Commit b6f65282483b354d4fe11452f67ddf33c802e7e4
1 parent
a3f8f787
Exists in
master
and in
59 other branches
Redirect alternatives domains to main
Signed-off-by: Sergio Oliveira <sergio@tracy.com.br> Signed-off-by: David Carlos <ddavidcarlos1392@gmail.com>
Showing
3 changed files
with
35 additions
and
0 deletions
Show diff stats
config/local/config.yaml
| @@ -2,6 +2,10 @@ admins: | @@ -2,6 +2,10 @@ admins: | ||
| 2 | - ["Paulo Meirelles", "paulo@softwarelivre.org"] | 2 | - ["Paulo Meirelles", "paulo@softwarelivre.org"] |
| 3 | site_url: https://softwarepublico.dev | 3 | site_url: https://softwarepublico.dev |
| 4 | external_hostname: softwarepublico.dev | 4 | external_hostname: softwarepublico.dev |
| 5 | +alternative_hostnames: | ||
| 6 | + - www.softwarepublico.dev | ||
| 7 | + - beta.softwarepublico.dev | ||
| 8 | + - portal.softwarepublico.dev | ||
| 5 | external_ip: 10.10.10.6 | 9 | external_ip: 10.10.10.6 |
| 6 | colab_from_address: '"Portal do Software Publico" <noreply@softwarepublico.dev>' | 10 | colab_from_address: '"Portal do Software Publico" <noreply@softwarepublico.dev>' |
| 7 | server_email: '"Portal do Software Publico" <noreply@softwarepublico.dev>' | 11 | server_email: '"Portal do Software Publico" <noreply@softwarepublico.dev>' |
cookbooks/reverse_proxy/recipes/default.rb
| @@ -29,3 +29,17 @@ template '/etc/nginx/conf.d/reverse_proxy.conf' do | @@ -29,3 +29,17 @@ template '/etc/nginx/conf.d/reverse_proxy.conf' do | ||
| 29 | mode 0644 | 29 | mode 0644 |
| 30 | notifies :restart, 'service[nginx]' | 30 | notifies :restart, 'service[nginx]' |
| 31 | end | 31 | end |
| 32 | + | ||
| 33 | +template '/etc/nginx/conf.d/redirect.conf' do | ||
| 34 | + owner 'root' | ||
| 35 | + group 'root' | ||
| 36 | + mode 0644 | ||
| 37 | + notifies :restart, 'service[nginx]' | ||
| 38 | + only_if { node['config']['alternative_hostnames'] } | ||
| 39 | +end | ||
| 40 | + | ||
| 41 | +file '/etc/nginx/conf.d/redirect.conf' do | ||
| 42 | + action :delete | ||
| 43 | + notifies :restart, 'service[nginx]' | ||
| 44 | + not_if { node['config']['alternative_hostnames'] } | ||
| 45 | +end |
| @@ -0,0 +1,17 @@ | @@ -0,0 +1,17 @@ | ||
| 1 | + | ||
| 2 | +server { | ||
| 3 | + listen *:80; | ||
| 4 | + listen *:443 ssl; | ||
| 5 | + | ||
| 6 | + server_name <% node['config']['alternative_hostnames'].each do |hostname| -%><%= hostname %> <% end %>; | ||
| 7 | + | ||
| 8 | + ssl_certificate /etc/nginx/<%= node['config']['external_hostname'] %>.crt; | ||
| 9 | + ssl_certificate_key /etc/nginx/<%= node['config']['external_hostname'] %>.key; | ||
| 10 | + ssl_session_cache shared:SSL:10m; | ||
| 11 | + ssl_session_timeout 5m; | ||
| 12 | + ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; | ||
| 13 | + ssl_ciphers HIGH:!aNULL:!MD5; | ||
| 14 | + ssl_prefer_server_ciphers on; | ||
| 15 | + | ||
| 16 | + rewrite ^ <%= node['config']['site_url']%>$request_uri?; | ||
| 17 | +} |