --- a/roles/varnish/templates/proxies.vcl.j2 +++ b/roles/varnish/templates/proxies.vcl.j2 @@ -282,7 +282,7 @@ sub vcl_recv { } } }
- if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" ||
req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" ) {
- if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" ||
req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.pagure.io" ) { set req.backend_hint = mailman; } if (req.http.X-Forwarded-Server ~ "^apps.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^apps.stg.fedoraproject.org") {
and
commit 3363db41b29f017d1365a91feec102d0b2a5ce7f Author: Kevin Fenzi kevin@scrye.com Date: Sat Sep 22 19:36:58 2018 +0000
need certbot here and it will use the right names
diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index 65597cd..d76c963 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -904,8 +904,9 @@
- role: httpd/website site_name: lists.pagure.io sslonly: true
- cert_name: lists.pagure.io.cert
- SSLCertificateChainFile: lists.pagure.io.intermediate.cert
- certbot: true
- tags:
- lists.pagure.io
# fedorahosted is retired. We have the site here so we can redirect it.
+1 for me, thanks :)
Pierre
+1 Please do On Sun, 23 Sep 2018 at 02:11, Pierre-Yves Chibon pingou@pingoured.fr wrote:
On Sat, Sep 22, 2018 at 01:03:29PM -0700, Kevin Fenzi wrote:
I had to make a few more changes to get lists.pagure.io working.
I haven't pushed these to all the proxies yet, will wait until I get +1's or revert.
commit 2359610fd4298fd9e54fbb49bdf809ff387639e5 Author: Kevin Fenzi kevin@scrye.com Date: Sat Sep 22 20:01:06 2018 +0000
add lists.pagure.io to varnish config
diff --git a/roles/varnish/templates/proxies.vcl.j2 b/roles/varnish/templates/proxies.vcl.j2 index 121fbec..5150c36 100644 --- a/roles/varnish/templates/proxies.vcl.j2 +++ b/roles/varnish/templates/proxies.vcl.j2 @@ -282,7 +282,7 @@ sub vcl_recv { } } }
- if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" ||
req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" ) {
- if (req.http.X-Forwarded-Server ~ "^lists.fedoraproject.org" ||
req.http.X-Forwarded-Server ~ "^lists.stg.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^lists.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.stg.fedorahosted.org" || req.http.X-Forwarded-Server ~ "^lists.pagure.io" ) { set req.backend_hint = mailman; } if (req.http.X-Forwarded-Server ~ "^apps.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^apps.stg.fedoraproject.org") {
and
commit 3363db41b29f017d1365a91feec102d0b2a5ce7f Author: Kevin Fenzi kevin@scrye.com Date: Sat Sep 22 19:36:58 2018 +0000
need certbot here and it will use the right names
diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index 65597cd..d76c963 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -904,8 +904,9 @@
- role: httpd/website site_name: lists.pagure.io sslonly: true
- cert_name: lists.pagure.io.cert
- SSLCertificateChainFile: lists.pagure.io.intermediate.cert
- certbot: true
- tags:
- lists.pagure.io
# fedorahosted is retired. We have the site here so we can redirect it.
+1 for me, thanks :)
Pierre _______________________________________________ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedorapro...
infrastructure@lists.fedoraproject.org