Parcourir la source

lgweb: Switch to https by default for lgweb (refs: #218)

Sebastien Badia il y a 8 ans
Parent
commit
da4ec7dc1a
1 fichiers modifiés avec 17 ajouts et 4 suppressions
  1. 17 4
      manifests/lookingglass/lgweb.pp

+ 17 - 4
manifests/lookingglass/lgweb.pp

@@ -4,16 +4,29 @@
 # Sources
 # git clone https://github.com/sileht/bird-lg -C /opt/
 
-class public::lookingglass::lgweb {
+class public::lookingglass::lgweb(
+  $domains = ['lg.ldn-fai.net','lg.as60197.net'],
+  $ssl_cert_source = '/etc/letsencrypt/pem/lg.ldn-fai.net.pem',
+  $ssl_key_source = '/etc/letsencrypt/private/lg.ldn-fai.net.key',
+  $ssl_dhparam_source = '/etc/letsencrypt/dhparam.pem',
+) {
 
   package { [ 'python-dnspython', 'python-pydot', 'python-flask' ]:
     ensure => installed,
   }
 
+  nginxpack::vhost::redirection { 'https-lgweb':
+    domains  => $domains,
+    to_https => true,
+  }
   nginxpack::vhost::proxy { 'lgweb':
-    domains   => [ 'lg.ldn-fai.net', 'lg.as60197.net' ],
-    to_domain => '127.0.0.1',
-    to_port   => 5000,
+    domains            => $domains,
+    to_domain          => '127.0.0.1',
+    to_port            => 5000,
+    https              => true,
+    ssl_cert_source    => $ssl_cert_source,
+    ssl_key_source     => $ssl_key_source,
+    ssl_dhparam_source => $ssl_dhparam_source,
   }
 
   user { 'lgweb':