Commit b6f65282483b354d4fe11452f67ddf33c802e7e4
1 parent
a3f8f787
Exists in
master
and in
82 other branches
Redirect alternatives domains to main
Signed-off-by: Sergio Oliveira <sergio@tracy.com.br> Signed-off-by: David Carlos <ddavidcarlos1392@gmail.com>
Showing
3 changed files
with
35 additions
and
0 deletions
Show diff stats
config/local/config.yaml
... | ... | @@ -2,6 +2,10 @@ admins: |
2 | 2 | - ["Paulo Meirelles", "paulo@softwarelivre.org"] |
3 | 3 | site_url: https://softwarepublico.dev |
4 | 4 | external_hostname: softwarepublico.dev |
5 | +alternative_hostnames: | |
6 | + - www.softwarepublico.dev | |
7 | + - beta.softwarepublico.dev | |
8 | + - portal.softwarepublico.dev | |
5 | 9 | external_ip: 10.10.10.6 |
6 | 10 | colab_from_address: '"Portal do Software Publico" <noreply@softwarepublico.dev>' |
7 | 11 | server_email: '"Portal do Software Publico" <noreply@softwarepublico.dev>' | ... | ... |
cookbooks/reverse_proxy/recipes/default.rb
... | ... | @@ -29,3 +29,17 @@ template '/etc/nginx/conf.d/reverse_proxy.conf' do |
29 | 29 | mode 0644 |
30 | 30 | notifies :restart, 'service[nginx]' |
31 | 31 | end |
32 | + | |
33 | +template '/etc/nginx/conf.d/redirect.conf' do | |
34 | + owner 'root' | |
35 | + group 'root' | |
36 | + mode 0644 | |
37 | + notifies :restart, 'service[nginx]' | |
38 | + only_if { node['config']['alternative_hostnames'] } | |
39 | +end | |
40 | + | |
41 | +file '/etc/nginx/conf.d/redirect.conf' do | |
42 | + action :delete | |
43 | + notifies :restart, 'service[nginx]' | |
44 | + not_if { node['config']['alternative_hostnames'] } | |
45 | +end | ... | ... |
... | ... | @@ -0,0 +1,17 @@ |
1 | + | |
2 | +server { | |
3 | + listen *:80; | |
4 | + listen *:443 ssl; | |
5 | + | |
6 | + server_name <% node['config']['alternative_hostnames'].each do |hostname| -%><%= hostname %> <% end %>; | |
7 | + | |
8 | + ssl_certificate /etc/nginx/<%= node['config']['external_hostname'] %>.crt; | |
9 | + ssl_certificate_key /etc/nginx/<%= node['config']['external_hostname'] %>.key; | |
10 | + ssl_session_cache shared:SSL:10m; | |
11 | + ssl_session_timeout 5m; | |
12 | + ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; | |
13 | + ssl_ciphers HIGH:!aNULL:!MD5; | |
14 | + ssl_prefer_server_ciphers on; | |
15 | + | |
16 | + rewrite ^ <%= node['config']['site_url']%>$request_uri?; | |
17 | +} | ... | ... |