diff --git a/roles/setup-http-site-forward/handlers/main.yml b/roles/setup-http-site-forward/handlers/main.yml new file mode 100644 index 0000000..670471f --- /dev/null +++ b/roles/setup-http-site-forward/handlers/main.yml @@ -0,0 +1,5 @@ +--- +- name: restart apache2 + service: + name: apache2 + state: restarted diff --git a/roles/setup-http-site-forward/tasks/main.yml b/roles/setup-http-site-forward/tasks/main.yml new file mode 100644 index 0000000..8d0228d --- /dev/null +++ b/roles/setup-http-site-forward/tasks/main.yml @@ -0,0 +1,12 @@ +--- +- name: Add or update Apache2 site + template: + src: templates/apache-docker-forward-site.j2 + dest: /etc/apache2/sites-available/{{site_name}}.conf + notify: restart apache2 + +- name: Activate Apache2 site + command: a2ensite {{ site_name}} + args: + creates: /etc/apache2/sites-enabled/{{ site_name }}.conf + notify: restart apache2 diff --git a/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2 b/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2 new file mode 100644 index 0000000..f03e844 --- /dev/null +++ b/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2 @@ -0,0 +1,38 @@ + + ServerAdmin {{ server_admin }} + ServerName {{ site_name }} + ServerAlias {{ site_name }} + ErrorLog /var/log/apache2/{{ site_name }}-error.log + CustomLog /var/log/apache2/{{ site_name }}-access.log common + + Alias /.well-known/acme-challenge /usr/local/etc/dehydrated/challenge + + + RewriteEngine On + RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/ + RewriteRule (.*) {{forward_to}} [R=301,L] + + + + + ServerAdmin {{ server_admin }} + ServerName {{ site_name }} + ServerAlias {{ site_name }} + + ErrorLog /var/log/apache2/{{ site_name }}-error.log + CustomLog /var/log/apache2/{{ site_name }}-access.log common + + SSLEngine on + SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown + SSLCertificateFile /usr/local/etc/dehydrated/certs/{{ site_name }}/cert.pem + SSLCertificateKeyFile /usr/local/etc/dehydrated/certs/{{ site_name }}/privkey.pem + SSLCertificateChainFile /usr/local/etc/dehydrated/certs/{{ site_name }}/chain.pem + + Alias /.well-known/acme-challenge /usr/local/etc/dehydrated/challenge + + + RewriteEngine On + RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/ + RewriteRule (.*) {{forward_to}} [R=301,L] + + diff --git a/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2 b/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2 index 8e5bf88..417d40e 100644 --- a/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2 +++ b/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2 @@ -5,6 +5,8 @@ ErrorLog /var/log/apache2/{{ site_name }}-error.log CustomLog /var/log/apache2/{{ site_name }}-access.log common + Alias /.well-known/acme-challenge /usr/local/etc/dehydrated/challenge + RewriteEngine On RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/ diff --git a/tasks/httpd.yml b/tasks/httpd.yml index 8e9aa27..5dc8983 100644 --- a/tasks/httpd.yml +++ b/tasks/httpd.yml @@ -11,6 +11,13 @@ state: present +- name: Setup forward site reservierung.netz39.de + include_role: + name: setup-http-site-forward + vars: + site_name: reservierung.netz39.de + forward_to: https://codimd.pingtech.de/aYsBj5wSTviFTozd8b0P_Q + - name: Setup proxy site testredmine.netz39.de include_role: