Commit graph

53 commits

Author SHA1 Message Date
444ac2363c apache: Initial CentOS/RedHat 7 support. 2016-04-08 12:33:51 +03:00
Ossi Salmi
0a4798d619 apache: Make SSLProxyVerifyDepth configurable 2015-12-10 13:45:38 +02:00
Ossi Salmi
b77decaf8a apache: Add support for configuring SSLProxy with key authentication 2015-06-16 12:39:43 +03:00
Ossi Salmi
85a37f8624 apache: Add option to set the MaxClients directive 2015-06-08 12:58:03 +03:00
46938f1b07 apache: Allow setting service name for kerberos authentication. 2015-04-10 13:54:21 +03:00
cea629a380 apache: Use $ssl::ciphersuites::default_ciphersuites for SSL sites. 2014-12-19 12:36:18 +02:00
Ossi Salmi
0fbddae702 apache: Disable SSLv3 2014-11-13 11:02:40 +02:00
Ossi Salmi
d3d9fb567c apache: Update templates based on latest CentOS package 2014-04-13 16:22:16 +03:00
Ossi Salmi
d1b9a88e1b apache: Always disable UserDir for root 2014-04-13 16:03:29 +03:00
Ossi Salmi
1b87c7bd04 apache: Fix file names with port based SSL virtual hosts
Ubuntu 10.04's apache ignores config files with colons in the name.
2013-11-05 10:16:19 +02:00
Ossi Salmi
53a0422843 apache: Add support for port based SSL virtual hosts 2013-09-24 15:11:12 +03:00
06eb2bdf9a apache: Added proxy support to apache::sslsite. 2013-09-24 11:40:56 +03:00
6cebef3715 apache: Combined proxy.http.conf.erb to site.http.conf.erb. 2013-09-24 11:21:29 +03:00
Ossi Salmi
e6d7688bdc apache: Add support for HTTP Strict Transport Security 2013-08-14 14:31:23 +03:00
Ossi Salmi
a3fb12fe37 apache: Increased proxy CacheMaxFileSize to 100 MB 2013-07-01 12:16:19 +03:00
Ossi Salmi
341c86a0a0 apache: Added support for forward proxy with optional caching 2013-06-29 23:25:47 +03:00
Ossi Salmi
345a8f9589 apache: Allow disabling mod_wsgi's embedded mode 2013-06-27 19:37:04 +03:00
Ossi Salmi
c8c5f097b4 Merge branch 'master' into puppet3 2013-05-08 00:28:29 +03:00
945a9f2af3 apache: Added support for proxy http sites. 2013-05-07 10:03:22 +03:00
Ossi Salmi
dc51af1ca2 Updated all templates to use instance variables 2013-05-05 00:07:55 +03:00
Ossi Salmi
39f16b7c6c apache: Changed Ubuntu's server limits to match CentOS's defaults 2013-04-24 21:51:13 +03:00
7bd26f33d3 Fixed Apache module for Fedora 18 (eg. Apache 2.4 series). 2013-04-24 08:44:19 +03:00
Ossi Salmi
8bcbd022a4 apache: Disable directory indexes by default 2013-04-03 14:58:21 +03:00
18af82f97f Fixed Apache ssl.conf for Fedora 18. 2013-01-23 17:51:03 +02:00
936499737c Fixed operatingsystemrelease comparison from httpsd.conf. 2013-01-23 11:12:05 +02:00
b10de9c0b2 Fixed apache module loading for Fedora 18. 2013-01-23 10:06:32 +02:00
Ossi Herrala
cd91e65ab2 Fix too widely open regexp targeting SSL/TLS settings of Microsoft
Internet Explorer.

See rant:

  http://newestindustry.org/2007/06/06/dear-apache-software-foundation-fix-the-msie-ssl-keepalive-settings/

This is also ack'ed by Apache and fixed in their httpd's trunk:
  https://issues.apache.org/bugzilla/show_bug.cgi?id=49484
  http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in?view=markup
2012-11-22 13:44:27 +00:00
Ossi Salmi
98767cfb2a Merge tmakinen/puppet
Conflicts:
	dovecot/manifests/init.pp
	libvirt/manifests/init.pp
	munin/manifests/init.pp
	puppet/manifests/init.pp
	tftp/manifests/init.pp
2012-11-16 19:40:31 +02:00
Paavo Pokkinen
eebd1512cf puppet 3.0 fixes 2012-10-10 15:13:50 +03:00
Ossi Salmi
24ecb51f6f Added support for RHEL and did some syntax cleaning
Assume that "RedHat" also works where "CentOS" does.
2012-09-05 17:29:36 +03:00
5901b6d25c Improved ciphers from apache::sslsite to prevent BEAST attacks. 2012-05-09 14:25:20 +03:00
Ossi Salmi
ed65daf9d8 Fixed apache config includes on Ubuntu 2012-01-03 14:30:44 +02:00
28ebdf5820 Fixed apache configs for CentOS 6.0. 2011-08-03 20:17:28 +03:00
cf2f50e7e5 Removed 56 bit ciphers from Apache SSL configs. 2011-08-03 10:29:32 +03:00
Ossi Salmi
9cc2c06922 Added support for IP-based SSL virtual hosts in apache 2011-05-26 22:58:31 +03:00
Ossi Salmi
7b10e62e1c Fixed apache user and group handing on Ubuntu 2011-03-09 14:41:04 +02:00
e3b6cca7a4 Migrated $httpd_user, $httpd_group, $httpsd_user and $httpsd_group variables to use format $apache::server::{user,group} and $apache::sslserver::{user,group}. 2011-02-25 11:46:57 +02:00
Ossi Salmi
ff6b42fc09 Added apache modules 2010-11-09 15:57:12 +02:00
Ossi Salmi
dddba9202f Added checks for domain variable in apache module 2010-11-08 14:42:43 +02:00
Ossi Salmi
45b597c29c Replaced fqdn variables with homename 2010-11-08 14:42:41 +02:00
Ossi Salmi
63440a18d4 Improved apache virtual host configuration
Additional configuration files are now fetched from the
puppet file server.
2010-11-05 22:56:24 +02:00
Ossi Salmi
eca8e074e5 Added webalizer support to apache module 2010-11-05 22:56:22 +02:00
Ossi Salmi
42fd785e66 Added virtual host support for Debian/Ubuntu to apache module 2010-11-05 22:56:20 +02:00
Ossi Salmi
fa53a19798 Added initial support for Debian and Ubuntu to apache module. 2010-10-23 16:30:34 +03:00
Ossi Salmi
ced754f674 Add $aliases and $redirect to apache::site, ensure default vhost is loaded first. 2010-02-18 20:07:56 +02:00
Ossi Salmi
9c853fa445 Added variables for user and group to apache configs, commented out UserDir. 2009-12-01 19:29:40 +02:00
9151b42da7 Enabled password fallback for apache kerberos authentication. 2009-11-26 22:57:12 +02:00
Ossi Salmi
66c88cd9cd Cleaned up apache module some more. 2009-11-26 20:05:29 +02:00
0d5d809519 Added mod_auth_kerb module to apache. 2009-11-26 10:22:34 +02:00
f6989ac734 Fixed apache main configs to work on Fedora. 2009-11-26 10:01:12 +02:00