Compare commits

..

No commits in common. "045f17366586979805bcc4420eca276810263919" and "30c312b361885b722347f761ec67b7c7051248b8" have entirely different histories.

3 changed files with 15 additions and 39 deletions

View File

@ -118,12 +118,11 @@ vars:
{m: "dav",f:"mod_dav"},
{m: "dav_svn", f:"mod_dav_svn"},
{m: "authz_svn", f:"mod_authz_svn"},
{m: "ssl",f:"mod_ssl"}
]';
}
bundle agent install_apache(raw)
bundle agent install_apache(params)
{
classes:
@ -204,14 +203,10 @@ bundle agent apache_vhost
classes:
"delete" expression => $(site[disable]);
"use_ssl" expression => $(site[ssl]);
"use_certbot" expression => strcmp("certbot","$(site[ssl_cert])");
vars:
"site_defaults" data => '
{
"aliases":[],
"ssl_cert":"certbot",
"email":"$(apache.admin_email)"
}
';
@ -227,18 +222,11 @@ vars:
"domain_file" string => "$(apache.cfg_dir)/Vhosts/$(site[domain]).conf";
"domain_dir" string => "$(apache.www_dir)/$(site[domain])/";
"ssl_cert" string => ifelse( use_certbot,
"$(certbot.certbot_dir)/live/$(site[domain])/fullchain.pem",
"$(site[ssl_cert])");
"ssl_key" string => ifelse( use_certbot,
"$(certbot.certbot_dir)/live/$(site[domain])/privkey.pem",
"$(site[ssl_key])");
use_ssl&(use_certbot)::
"vhostdeps" slist => {"apache_ssl_created$(site[domain])"};
(!use_ssl)|(!use_certbot)::
"vhostdeps" slist => {};
files:
use_ssl::
"vhostdeps" slist => {"apache_ssl_created$(site[domain])"};
!use_ssl::
"vhostdeps" slist => {};
files:
delete::
"$(domain_file)"
@ -260,16 +248,16 @@ vars:
perms => uperm("$(apache.www_user)","$(apache.www_group)","750");
methods:
use_ssl&use_certbot::
use_ssl::
"any" usebundle => certbot_cert(@(site),"$(apache.default_html_dir)"), #,"$(site[domain])"),
handle => "apache_ssl_created$(site[domain])";
"apache_vhost_restart"::
"any" usebundle => restart_apache("$(site[domain])"),
depends_on => {"vhost_cfg_done$(site[domain])","apache_ssl_created$(site[domain])" };
(!use_ssl)|(!use_certbot)::
!use_ssl::
"apache_vhost_restart"::
"any" usebundle => restart_apache("$(site[domain])"),
depends_on => {"vhost_cfg_done$(site[domain])" };
@ -277,24 +265,14 @@ methods:
reports:
# "SSL_CERT: $(ssl_cert) $(ssl_key) ";
# use_ssl::
# "USE SSL";
# !use_ssl::
# "NOT USE_SSL";
# "RAW: $(site[raw])";
}
bundle agent apache_vhosts(sites)
bundle agent configure_apache(sites)
{
vars:
"idx" slist => getindices(@(sites));
methods:
"any" usebundle => apache_vhost(@(sites[$(idx)]));
reports:
# "IDXE $(idx)";
"any" usebundle => apache_vhost($(sites[$idx]));
}

View File

@ -44,14 +44,12 @@
CustomLog "{{vars.apache.log_dir}}/{{vars.apache_vhost.site.domain}}-access.log" combined
# SSL
SSLEngine on
# SSLCertificateFile {{vars.certbot.certbot_dir}}/live/{{vars.apache_vhost.site.domain}}/fullchain.pem
# SSLCertificateKeyFile {{vars.certbot.certbot_dir}}/live/{{vars.apache_vhost.site.domain}}/privkey.pem
SSLCertificateFile {{vars.apache_vhost.ssl_cert}}
SSLCertificateKeyFile {{vars.apache_vhost.ssl_key}}
SSLCertificateFile {{vars.certbot.certbot_dir}}/live/{{vars.apache_vhost.site.domain}}/fullchain.pem
SSLCertificateKeyFile {{vars.certbot.certbot_dir}}/live/{{vars.apache_vhost.site.domain}}/privkey.pem
RewriteEngine On
Alias /.well-known/acme-challenge/ "{{vars.apache.default_html_dir}}/.well-known/acme-challenge/"
RewriteRule "^/.well-known/acme-challenge/" - [L]
{{{vars.apache_vhost.site.raw}}}
{{vars.apache_vhost.site.raw}}
</VirtualHost>
{{/vars.apache_vhost.site.ssl}}

View File

@ -581,7 +581,7 @@ SSLRandomSeed connect builtin
</VirtualHost>
{{vars.install_apache.raw}}
Include {{vars.apache.cfg_dir}}/Vhosts/*.conf