Freeze break request: allow https with ask.fedoraproject.org

Kevin Fenzi kevin at scrye.com
Mon Oct 29 22:18:20 UTC 2012


I've tested this in stg and it seemed to work fine there except it
wasn't able to redirect properly (since production didn't have it
setup). 

I think this is now the change needed to enable in production: 

kevin
--
diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp
index d9a7b6a..009fa3f 100644
--- a/manifests/services/proxy.pp
+++ b/manifests/services/proxy.pp
@@ -348,7 +348,6 @@ class proxy {
         sSLCertificateChainFile => "wildcard.fedoraproject.org.intermediate.cert",
     }
 
-    if $environment == "staging" {
     httpd::website { "ask.fedoraproject.org":
         ips            => $wildcard_fpo_ips,
         server_aliases => [ "ask.stg.fedoraproject.org" ],
@@ -357,13 +356,6 @@ class proxy {
         cert_name      => "wildcard.fedoraproject.org",
         sSLCertificateChainFile => "wildcard.fedoraproject.org.intermediate.cert",
     }
-    } else {
-    httpd::website { "ask.fedoraproject.org":
-        ips            => $wildcard_fpo_ips,
-        server_aliases => [ "ask.stg.fedoraproject.org" ],
-        ssl            => false,
-    }
-    }
 
     httpd::website { "darkserver.fedoraproject.org":
         ips            => $wildcard_fpo_ips,
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20121029/105fd245/attachment.sig>


More information about the infrastructure mailing list