summaryrefslogtreecommitdiff
path: root/manifests/vhost/php/standard.pp
AgeCommit message (Collapse)Author
2011-10-09fix typomh
2011-10-09this options should be set globallymh
2011-10-09include php::itk on itk setupsmh
2011-10-08log php errors to a per vhost logfilemh
2011-10-08pass php_settings to fcgid-starter and only set them in vhost, if we don't ↵mh
run as fgcid
2011-10-08type is a metaparammh
2011-10-08also include mod_fcgid for php stuffmh
2011-10-08add mod_fcgid stuffmh
2011-10-08the key will always be heremh
2011-10-08fix namemh
2011-10-08merge functions to new stdlibs, fix has_key hash problemmh
2011-10-08introduce a new template style, less duplicated things, more handy optionsmh
2011-10-08first work on php_settings via hashmh
2011-07-15it is not anymore necessary to add an empty source to purge directoriesmh
2011-05-17improve mod_security rulesmh
* handled now by a partial * possibility to add rules that should be removed * possibility to add custom mod_sec options" * use new infrastructure for existing mod_sec tweaks
2011-02-24use a better subsitutionmh
2011-02-24try a more unique placeholder, because the old one failed with binaries ↵mh
which contained _ in the name
2011-02-24allow setting of a specific bin_dirmh
2011-02-22add missing parammh
2011-02-22add missing parammh
2011-02-22first way to a unified partial based vhost templatemh
2010-08-17remove includes in defines that are called a lot, it looks like compile time ↵mh
goes up with such includes
2010-08-16automatically include php for php vhostsmh
2010-08-16impelement itk plus modemh
itk plus mode is an additional mode to deploy itk based hostings which should be a bit more performant. The idea is that we have two apache-instances running: A) prefork based, listening on the external interface B) itk based, listening on the loopback interface A) will serve all static webpages, as well as possibly serve all static content of dynamic websites. All requests to dynamic content will be redirected to B). The idea is that A) doesn't load any modules to server dynamic content at all. B) will serve all the dynamic scripts of a vhost. This will mean that for vhosts (static ones) as well as static content (all none dynamic scripts) we can benefit from the fast prefork model, while we can use itk's security model for all the dynamic scripts. There are two new additional run_modes: - proxy-itk: this just passes all requests to apache instance B). This one is similar to plain itk based mode and should be used for vhosts that shouldn't (yet) changed to the mixed mode. - static-itk: this passes only requests to dynamic scripts to B) while all static content is served by A). Beware that the user with which A) is running should be member of the run group of B) and all static files need to readable by the group. This reduces the security model you have with plain itk, as the prefork apache user will be able to read php (config-) files of any vhost that runs in static-itk mode. If you want to keep the level of security for a certain vhost, you need to run the specific vhost in proxy-itk mode. Note 1: you cannot run vhosts in itk mode and others in proxy or static itk mode. There is a duplicate file resource definition that blocks that possibility. Note 2: This mode works currently only on CentOS based systems, as no work have been done so far to implement an init.d script that's able to run 2 apache instances.
2010-08-11introduce logmode featuremh
We are now able to select how apache should log accesses. These modes are: * default: as you would use it * semianonym: no ips are logged for CustomLog, ErrorLog still logs ips * anonym: no ips are logged for CustomLog, ErrorLog is sent to /dev/null * nologs: all logs are sent to /dev/null
2010-08-07remove unnecessary fileserver variable (#2460)mh
2010-01-30migrate missing partsmh
- migrate missing (newly introduced) vhosts - pass relevant_only stuff to subdefines
2010-01-30merged with lavamindmh
2010-01-10make it also possible that safe_mode_exec_bin can be absentmh
2010-01-04add $mod_security_relevantonly flag, enabled by default, logs only on ↵Jerome Charaoui
suspicious requests, set to 'false' to log all requests (as before)
2009-11-21purge bin dir, only add php option if we actually added binariesmh
2009-11-21substitute with correct variable so we can use it more than oncemh
2009-11-21introduce php_default_charset to set charset header in phpmh
2009-11-19additional cleanupmh
- actually the execs are always set to something. - grouping of php parameters
2009-11-18simplify fileresourcemh
2009-11-18bin-dir: user+group needs to be the documentroot userAndreas
2009-11-18'undefined' errorAndreas
2009-11-18typoAndreas
2009-11-18create php_safe_mode_exec_bin_dir in standard.pp, not earlier; phpdirs not usedAndreas
2009-11-18renames and proc move from webhosting for php_safe_mode_exec_binsAndreas
2009-11-18added a dir for binaries (php safe_mode_exec_dir)Andreas
2009-07-25add variable to tweak php safe_modemh
2009-06-16enabled use_mod_macro param on php::standardMarcel Haerry
2009-06-13we can now also enable the usage of pearmh
2009-05-26only enable smarty when told toMarcel Haerry
and include smarty then
2009-05-22we can now decide wether we'd like to manage webdir or the docroot, will be ↵mh
necessary for mediawiki stuff
2009-05-17extracted every define and class in it's own filemh