====== apache ====== Formulas to set up and configure the Apache HTTP server. .. note:: See the full `Salt Formulas installation and usage instructions `_. Available states ================ .. contents:: :local: ``apache`` ---------- Installs the Apache package and starts the service. ``apache.config`` ----------------- Configures apache based on os_family ``apache.certificates`` ----------------- Deploy SSL certificates from pillars ``apache.mod_mpm`` ------------------ Configures the apache mpm modules on Debian ``mpm_prefork``, ``mpm_worker`` or ``mpm_event`` (Debian Only) ``apache.modules`` ------------------ Enables and disables Apache modules. ``apache.mod_rewrite`` ---------------------- Enabled the Apache module mod_rewrite (Debian and FreeBSD only) ``apache.mod_proxy`` ------------------- Enables the Apache module mod_proxy. (Debian and FreeBSD only) ``apache.mod_proxy_http`` ------------------------- Enables the Apache module mod_proxy_http and requires the Apache module mod_proxy to be enabled. (Debian Only) ``apache.mod_wsgi`` ------------------- Installs the mod_wsgi package and enables the Apache module. ``apache.mod_actions`` ---------------------- Enables the Apache module mod_actions. (Debian Only) ``apache.mod_headers`` ---------------------- Enables the Apache module mod_headers. (Debian Only) ``apache.mod_pagespeed`` ------------------------ Installs and Enables the mod_pagespeed module. (Debian and RedHat Only) ``apache.mod_perl2`` ------------------- Installs and enables the mod_perl2 module (Debian and FreeBSD only) ``apache.mod_geoip`` ------------------- Installs and enables the mod_geoIP (RedHat only) ``apache.mod_php5`` ------------------- Installs and enables the mod_php5 module ``apache.mod_cgi`` --------------------- Enables mod_cgi. (FreeBSD only) ``apache.mod_fcgid`` -------------------- Installs and enables the mod_fcgid module ``apache.mod_dav_svn`` -------------------- Installs and enables the mod_dav_svn module (Debian only) ``apache.mod_security`` ---------------------- Installs an enables the `Apache mod_security2 WAF``_ using data from Pillar. (Debian and RedHat Only) Allows you to install the basic Core Rules (CRS) and some basic configuration for mod_security2 ``apache.mod_security.rules`` ----------------------------- This state can create symlinks based on basic Core Rules package. (Debian only) Or it can distribute a mod_security rule file and place it /etc/modsecurity/ ``mod_socache_shmcb`` --------------------- Enables mod_socache_shmcb. (FreeBSD only) ``apache.mod_ssl`` ---------------------- Installs and enables the mod_ssl module (Debian, RedHat and FreeBSD only) ``apache.mod_suexec`` --------------------- Enables mod_suexec. (FreeBSD only) ``apache.mod_vhost_alias`` ---------------------- Enables the Apache module vhost_alias (Debian Only) ``apache.mod_remoteip`` ---------------------- Enables and configures the Apache module mod_remoteip using data from Pillar. (Debian Only) ``apache.own_default_vhost`` -------------------------- Replace default vhost with own version. By default, it's 503 code. (Debian Only) ``apache.no_default_vhost`` -------------------------- Remove the default vhost. (Debian Only) ``apache.vhosts.standard`` -------------------------- Configures Apache name-based virtual hosts and creates virtual host directories using data from Pillar. Example Pillar: .. code:: yaml apache: sites: example.com: # must be unique; used as an ID declaration in Salt; also passed to the template context as {{ id }} template_file: salt://apache/vhosts/standard.tmpl When using the provided templates, one can use a space separated list of interfaces to bind to. For example, to bind both IPv4 and IPv6: .. code:: yaml apache: sites: example.com: interface: '1.2.3.4 [2001:abc:def:100::3]' ``apache.manage_security`` -------------------------- Configures Apache's security.conf options by reassinging them using data from Pillar. ``apache.debian_full`` ---------------------- Installs and configures Apache on Debian and Ubuntu systems. These states are ordered using the ``order`` declaration. Different stages are divided into the following number ranges: 1) apache will use 1-500 for ordering 2) apache will reserve 1 -100 as unused 3) apache will reserve 101-150 for pre pkg install 4) apache will reserve 151-200 for pkg install 5) apache will reserve 201-250 for pkg configure 6) apache will reserve 251-300 for downloads, git stuff, load data 7) apache will reserve 301-400 for unknown purposes 8) apache will reserve 401-450 for service restart-reloads 9) apache WILL reserve 451-460 for service.running 10) apache will reserve 461-500 for cmd requiring operational services Example Pillar: .. code:: yaml apache: register-site: # any name as an array index, and you can duplicate this section {{UNIQUE}}: name: 'my name' path: 'salt://path/to/sites-available/conf/file' state: 'enabled'