id.themis: import PrivateBin httpd vhost
All checks were successful
ci/lysergic/push/pipeline Pipeline was successful

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
This commit is contained in:
Georg Pfuetzenreuter 2023-03-12 17:21:32 +01:00
parent bf3aaa5ff1
commit 4ff7a39f0e
Signed by: Georg
GPG Key ID: 1ED2F138E7E6FF57

View File

@ -1,9 +1,26 @@
{%- set common = {'address': '[fd29:8e45:f292:ff80::1]', 'port': 443, 'domain': '.themis.backend.syscid.com', 'snippetsdir': '/etc/apache2/snippets.d/'} -%}
{%- macro httpdformulaexcess() -%}
LogLevel: False
ErrorLog: False
LogFormat: False
CustomLog: False
ServerAdmin: False
ServerAlias: False
{%- endmacro -%}
{%- macro httpdcommon(app) -%}
Include {{ common['snippetsdir'] }}ssl_themis.conf
<FilesMatch '\.php$'>
SetHandler 'proxy:unix:/run/php-fpm/{{ app }}.sock|fcgi://{{ app }}'
</FilesMatch>
{%- endmacro -%}
apache: apache:
sites: sites:
BookStack: BookStack:
interface: '[fd29:8e45:f292:ff80::1]' interface: '{{ common['address'] }}'
port: 443 port: {{ common['port'] }}
ServerName: bookstack.themis.backend.syscid.com ServerName: bookstack{{ common['domain'] }}
DocumentRoot: /srv/www/BookStack/ DocumentRoot: /srv/www/BookStack/
DirectoryIndex: index.php DirectoryIndex: index.php
Directory: Directory:
@ -21,19 +38,26 @@ apache:
RewriteCond '%{REQUEST_FILENAME} !-d' RewriteCond '%{REQUEST_FILENAME} !-d'
RewriteCond '%{REQUEST_FILENAME} !-f' RewriteCond '%{REQUEST_FILENAME} !-f'
RewriteCond '^ index.php [L]' RewriteCond '^ index.php [L]'
LogLevel: False {{ httpdformulaexcess() }}
ErrorLog: False
LogFormat: False
CustomLog: False
ServerAdmin: False
ServerAlias: False
Formula_Append: | Formula_Append: |
Include /etc/apache2/snippets.d/ssl_themis.conf {{ httpdcommon('BookStack') }}
AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript
SetOutputFilter DEFLATE SetOutputFilter DEFLATE
<FilesMatch '\.php$'>
SetHandler 'proxy:unix:/run/php-fpm/BookStack.sock|fcgi://BookStack' PrivateBin:
</FilesMatch> interface: '{{ common['address'] }}'
port: {{ common['port'] }}
ServerName: privatebin{{ common['domain'] }}
DocumentRoot: /srv/www/PrivateBin/public
DirectoryIndex: index.php
Directory:
/srv/www/PrivateBin/:
Options: false
AllowOverride: None
Require: all granted
{{ httpdformulaexcess() }}
Formula_Append: |
{{ httpdcommon('PrivateBin') }}
profile: profile:
bookstack: bookstack: