summaryrefslogtreecommitdiff
path: root/puppet/modules/site_static/templates/apache.conf.erb
AgeCommit message (Collapse)Author
2017-10-05Feat: split tor service into threeelijah
The 'tor' service is now three separate services, 'tor_exit', 'tor_relay', or 'hidden_service'.
2017-08-23Bug: fix hidden service for staticelijah
hidden service should be activated iff tor is among the active services and tor.hidden_service.active == true
2017-05-30static - support for renewing certs with let's encrypt for static siteselijah
2016-09-13[bugfix] static sites: only enable hidden service by default if one domain ↵elijah
is configured The problem is that we have a single onion address per server, so if more than one domain is configured we need to make sure they don't both try to use the same onion address.
2016-06-30fix static site apache configelijah
2016-06-28Make static tor hidden services work (#8212).Micah
When tor hidden services were enabled for static sites, only a very basic configuration was setup and it didn't take into account the different location configurations that can be configured for a static site. This commit resolves that by making a site_static::hidden_service class similar to the site_webapp::hidden_service class, and fixes up the apache vhost template to properly create the location blocks for the hidden service vhost. Change-Id: Ice3586f4173bd2d1bd3defca29d21c7403d5a03a
2016-06-27Fix the permissions on the DOMAIN/provider.json file for static sites.elijah
2016-05-03migrate from obsolete SSLCertificateChainFile apache option (#8055)Micah
Change-Id: I20a28ae77c98071aefc1933e0ea73e5f3b895acb
2015-10-19change apache header set for HSTS to be always, otherwise it wont be set for ↵Micah
redirects (#7540) Change-Id: Ic77c64c03a99dad951f42633de04c352bed17c1e
2015-05-26Implement weakdh recommendations for cipher suites (#7024)Micah Anderson
This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d
2014-10-15Disable SSLv3, and RC4 ciphersMicah Anderson
Change-Id: I7214aa4334e3d817dd1b6d8dce43523e3d955b5d
2014-06-02static site: better message for wrong location type.elijah
2014-06-02work around hiera's inability to escape '%' by using ':percent:'elijah
2014-06-02static site: added rack support, added custom apache configelijah
2014-06-02added support for /provider.json served from static site.elijah
2014-04-05update site_static to work with new amber and have better tls cipherselijah
2014-03-24modules/site_static: part 2 - apacheelijah