Set up and configure the Apache HTTP server https://github.com/saltstack-formulas/apache-formula
Go to file
2018-01-16 10:04:16 +01:00
.github Pull Request Template 2016-04-11 09:59:39 -05:00
apache Fix conflict ID #214 2018-01-16 10:04:16 +01:00
test Add mod_security management 2016-05-11 15:41:07 -03:00
.gitignore Add mod_security management 2016-05-11 15:41:07 -03:00
.kitchen.yml Add mod_security management 2016-05-11 15:41:07 -03:00
FORMULA Initial commit of SPM FORMULA 2015-07-07 09:45:40 -06:00
LICENSE Update LICENSING year 2015-03-20 20:10:44 -04:00
pillar.example Manage TLS defaults 2018-01-10 01:24:17 +01:00
README.rst Update README for new mod (xsendfile, fastcgi, proxy_fcgi) 2017-05-17 06:41:55 +02:00

apache

Formulas to set up and configure the Apache HTTP server.

Available states

apache

Installs the Apache package and starts the service.

apache.config

Configures apache based on os_family

apache.certificates -----------------

Deploy SSL certificates from pillars

apache.mod_mpm

Configures the apache mpm modules on Debian mpm_prefork, mpm_worker or mpm_event (Debian Only)

apache.modules

Enables and disables Apache modules.

apache.mod_rewrite

Enabled the Apache module mod_rewrite (Debian and FreeBSD only)

apache.mod_proxy -------------------

Enables the Apache module mod_proxy. (Debian and FreeBSD only)

apache.mod_proxy_http

Enables the Apache module mod_proxy_http and requires the Apache module mod_proxy to be enabled. (Debian Only)

apache.mod_proxy_fcgi

Enables the Apache module mod_proxy_fcgi and requires the Apache module mod_proxy to be enabled. (Debian Only)

apache.mod_wsgi

Installs the mod_wsgi package and enables the Apache module.

apache.mod_actions

Enables the Apache module mod_actions. (Debian Only)

apache.mod_headers

Enables the Apache module mod_headers. (Debian Only)

apache.mod_pagespeed

Installs and Enables the mod_pagespeed module. (Debian and RedHat Only)

apache.mod_perl2 -------------------

Installs and enables the mod_perl2 module (Debian and FreeBSD only)

apache.mod_geoip -------------------

Installs and enables the mod_geoIP (RedHat only)

apache.mod_php5

Installs and enables the mod_php5 module

apache.mod_cgi

Enables mod_cgi. (FreeBSD only)

apache.mod_fcgid

Installs and enables the mod_fcgid module

apache.mod_fastcgi --------------------

Installs and enables the mod_fastcgi module

apache.mod_dav_svn --------------------

Installs and enables the mod_dav_svn module (Debian only)

apache.mod_security ----------------------

Installs an enables the Apache mod_security2 WAF<http://modsecurity.org/>`_ using data from Pillar. (Debian and RedHat Only)

Allows you to install the basic Core Rules (CRS) and some basic configuration for mod_security2

apache.mod_security.rules

This state can create symlinks based on basic Core Rules package. (Debian only) Or it can distribute a mod_security rule file and place it /etc/modsecurity/

mod_socache_shmcb

Enables mod_socache_shmcb. (FreeBSD only)

apache.mod_ssl

Installs and enables the mod_ssl module (Debian, RedHat and FreeBSD only)

apache.mod_suexec

Enables mod_suexec. (FreeBSD only)

apache.mod_vhost_alias ----------------------

Enables the Apache module vhost_alias (Debian Only)

apache.mod_remoteip ----------------------

Enables and configures the Apache module mod_remoteip using data from Pillar. (Debian Only)

apache.mod_xsendfile ----------------------

Installs and enables mod_xsendfile module. (Debian Only)

apache.own_default_vhost --------------------------

Replace default vhost with own version. By default, it's 503 code. (Debian Only)

apache.no_default_vhost --------------------------

Remove the default vhost. (Debian Only)

apache.vhosts.standard

Configures Apache name-based virtual hosts and creates virtual host directories using data from Pillar.

Example Pillar:

apache:
  sites:
    example.com: # must be unique; used as an ID declaration in Salt; also passed to the template context as {{ id }}
      template_file: salt://apache/vhosts/standard.tmpl

When using the provided templates, one can use a space separated list of interfaces to bind to. For example, to bind both IPv4 and IPv6:

apache:
  sites:
    example.com:
      interface: '1.2.3.4 [2001:abc:def:100::3]'

apache.manage_security

Configures Apache's security.conf options by reassinging them using data from Pillar.

apache.debian_full

Installs and configures Apache on Debian and Ubuntu systems.

apache.uninstall ----------

Stops the Apache service and uninstalls the package.

These states are ordered using the order declaration. Different stages are divided into the following number ranges:

  1. apache will use 1-500 for ordering
  2. apache will reserve 1 -100 as unused
  3. apache will reserve 101-150 for pre pkg install
  4. apache will reserve 151-200 for pkg install
  5. apache will reserve 201-250 for pkg configure
  6. apache will reserve 251-300 for downloads, git stuff, load data
  7. apache will reserve 301-400 for unknown purposes
  8. apache will reserve 401-450 for service restart-reloads
  9. apache WILL reserve 451-460 for service.running
  10. apache will reserve 461-500 for cmd requiring operational services

Example Pillar:

apache:
  register-site:
    # any name as an array index, and you can duplicate this section
    {{UNIQUE}}:
      name: 'my name'
      path: 'salt://path/to/sites-available/conf/file'
      state: 'enabled'