|
Stasiek Michalski |
81413a |
include:
|
|
Stasiek Michalski |
81413a |
{% if salt['grains.get']('include_secrets', True) %}
|
|
Stasiek Michalski |
81413a |
- secrets.role.pagure
|
|
Stasiek Michalski |
81413a |
{% endif %}
|
|
Stasiek Michalski |
81413a |
- role.common.nginx
|
|
Stasiek Michalski |
81413a |
|
|
Stasiek Michalski |
016c05 |
sshd_config:
|
|
Stasiek Michalski |
016c05 |
matches:
|
|
Stasiek Michalski |
016c05 |
git_user:
|
|
Stasiek Michalski |
016c05 |
type:
|
|
Stasiek Michalski |
016c05 |
User: git
|
|
Stasiek Michalski |
016c05 |
options:
|
|
Stasiek Michalski |
e158f1 |
AuthorizedKeysCommand: /usr/lib/pagure/keyhelper.py "%u" "%h" "%t" "%f"
|
|
Stasiek Michalski |
e158f1 |
AuthorizedKeysCommandUser: git
|
|
Stasiek Michalski |
f65a64 |
proxy:
|
|
Stasiek Michalski |
f65a64 |
type:
|
|
Stasiek Michalski |
a1f762 |
Address:
|
|
Stasiek Michalski |
a1f762 |
- 192.168.47.4
|
|
Stasiek Michalski |
a1f762 |
- 192.168.47.101
|
|
Stasiek Michalski |
a1f762 |
- 192.168.47.102
|
|
Stasiek Michalski |
f65a64 |
options:
|
|
Stasiek Michalski |
55aea5 |
AllowUsers:
|
|
Stasiek Michalski |
55aea5 |
- git
|
|
Bernhard M. Wiedemann |
5805ec |
external:
|
|
Bernhard M. Wiedemann |
5805ec |
type:
|
|
Bernhard M. Wiedemann |
5805ec |
Address:
|
|
Bernhard M. Wiedemann |
5805ec |
- 195.135.221.144
|
|
Bernhard M. Wiedemann |
5805ec |
- 2001:67c:2178:8::144
|
|
Bernhard M. Wiedemann |
5805ec |
options:
|
|
Bernhard M. Wiedemann |
5805ec |
AllowUsers:
|
|
Bernhard M. Wiedemann |
5805ec |
- git
|
|
Stasiek Michalski |
016c05 |
|
|
Stasiek Michalski |
81413a |
profile:
|
|
Stasiek Michalski |
81413a |
pagure:
|
|
Stasiek Michalski |
81413a |
database_user: pagure
|
|
Stasiek Michalski |
81413a |
database_host: 192.168.47.4
|
|
Stasiek Michalski |
81413a |
|
|
Bernhard M. Wiedemann |
3547f2 |
{% set listenhttps4=['443', 'ssl', 'http2'] %}
|
|
Bernhard M. Wiedemann |
3547f2 |
{% set listenhttps6=['[::]:443', 'ssl', 'http2'] %}
|
|
Bernhard M. Wiedemann |
5edd97 |
|
|
Stasiek Michalski |
81413a |
nginx:
|
|
Stasiek Michalski |
81413a |
ng:
|
|
Stasiek Michalski |
81413a |
servers:
|
|
Stasiek Michalski |
81413a |
managed:
|
|
Bernhard M. Wiedemann |
2f5a2e |
redirhttp.conf:
|
|
Stasiek Michalski |
81413a |
config:
|
|
Stasiek Michalski |
81413a |
- server:
|
|
Bernhard M. Wiedemann |
eb1dee |
- include: acme-challenge
|
|
Bernhard M. Wiedemann |
2f5a2e |
- server_name: '_'
|
|
Stasiek Michalski |
81413a |
- listen:
|
|
Stasiek Michalski |
81413a |
- 80
|
|
Stasiek Michalski |
81413a |
- default_server
|
|
Bernhard M. Wiedemann |
2f5a2e |
- location /:
|
|
Bernhard M. Wiedemann |
2f5a2e |
- return: '301 https://$host$request_uri'
|
|
Bernhard M. Wiedemann |
2f5a2e |
enabled: True
|
|
Bernhard M. Wiedemann |
2f5a2e |
code.opensuse.org.conf:
|
|
Bernhard M. Wiedemann |
2f5a2e |
config:
|
|
Bernhard M. Wiedemann |
2f5a2e |
- server:
|
|
Bernhard M. Wiedemann |
2f5a2e |
- server_name: code.opensuse.org
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps4 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps6 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- include: ssl-config
|
|
Stasiek Michalski |
81413a |
- location @pagure:
|
|
|
2711f9 |
- client_max_body_size: 0
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: Host $http_host
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: X-Real-IP $remote_addr
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: X-Forwarded-Proto $scheme
|
|
Stasiek Michalski |
5e7f0a |
- proxy_pass: http://unix:/srv/gitolite/.pagure_web.sock
|
|
Stasiek Michalski |
81413a |
- location /:
|
|
Stasiek Michalski |
81413a |
- try_files: $uri @pagure
|
|
Stasiek Michalski |
81413a |
- location /releases:
|
|
Stasiek Michalski |
81413a |
- alias: /srv/www/pagure-releases/
|
|
Stasiek Michalski |
b9ea47 |
- autoindex: 'on'
|
|
Stasiek Michalski |
81413a |
enabled: True
|
|
Stasiek Michalski |
016c05 |
releases.opensuse.org.conf:
|
|
Stasiek Michalski |
016c05 |
config:
|
|
Stasiek Michalski |
016c05 |
- server:
|
|
Stasiek Michalski |
016c05 |
- server_name: releases.opensuse.org
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps4 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps6 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- include: ssl-config
|
|
Stasiek Michalski |
016c05 |
- location /:
|
|
Stasiek Michalski |
016c05 |
- alias: /srv/www/pagure-releases/
|
|
Stasiek Michalski |
b9ea47 |
- autoindex: 'on'
|
|
Stasiek Michalski |
016c05 |
enabled: True
|
|
Stasiek Michalski |
016c05 |
ev.opensuse.org.conf:
|
|
Stasiek Michalski |
016c05 |
config:
|
|
Stasiek Michalski |
016c05 |
- server:
|
|
Stasiek Michalski |
016c05 |
- server_name: ev.opensuse.org
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps4 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps6 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- include: ssl-config
|
|
Stasiek Michalski |
016c05 |
- location @pagure_ev:
|
|
Stasiek Michalski |
016c05 |
- proxy_set_header: Host $http_host
|
|
Stasiek Michalski |
016c05 |
- proxy_set_header: X-Real-IP $remote_addr
|
|
Stasiek Michalski |
016c05 |
- proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for
|
|
Stasiek Michalski |
016c05 |
- proxy_set_header: X-Forwarded-Proto $scheme
|
|
Stasiek Michalski |
016c05 |
- proxy_pass: http://localhost:8080
|
|
Stasiek Michalski |
016c05 |
- location /:
|
|
Stasiek Michalski |
016c05 |
- try_files: $uri @pagure_ev
|
|
Stasiek Michalski |
016c05 |
enabled: True
|
|
Stasiek Michalski |
81413a |
pages.opensuse.org.conf:
|
|
Stasiek Michalski |
81413a |
config:
|
|
Stasiek Michalski |
81413a |
- server:
|
|
Stasiek Michalski |
81413a |
- server_name: pages.opensuse.org
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps4 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- listen: {{ listenhttps6 }}
|
|
Bernhard M. Wiedemann |
5edd97 |
- include: ssl-config
|
|
Stasiek Michalski |
81413a |
- location @pagure_docs:
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: Host $http_host
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: X-Real-IP $remote_addr
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for
|
|
Stasiek Michalski |
81413a |
- proxy_set_header: X-Forwarded-Proto $scheme
|
|
Stasiek Michalski |
5e7f0a |
- proxy_pass: http://unix:/srv/gitolite/.pagure_docs_web.sock
|
|
Stasiek Michalski |
81413a |
- location /:
|
|
Stasiek Michalski |
81413a |
- try_files: $uri @pagure_docs
|
|
Stasiek Michalski |
81413a |
enabled: True
|
|
Stasiek Michalski |
47242c |
|
|
Stasiek Michalski |
47242c |
zypper:
|
|
Stasiek Michalski |
47242c |
repositories:
|
|
Stasiek Michalski |
47242c |
openSUSE:infrastructure:pagure:
|
|
Christian Boltz |
e15791 |
baseurl: http://download.infra.opensuse.org/repositories/openSUSE:/infrastructure:/pagure/$releasever/
|
|
Stasiek Michalski |
47242c |
priority: 100
|
|
Stasiek Michalski |
47242c |
refresh: True
|