| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-08-16 | fix various missing things for itk_plus mode | mh | |
| 2010-08-16 | only set source or content when we actually manage the file | mh | |
| 2010-08-16 | fix wrong param naming | mh | |
| 2010-08-16 | impelement itk plus mode | mh | |
| itk plus mode is an additional mode to deploy itk based hostings which should be a bit more performant. The idea is that we have two apache-instances running: A) prefork based, listening on the external interface B) itk based, listening on the loopback interface A) will serve all static webpages, as well as possibly serve all static content of dynamic websites. All requests to dynamic content will be redirected to B). The idea is that A) doesn't load any modules to server dynamic content at all. B) will serve all the dynamic scripts of a vhost. This will mean that for vhosts (static ones) as well as static content (all none dynamic scripts) we can benefit from the fast prefork model, while we can use itk's security model for all the dynamic scripts. There are two new additional run_modes: - proxy-itk: this just passes all requests to apache instance B). This one is similar to plain itk based mode and should be used for vhosts that shouldn't (yet) changed to the mixed mode. - static-itk: this passes only requests to dynamic scripts to B) while all static content is served by A). Beware that the user with which A) is running should be member of the run group of B) and all static files need to readable by the group. This reduces the security model you have with plain itk, as the prefork apache user will be able to read php (config-) files of any vhost that runs in static-itk mode. If you want to keep the level of security for a certain vhost, you need to run the specific vhost in proxy-itk mode. Note 1: you cannot run vhosts in itk mode and others in proxy or static itk mode. There is a duplicate file resource definition that blocks that possibility. Note 2: This mode works currently only on CentOS based systems, as no work have been done so far to implement an init.d script that's able to run 2 apache instances. | |||
| 2010-08-11 | use default logpath as redirects usually don't have a root path | mh | |
| 2010-08-11 | remove unnecessary fileserver variable (#2460) round II | mh | |
| 2010-08-11 | only manage source or content if file should be present | mh | |
| 2010-08-11 | only include noip logging if we actually need it | mh | |
| 2010-08-11 | introduce logmode feature | mh | |
| We are now able to select how apache should log accesses. These modes are: * default: as you would use it * semianonym: no ips are logged for CustomLog, ErrorLog still logs ips * anonym: no ips are logged for CustomLog, ErrorLog is sent to /dev/null * nologs: all logs are sent to /dev/null | |||
| 2010-08-07 | remove unnecessary fileserver variable (#2460) | mh | |
| 2010-07-20 | clean up some possible loops | mh | |
| 2010-07-20 | fix wrong statement | mh | |
| 2010-07-05 | remove duplicate source entry | mh | |
| 2010-06-12 | disable mod_security for galleries | mh | |
| 2010-06-12 | get the decision branch right | mh | |
| 2010-06-12 | introduce upload dir for gallery server side uploads | mh | |
| 2010-05-09 | redirects don't need mod_security | mh | |
| 2010-02-23 | include mod_security depending on the run_mode | mh | |
| 2010-01-30 | migrate missing parts | mh | |
| - migrate missing (newly introduced) vhosts - pass relevant_only stuff to subdefines | |||
| 2010-01-30 | merged with lavamind | mh | |
| 2010-01-26 | module silverstripe | Andreas | |
| 2010-01-20 | missing variables | Andreas | |
| 2010-01-20 | missing variable | Andreas | |
| 2010-01-10 | make it also possible that safe_mode_exec_bin can be absent | mh | |
| 2010-01-10 | if we should remove everything if set to absent | mh | |
| 2010-01-04 | add $mod_security_relevantonly flag, enabled by default, logs only on ↵ | Jerome Charaoui | |
| suspicious requests, set to 'false' to log all requests (as before) | |||
| 2010-01-04 | config file to manage | mh | |
| 2010-01-02 | actually the default is already utf8 | mh | |
| 2010-01-02 | we have already a default charset flag we manage | mh | |
| 2010-01-01 | not a managed dir | Andreas | |
| 2010-01-01 | create g2data dir | Andreas | |
| 2010-01-01 | redefinition error | Andreas | |
| 2010-01-01 | create gdata dir | Andreas | |
| 2010-01-01 | gallery2 module | Andreas | |
| 2009-12-26 | changed davdir->davdbdir, add to template | Andreas | |
| 2009-12-26 | DAV needs a writable dir for the db (with itk, with the correct user settings) | Andreas | |
| 2009-12-23 | manage default 'charset' and 'security' configs on Debian | Jerome Charaoui | |
| 2009-12-23 | simplify config subclasses | Jerome Charaoui | |
| 2009-12-23 | fix passing of $content in config::include | Jerome Charaoui | |
| 2009-12-23 | organize files in subdirectories per type : 'config' for main apache config; ↵ | Jerome Charaoui | |
| 'scripts' for extra shell scripts; 'service' for service default parameters. also, manage apache2.conf on Debian. | |||
| 2009-12-23 | introduce config::global for global configs in conf.d and config::include ↵ | Jerome Charaoui | |
| for vhost snippets in include.d | |||
| 2009-12-23 | fix debian support for itk and use correct httpd username in managed webdir | Jerome Charaoui | |
| 2009-12-22 | remove default vhost from debian package | Jerome Charaoui | |
| 2009-12-17 | add itk class for debian | Jerome Charaoui | |
| 2009-12-08 | manage debian apache module packages | Jerome Charaoui | |
| 2009-12-08 | improve Debian support | Jerome Charaoui | |
| 2009-11-21 | purge bin dir, only add php option if we actually added binaries | mh | |
| 2009-11-21 | substitute with correct variable so we can use it more than once | mh | |
| 2009-11-21 | add missing parameter | mh | |
| 2009-11-21 | introduce php_default_charset to set charset header in php | mh | |
 |
index : puppet_apache.git | |
| [puppet_apache] | git repository hosting |
| summaryrefslogtreecommitdiff |