From 47363f56ec61343082d3ae724a46de37b90324ca Mon Sep 17 00:00:00 2001 From: Miroslav Suchý Date: Mar 25 2020 08:45:46 +0000 Subject: retrace: move file to correct place --- diff --git a/roles/abrt/faf-pre/files/httpd/retrace_ssl.conf.j2 b/roles/abrt/faf-pre/files/httpd/retrace_ssl.conf.j2 deleted file mode 100644 index 502db4f..0000000 --- a/roles/abrt/faf-pre/files/httpd/retrace_ssl.conf.j2 +++ /dev/null @@ -1,27 +0,0 @@ - - SSLEngine on - SSLProtocol {{ ssl_protocols }} - # Use secure TLSv1.1 and TLSv1.2 ciphers - SSLCipherSuite {{ ssl_ciphers }} - SSLHonorCipherOrder on - Header always add Strict-Transport-Security "max-age=31536000; preload" - - {% if not devel %} - # NA - {% else %} - SSLCertificateFile /etc/letsencrypt/live/{{ public_hostname }}/cert.pem - SSLCertificateKeyFile /etc/letsencrypt/live/{{ public_hostname }}/privkey.pem - SSLCertificateChainFile /etc/letsencrypt/live/{{ public_hostname }}/fullchain.pem - {% endif %} - - ServerName {{ public_hostname }} - - WSGIPassAuthorization On - WSGIPythonOptimize 1 - WSGISocketPrefix /srv/faf/wsgi - WSGIDaemonProcess faf user=faf group=faf processes=3 threads=5 - WSGIScriptAlias /faf /usr/lib/python3.6/site-packages/webfaf/hub.wsgi process-group=faf application-group=%{GLOBAL} - - WSGIProcessGroup 127.0.0.1 - - diff --git a/roles/abrt/faf-pre/templates/httpd/retrace_ssl.conf.j2 b/roles/abrt/faf-pre/templates/httpd/retrace_ssl.conf.j2 new file mode 100644 index 0000000..502db4f --- /dev/null +++ b/roles/abrt/faf-pre/templates/httpd/retrace_ssl.conf.j2 @@ -0,0 +1,27 @@ + + SSLEngine on + SSLProtocol {{ ssl_protocols }} + # Use secure TLSv1.1 and TLSv1.2 ciphers + SSLCipherSuite {{ ssl_ciphers }} + SSLHonorCipherOrder on + Header always add Strict-Transport-Security "max-age=31536000; preload" + + {% if not devel %} + # NA + {% else %} + SSLCertificateFile /etc/letsencrypt/live/{{ public_hostname }}/cert.pem + SSLCertificateKeyFile /etc/letsencrypt/live/{{ public_hostname }}/privkey.pem + SSLCertificateChainFile /etc/letsencrypt/live/{{ public_hostname }}/fullchain.pem + {% endif %} + + ServerName {{ public_hostname }} + + WSGIPassAuthorization On + WSGIPythonOptimize 1 + WSGISocketPrefix /srv/faf/wsgi + WSGIDaemonProcess faf user=faf group=faf processes=3 threads=5 + WSGIScriptAlias /faf /usr/lib/python3.6/site-packages/webfaf/hub.wsgi process-group=faf application-group=%{GLOBAL} + + WSGIProcessGroup 127.0.0.1 + +