Commit Graph

50 Commits

Author SHA1 Message Date
Andrea Dell'Amico 9e0fcdc4fa The directive that blocks dotfile requests is now under a conditional. See https://support.d4science.org/issues/16586 2019-04-19 13:37:29 +02:00
Andrea Dell'Amico 1d7d31b8f3 nginx virtualhost template: give a way to change the error directory. 2019-02-17 13:53:08 +01:00
Andrea Dell'Amico d3c2d7b190 Fix the php proxy configuration. 2018-12-18 12:47:32 +01:00
Andrea Dell'Amico f9251445f3 Add a special target for the php redirections. 2018-12-17 16:26:26 +01:00
Andrea Dell'Amico 572c94edf4 library/roles/nginx/templates/nginx-virthost.j2: Work around a problem with the websockets attivation. 2018-12-10 17:02:04 +01:00
Andrea Dell'Amico 466a17f352 library/roles/nginx/templates/nginx-virthost.j2: Fix the websockets configuration. 2018-11-30 20:30:26 +01:00
Andrea Dell'Amico 80d749b7cf library/roles/nginx/templates/nginx-virthost.j2: Support websockets inside a 'server' definition but also outside a 'location' one. 2018-11-30 20:10:00 +01:00
Andrea Dell'Amico 13d8864f80 library/roles/nginx/templates/nginx-server-ssl.conf.j2: Fix the syntax of a comparison. 2018-09-07 18:16:45 +02:00
Andrea Dell'Amico da08066eb5 Fix a duplicate entry. 2018-07-05 16:23:15 +02:00
Andrea Dell'Amico 92622b285e Add support for ACLs 2018-07-03 17:03:10 +02:00
Andrea Dell'Amico 66f2565c51 Fix a typo into the nginx default template. 2018-05-16 18:27:27 +02:00
Andrea Dell'Amico b0d65d4a17 nginx-virthost: Fix a problem with the websockets configuration. 2018-04-23 17:48:57 +02:00
Andrea Dell'Amico dab8ed95a4 Fix a typo in the nginx cors snippet. 2018-03-13 11:32:35 +01:00
Andrea Dell'Amico 53ec9c29db Change the CORS settings again. 2018-03-12 17:48:00 +01:00
Andrea Dell'Amico 5874accb90 nginx cors: the methods can be customised now. See https://issue.openaire.research-infrastructures.eu/issues/3365 2018-03-11 14:34:22 +01:00
Andrea Dell'Amico f8cbd7ad17 library/roles/nginx: Give the possibility to manage CORS inside the default virtualhost. 2018-02-27 14:17:11 +01:00
Andrea Dell'Amico 4f758e5d21 library/roles/nginx/templates/nginx-proxy-params.conf.j2: Add a new parameter to work better when keepalive is active. 2017-12-15 19:11:44 +01:00
Andrea Dell'Amico a40456ea1c nginx template: give the possibility to add proxy redirections without including the global proxy configurations. 2017-11-23 17:48:56 +01:00
Andrea Dell'Amico 174b54c9f9 nginx: return 404 when someone tries to access files or directories that start with a . 2017-11-15 01:05:07 +01:00
Andrea Dell'Amico 14f4fc2c08 nginx: create the document root if different from the default. Deny access to the filenames that start with a . 2017-11-07 00:09:01 +01:00
Andrea Dell'Amico 47581ba9ef nginx cors: accept more headers. 2017-10-30 15:41:31 +01:00
Tommaso Piccioli fcc48bc005 fix in nginx-cors.conf 2017-09-04 11:57:11 +02:00
Andrea Dell'Amico 4f2b013b6f nginx: be ready for a stronger ssl configuration. 2017-08-18 15:47:17 +02:00
Andrea Dell'Amico 6c0ebbe18e Revert the nginx_cors_limit_origin defaults. Now it's True. 2017-08-16 18:15:27 +02:00
Andrea Dell'Amico 19518b92b0 library/roles/nginx/templates/nginx-cors.conf.j2: Simplyfy the CORS configuration. 2017-08-16 15:16:03 +02:00
Andrea Dell'Amico 9d88f841a3 Change the CORS snippet again and introduce a new variable so that the smartgears nginx template is now backward compatible and still able to cope with the CORS settings needed by some geoserver. 2017-07-22 15:52:20 +02:00
Andrea Dell'Amico ee0c922ddf Fix a typo in the nginx CORS snippet. 2017-07-22 15:19:44 +02:00
Andrea Dell'Amico 9fe2c4463c Rework the CORS configuration again. Now we can limit the origin and maintain all the other settings. 2017-07-21 18:45:34 +02:00
Andrea Dell'Amico f1b600aefd Changed the CORS configuration to be more liberal when we do not want to restrict it to a list of domains. 2017-07-21 18:40:33 +02:00
Andrea Dell'Amico cd7baca5d8 library/roles/nginx: handle the certificates paths when not using letsencrypt without duplicating files.
d4science-ghn-cluster: cleanup the couchbase web console configuration.
2017-07-03 14:59:38 +02:00
Tommaso Piccioli 2ab3561c55 ssl proxy on couchbase console 2017-06-30 17:29:08 +02:00
Andrea Dell'Amico 6521d90712 library/roles/nginx: Fixes to the generic virtualhost and to the proxy configuration so that all works with nginx installed from the PPA. 2017-03-16 11:42:07 +01:00
Andrea Dell'Amico cf33f2a586 library/roles/nginx: Add tasks that configure the basic authentication. Fix the generic virtualhost template. 2017-02-01 17:12:54 +01:00
Andrea Dell'Amico cffd1ce098 library/roles/nginx: Optionally limit CORS access. 2016-11-28 16:45:01 +01:00
Andrea Dell'Amico 64f8947dd5 library/roles/nginx: Add a snippet to enable CORS. 2016-11-28 16:41:56 +01:00
Andrea Dell'Amico 22a64b8965 library/roles/nginx: Permit the customization of the large_client_header_buffers settings. 2016-11-18 11:08:14 +01:00
Andrea Dell'Amico 6b6fb1c24f library/roles/nginx: More changes to the unified virtualhost template. 2016-11-09 14:28:17 +01:00
Andrea Dell'Amico 731c27cc5b library/roles/nginx/templates/nginx-proxy-params.conf.j2: Some proxy statements must be conditional to the presence of an haproxy load balancer. 2016-10-14 17:24:20 +02:00
Andrea Dell'Amico b4239da6ae library/roles/nginx/templates/nginx-server-ssl.conf.j2: Fix the behaviour when letsencrypt is not installed. 2016-10-03 18:44:18 +02:00
Andrea Dell'Amico 4a54b1d96f library/roles/nginx/templates: Rename the ssl snippet. 2016-10-03 17:44:44 +02:00
Andrea Dell'Amico 45f5fa6839 library/roles/nginx: Add a ssl snippet. 2016-10-03 16:48:23 +02:00
Andrea Dell'Amico 272c0eea0d library/roles/nginx: Manage the main configuration file.
library/roles/nginx: Provide parts of embeddable optional configurations inside /etc/nginx/snippets.
2016-09-27 19:33:52 +02:00
Andrea Dell'Amico 978542e261 library/roles/nginx: Add a configuration snippet to support websocket reverse proxy. 2016-09-21 17:54:20 +02:00
Andrea Dell'Amico d6e985159e library/roles/nginx: New parameters to customize the ldap authentication via pam. 2016-07-20 16:10:57 +02:00
Andrea Dell'Amico 0653dfd8d0 library/roles/nginx: First steps to a unified virtualhost template management. 2016-07-03 12:39:44 +02:00
Andrea Dell'Amico 39f1bbcef7 infrastructure-services/code-repo.yml: Add letsencrypt to manage the ssl certificates.
library/roles/nginx/templates/letsencrypt-proxy.conf.j2: Fix the nginx config, again.
2016-04-27 18:37:24 +02:00
Andrea Dell'Amico f74f453a09 library/roles/nginx/templates/letsencrypt-proxy.conf.j2: Fix the letsencrypt configuration. 2016-04-27 16:45:09 +02:00
Andrea Dell'Amico 083d71b4d4 library/roles/nginx: letsencrypt hook and configuration for letsencrypt. See https://support.d4science.org/issues/3260. 2016-04-22 18:55:20 +02:00
Andrea Dell'Amico 5b3a972453 d4science-gcube/roles/mediawiki_setup: Fix the nginx virtualhost template to support the gcube mediawiki configuration 2015-08-05 19:15:19 +02:00
Andrea Dell'Amico 73d37f81a6 Major refactoring. Moved all the library roles under 'library/roles' and changed all the occurrances inside all the playbooks. 2015-05-28 11:32:57 +02:00