tpiccioli
/
ansible-roles
forked from ISTI-ansible-roles/ansible-roles
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

library/roles/apache/templates: Fix the ACL rules in the server info and server status configurations.

This commit is contained in:
Andrea Dell'Amico 2016-04-04 18:56:51 +02:00
parent c1c59a9c7b
commit 29131c599f
2 changed files with 23 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
apache/templates/info.conf.j2
View File

@ -4,17 +4,17 @@
# http://servername/server-info (requires that mod_info.c be loaded). # http://servername/server-info (requires that mod_info.c be loaded).
# Uncomment and change the "192.0.2.0/24" to allow access from other hosts. # Uncomment and change the "192.0.2.0/24" to allow access from other hosts.
# #
<Location {{ apache_info_location }}> <Location {{ apache_info_location }}>
SetHandler server-info SetHandler server-info
Require local Require local
{% if nagios_monitoring_server_ip is defined %} {% if nagios_monitoring_server_ip is defined %}
{% for addr in nagios_monitoring_server_ip %} {% for addr in nagios_monitoring_server_ip %}
Require ip {{ addr }}/24 Require ip {{ addr }}
{% endfor %} {% endfor %}
{% endif %} {% endif %}
{% for addr in apache_info_allowed_hosts %} {% for addr in apache_info_allowed_hosts %}
Require ip {{ addr }} Require ip {{ addr }}
{% endfor %} {% endfor %}
</Location> </Location>
</IfModule> </IfModule>

36
apache/templates/status.conf.j2
View File

@ -1,32 +1,32 @@
<IfModule mod_status.c> <IfModule mod_status.c>
# Allow server status reports generated by mod_status, # Allow server status reports generated by mod_status,
# with the URL of http://servername/server-status # with the URL of http://servername/server-status
# Uncomment and change the "192.0.2.0/24" to allow access from other hosts. # Uncomment and change the "192.0.2.0/24" to allow access from other hosts.
<Location {{ apache_status_location }}> <Location {{ apache_status_location }}>
SetHandler server-status SetHandler server-status
Require local Require local
{% if nagios_monitoring_server_ip is defined %} {% if nagios_monitoring_server_ip is defined %}
{% for addr in nagios_monitoring_server_ip %} {% for addr in nagios_monitoring_server_ip %}
Require ip {{ addr }}/24 Require ip {{ addr }}
{% endfor %} {% endfor %}
{% endif %} {% endif %}
{% for addr in apache_status_allowed_hosts %} {% for addr in apache_status_allowed_hosts %}
Require ip {{ addr }} Require ip {{ addr }}
{% endfor %} {% endfor %}
</Location> </Location>
# Keep track of extended status information for each request # Keep track of extended status information for each request
ExtendedStatus On ExtendedStatus On
# Determine if mod_status displays the first 63 characters of a request or # Determine if mod_status displays the first 63 characters of a request or
# the last 63, assuming the request itself is greater than 63 chars. # the last 63, assuming the request itself is greater than 63 chars.
# Default: Off # Default: Off
#SeeRequestTail On #SeeRequestTail On
<IfModule mod_proxy.c> <IfModule mod_proxy.c>
# Show Proxy LoadBalancer status in mod_status # Show Proxy LoadBalancer status in mod_status
ProxyStatus On ProxyStatus On
</IfModule> </IfModule>
</IfModule> </IfModule>