Revision d8e5d716
Added by Partha Aji over 8 years ago
manifests/config.pp | ||
---|---|---|
group => 'root',
|
||
mode => '0755',
|
||
}
|
||
|
||
file {'/etc/httpd/conf.d/pulp.conf':
|
||
ensure => file,
|
||
content => template('katello/pulp.conf.erb'),
|
||
owner => 'root',
|
||
group => 'root',
|
||
mode => '0644',
|
||
}
|
||
|
||
}
|
manifests/init.pp | ||
---|---|---|
enable_docker => true,
|
||
num_workers => $num_pulp_workers,
|
||
enable_parent_node => true,
|
||
ca_cert => $::certs::ca_cert,
|
||
} ~>
|
||
class { '::qpid::client':
|
||
ssl => true,
|
templates/pulp.conf.erb | ||
---|---|---|
#
|
||
# WARNING: THIS CONFIGURATION WAS GENERATED BY KATELLO-CONFIGURE TOOL,
|
||
# CHANGES WILL LIKELY BE OVERWRITTEN.
|
||
#
|
||
|
||
# Apache configuration file for pulp web services and repositories
|
||
|
||
AddType application/x-pkcs7-crl .crl
|
||
AddType application/x-x509-ca-cert .crt
|
||
|
||
# Example ssl cert and key files to get you started.
|
||
# This MUST match /etc/pulp/pulp.conf [security] 'cacert'.
|
||
SSLCACertificateFile <%= scope.lookupvar("::certs::ca_cert") %>
|
||
|
||
# allow older yum clients to connect, see bz 647828
|
||
SSLInsecureRenegotiation on
|
||
|
||
WSGIProcessGroup pulp
|
||
WSGIApplicationGroup pulp
|
||
WSGIDaemonProcess pulp user=apache group=apache processes=3 display-name=%{GROUP}
|
||
|
||
# DEBUG - uncomment the next 2 lines to enable debugging
|
||
#WSGIRestrictStdin Off
|
||
#WSGIRestrictStdout Off
|
||
|
||
WSGISocketPrefix run/wsgi
|
||
WSGIScriptAlias /pulp/api /usr/share/pulp/wsgi/webservices.wsgi
|
||
WSGIImportScript /usr/share/pulp/wsgi/webservices.wsgi process-group=pulp application-group=pulp
|
||
|
||
<Directory /usr/share/pulp/wsgi>
|
||
<%- if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
|
||
Require all granted
|
||
<% else -%>
|
||
Allow from all
|
||
<% end -%>
|
||
</Directory>
|
||
|
||
<Files webservices.wsgi>
|
||
WSGIPassAuthorization On
|
||
WSGIProcessGroup pulp
|
||
WSGIApplicationGroup pulp
|
||
SSLRenegBufferSize 1048576
|
||
SSLRequireSSL
|
||
SSLVerifyDepth 3
|
||
SSLOptions +StdEnvVars +ExportCertData
|
||
SSLVerifyClient optional
|
||
</Files>
|
||
|
||
Alias /pulp/static /var/lib/pulp/static
|
||
|
||
<Location /pulp/static>
|
||
SSLRequireSSL
|
||
Options +Indexes
|
||
<%- if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
|
||
Require all granted
|
||
<% else -%>
|
||
Allow from all
|
||
<% end -%>
|
||
</Location>
|
Also available in: Unified diff
Refs #13607 - Removed pulp.conf
The template is now removed and centralized in puppet-pulp