summaryrefslogtreecommitdiff
path: root/ansible
Commit message (Collapse)AuthorAgeFilesLines
* lighttpd: Improve SSL configurationPedro Alvarez2016-01-261-0/+3
| | | | Change-Id: I65e3386d5aec31a8bb8a02191b15ecc38ee33f43
* lighttpd: Only require HTTPS authentication for Gitano URLsPedro Alvarez2016-01-261-13/+20
| | | | | | | | | | | | | | | | | | | | | | | | Previously the whole of git.baserock.org was effectively inaccessible over HTTPS, because it would require a username and password for all HTTPS requests. This was done to ensure that we don't make Trove "insecure by default" by allowing access to hidden repos over anonymous HTTPS. Firstly, we only need to require auth for the actual Gitano URLs. The other ones (cgit, lc-status.html, releases) are identical over HTTP and HTTPS anyway, so there's no point in hiding them on one protocol but not the other. Also, I have now verified that Gitano's CGI scripts authenticate based on the REMOTE_USER variable set by mod_auth, and if this isn't set they treat the request as anonymous and correctly deny any requests that the anonymous user doesn't have permissions for. This is noted in a comment. The behaviour of Gitano-over-HTTPS in Trove should be completely unchanged by this commit, however. Change-Id: Ie5dbc3bd3ab8d37ef3e5c08c9541c571944e1f58
* Redirect cgi-bin/cgit.cgi/ from urls, replace it with cgit/Lauren Perry2016-01-251-0/+14
| | | | | | | | | This is much less typing and gives us neater URLs! The paths /baserock and /delta are also now specially redirected to /cgit/baserock and /cgit/delta, for the benefit of the extra-lazy. Change-Id: I9cda805c0a6134fb91595bbf8f3e74668d745327
* lighttpd: Create handler for restarting servicesPedro Alvarez2015-11-192-19/+19
| | | | Change-Id: I193216280797e5453ab1606d6a8f83e27bd0a28e
* lighttpd: Format Ansible codePedro Alvarez2015-11-191-9/+28
| | | | Change-Id: I7c5561aeace4dc7ebdf4b86b3def8d8e64b9c217
* lighttpd: Add support for installing SSL certsPedro Alvarez2015-11-192-2/+96
| | | | Change-Id: I33c74dc19e5835c65740f483aae89a1e8e415f0c
* lighttpd: Remove unused variablesPedro Alvarez2015-11-191-2/+1
| | | | Change-Id: Icef0a0a7ed2d34007ed96ef582d61a62d0e5d38e
* Stop using regex_replace in 'creates' arguments.Pedro Alvarez2015-04-242-4/+8
| | | | | | | | | | Use the dict-form for the creates arguments, to avoid problems with strings interpolations. This solved problems on a Trove with TROVE_ID 'baserock-clone', because it wasn't recognising the already exsisting repositories. Change-Id: Ic613f732596aae9d81b0c17c8fd1e846d69f58db
* Merge branch 'sam/useless-settings'Sam Thursfield2015-03-121-1/+0
|\ | | | | | | | | Reviewed-By: Pedro Alvarez <pedro.alvarez@codethink.co.uk> Reviewed-By: Adam Coldrick <adam.coldrick@codethink.co.uk>
| * Remove lorry-controller settings that don't do anythingSam Thursfield2015-03-111-1/+0
| | | | | | | | | | These settings had a meaning for the old implementation of lorry-controller, but are ignored by the current implementation.
* | Changes needed to work with versions of systemd >= v215Pedro Alvarez2015-02-121-1/+9
|/ | | | | | The stderr string of the `systemctl enable` command has changed in the commit 749ebb2da4933de68bfaa4d6f6ffd9e4692ee547 of systemd. We use this string to trigger another Ansible task.
* Remove all mention of Mason from trove-setupSam Thursfield2015-01-303-25/+1
| | | | | | | | | | | | | The Mason referred to here is the 1st version of the Mason continuous delivery tool. There have been no instances of this for two years. We have made two subsequent Mason implementations since then which don't require coupling in Trove in order to work. As well as removing unneeded configuration, this will fix the misleading warning that users see on Git pushes: remote: [git.baserock.org] Notifying Mason of changes... remote: [git.baserock.org] Notification failed somehow
* Enable Lorry Controller's new old job removal unitsbaserock/pedroalvarez/old-jobs-removalLars Wirzenius2014-10-221-0/+14
|
* Make http the default upstream protocolbaserock/richardipsum/default-upstream-proto-httpRichard Ipsum2014-09-181-1/+1
|
* Allow the configuration of troves without UPSTREAM_TROVEPedro Alvarez2014-09-173-4/+22
| | | | | | | Now UPSTREAM_TROVE is not mandatory to configure a Trove, and if the value is not set, then the configuration of the lorry controller (lorry-controller.conf) won't include any configuration for an upstream Trove.
* Enable the lorry-controller-remove-ghost-jobs service / timerbaserock/liw/de-ghostPedro Alvarez2014-09-081-0/+15
|
* Allow Trove mirroring protocol to be set at deployment timebaserock/michaeldrake/mason-develMichael Drake2014-08-051-0/+3
| | | | | | This allows downstream troves that only need to access publically available content to be able to operate without configuring ssh keys on the upstream trove.
* Add Ansible scriptsPedro Alvarez2014-07-1421-0/+640