| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2011-10-08 | migrating a first part over to the new partial style | mh | |
| 2011-10-08 | first work on php_settings via hash | mh | |
| 2011-08-09 | these files do not have to be writeable by the run group | mh | |
| 2011-07-15 | it is not anymore necessary to add an empty source to purge directories | mh | |
| 2011-05-18 | woraround that redirects do not have a documentroot | mh | |
| 2011-05-17 | improve mod_security rules | mh | |
| * handled now by a partial * possibility to add rules that should be removed * possibility to add custom mod_sec options" * use new infrastructure for existing mod_sec tweaks | |||
| 2011-05-12 | we need also to allow limit on mediawiki dir htaccess | mh | |
| 2011-04-01 | the run_user needs to be able to access this directory | mh | |
| 2011-04-01 | directory is called log | mh | |
| 2011-04-01 | fixing path | mh | |
| 2011-03-31 | add an additional gempath | mh | |
| 2011-03-31 | add missing files and manage necessary files to run as specific user | mh | |
| 2011-03-31 | improving passenger support | mh | |
| 2011-03-27 | fix typo | mh | |
| 2011-02-24 | use a better subsitution | mh | |
| 2011-02-24 | try a more unique placeholder, because the old one failed with binaries ↵ | mh | |
| which contained _ in the name | |||
| 2011-02-24 | allow setting of a specific bin_dir | mh | |
| 2011-02-23 | add a directory for global exec bins | mh | |
| 2011-02-22 | add missing param | mh | |
| 2011-02-22 | add missing param | mh | |
| 2011-02-22 | first way to a unified partial based vhost template | mh | |
| 2010-11-04 | allow setting of additional options for proxy vhosts | mh | |
| 2010-11-01 | add htpasswd option | mh | |
| 2010-11-01 | introduce mod security for proxy | mh | |
| 2010-11-01 | correct name | mh | |
| 2010-11-01 | add possibility to proxy vhosts | mh | |
| 2010-10-09 | fix typo | mh | |
| 2010-10-09 | only manage file parts if the file should actually be present | mh | |
| 2010-10-09 | pass run mode | mh | |
| 2010-10-06 | remove cgi-bin dir if we are removing the vhost | mh | |
| 2010-09-03 | this selector doesn't work that way | mh | |
| 2010-09-03 | fix php dir modes for new itk modes | mh | |
| 2010-08-17 | all itk modes need the userdir set to 755 | mh | |
| 2010-08-17 | set correct domain, if domain is absent, what it is most of the time | mh | |
| 2010-08-17 | fix cronjob domain | mh | |
| 2010-08-17 | remove includes in defines that are called a lot, it looks like compile time ↵ | mh | |
| goes up with such includes | |||
| 2010-08-16 | correctly fix problem | mh | |
| 2010-08-16 | fix include bug | mh | |
| 2010-08-16 | improve vhosts stuff | mh | |
| - move various inclusion to the file define, as this is the last define for all in the chain - only include if our vhost is not set to absent | |||
| 2010-08-16 | automatically include php for php vhosts | mh | |
| 2010-08-16 | fix various missing things for itk_plus mode | mh | |
| 2010-08-16 | impelement itk plus mode | mh | |
| itk plus mode is an additional mode to deploy itk based hostings which should be a bit more performant. The idea is that we have two apache-instances running: A) prefork based, listening on the external interface B) itk based, listening on the loopback interface A) will serve all static webpages, as well as possibly serve all static content of dynamic websites. All requests to dynamic content will be redirected to B). The idea is that A) doesn't load any modules to server dynamic content at all. B) will serve all the dynamic scripts of a vhost. This will mean that for vhosts (static ones) as well as static content (all none dynamic scripts) we can benefit from the fast prefork model, while we can use itk's security model for all the dynamic scripts. There are two new additional run_modes: - proxy-itk: this just passes all requests to apache instance B). This one is similar to plain itk based mode and should be used for vhosts that shouldn't (yet) changed to the mixed mode. - static-itk: this passes only requests to dynamic scripts to B) while all static content is served by A). Beware that the user with which A) is running should be member of the run group of B) and all static files need to readable by the group. This reduces the security model you have with plain itk, as the prefork apache user will be able to read php (config-) files of any vhost that runs in static-itk mode. If you want to keep the level of security for a certain vhost, you need to run the specific vhost in proxy-itk mode. Note 1: you cannot run vhosts in itk mode and others in proxy or static itk mode. There is a duplicate file resource definition that blocks that possibility. Note 2: This mode works currently only on CentOS based systems, as no work have been done so far to implement an init.d script that's able to run 2 apache instances. | |||
| 2010-08-11 | use default logpath as redirects usually don't have a root path | mh | |
| 2010-08-11 | only manage source or content if file should be present | mh | |
| 2010-08-11 | only include noip logging if we actually need it | mh | |
| 2010-08-11 | introduce logmode feature | mh | |
| We are now able to select how apache should log accesses. These modes are: * default: as you would use it * semianonym: no ips are logged for CustomLog, ErrorLog still logs ips * anonym: no ips are logged for CustomLog, ErrorLog is sent to /dev/null * nologs: all logs are sent to /dev/null | |||
| 2010-08-07 | remove unnecessary fileserver variable (#2460) | mh | |
| 2010-07-20 | fix wrong statement | mh | |
| 2010-07-05 | remove duplicate source entry | mh | |
| 2010-06-12 | disable mod_security for galleries | mh | |
 |
index : puppet_apache.git | |
| [puppet_apache] | git repository hosting |
| summaryrefslogtreecommitdiff |