Imran Iqbal
68b971bd77
test(mod_security_spec): convert from Serverspec to InSpec
5 years ago
Imran Iqbal
34d1f7cf15
feat(semantic-release): implement for this formula
* Automated using https://github.com/myii/ssf-formula/pull/79
5 years ago
Imran Iqbal
93c8d1ffe7
docs(pr): remove PR template to use org-wide template instead [skip ci]
5 years ago
Sergio Cambra
9a1b1d9b26
Patch upload progress ( #267 )
* Include the mod_* states in apache.modules for Debian hosts
* upload progress module for debian
5 years ago
Sergio Cambra
d660abfe70
fix server_status state ( #268 )
5 years ago
Andreas Thienemann
0c1423f8f1
Fix mod_remoteip for Red Hat family OS ( #260 )
The source template was missing for RH based systems, only the Debian
file was packaged.
Fix this.
5 years ago
N
58d2a33898
Resolve #256 - fix Suse group value ( #257 )
5 years ago
Imran Iqbal
262399aea4
Merge branch 'alxwr-master' into upstream
6 years ago
Alexander Weidinger
05ff4e163c
map.jinja: use grains.filter_by instead of defaults.merge
defaults.merge does not work with salt-ssh.
https://github.com/saltstack/salt/issues/51605
6 years ago
Javier Bértoli
64434daecb
Fix wrong yaml parsing ( #253 )
6 years ago
Imran Iqbal
6852f87b7f
Fix `apache:lookup` regression ( #252 )
6 years ago
Niels Abspoel
dccfdf7962
add server_status state ( #250 )
Add server_status state to create a default server_status handler for localhost
6 years ago
Javier Bértoli
a881f63780
Merge pull request #249 from aboe76/master
use watch module: apache-[restart|reload] consequently
6 years ago
Niels Abspoel
9490c868e0
use watch module: apache-[restart|reload] consequently
6 years ago
Javier Bértoli
17d3d84595
Merge pull request #248 from aboe76/fix_osfinger
Fix osfinger map.jinja
6 years ago
Niels Abspoel
dcce3f6129
Fix osfinger map.jinja
made a copy paste error in map.jinja
this fixes #247
6 years ago
Javier Bértoli
c4154ba404
Merge pull request #246 from aboe76/add_defaults.yaml
refactor map.jinja with defaults and import_yaml files
6 years ago
Niels Abspoel
094b149262
refactor map.jinja with defaults and import_yaml files
6 years ago
alxwr
e2462b2c3b
Merge pull request #245 from netmanagers/master
Add OCSP Stapling configuration capabilities to Debian
6 years ago
alxwr
4af4ff5970
Restart (if needed) before reload ( #244 )
Some configuration changes only take effect after a restart of the service.
When the module 'apache-reload' is triggered too early, it fails which results
in a false-negative result of the Salt run.
In order to fix that 'apache-restart' and the service definition itself are
put before 'apache-reload'. Reload should always succeed if restart did.
6 years ago
Javier Bértoli
06b1606f33
Add OCSP Stapling configuration capabilities to Debian
Document Stapling options in pillar.example
6 years ago
Andreas Thienemann
79673343a5
No automatic listener for port *
The formula currently adds a Listen directive for the port '*' if
any configured vhost is configured to listen on :* which does not
work and instead prevents apache from starting.
It is possible to prevent this by setting the
exclude_listen_directive pillar to True but this is a manual
workaround.
Instead, this commit excludes :* Listeners automatically.
6 years ago
Andreas Thienemann
4bba8862ab
Delete Red Hat provided ssl.conf ( #243 )
When using the mod_ssl state on Red Hat family systems the httpd
server will currently not start.
This is due to duplicate Listen directives provided in the
ssl.conf file shipped with the mod_ssl rpm package and the directives
configured by saltstack.
The easy solution is to just ensure the rpm shipped mod_ssl is removed.
6 years ago
Andreas Thienemann
894e970549
Fix hardcoded path ( #242 )
The config.sls state uses a hardcoded file path for the welcome
config.
Use the confdir variable to build the path instead to allow for
overrides.
6 years ago
Andreas Thienemann
4ed6e228f5
Improve document root fix for Red Hat ( #241 )
The docroot fix from PR#240 worked fine for default servers.
But as soon as one uses vhosts this broke as the vhosts were
created under the docroot in /var/www/html rather than the better
/var/www.
Fix this by differentiating between docroot and wwwdir.
Further allow to override both in Red Hat-style configs.
The override allows to reuse this formula for the softwarecollections
rpms.
6 years ago
Javier Bértoli
e1ab49cce3
Merge pull request #240 from bawuenet/fix_docroot
Fix DocumentRoot on Red Hat
6 years ago
Andreas Thienemann
eca4daf767
Fix DocumentRoot on Red Hat
The current docroot ist set to /var/www. This is incorrect.
Fix with correct value /var/www/html.
6 years ago
Javier Bértoli
ff021d36aa
Merge pull request #237 from arthurlogilab/patch-3
[vhosts/standard] improve uniqueness of section id
6 years ago
Arthur Lutz
feadd58f85
[standard/vhost] unique id renamed
6 years ago
Arthur Lutz
c07e5846a4
[vhosts/standard] improve uniqueness of section id
6 years ago
Sebastian Meyer
6f3ab21d62
Allow setting APACHE_SERVER_FLAGS on Suse ( #234 )
SUSE reads additional FLAGS that are used on the server start. They are
read from the APACHE_SERVER_FLAGS key, so we use a2enflag/a2disflag to
set those as we do with modules.
6 years ago
ze42
1982f1ecc8
mod_remoteip: enable conf independantly ( #236 )
6 years ago
N
8adcad3db8
Merge pull request #231 from ze42/directory_default
vhosts/standard: Directory_default to DocumentRoot
6 years ago
Adrien "ze" Urban
49dedb64dc
directory.default: update pillar.example
New behavior properly explained in pillar.example
Warning: changes directory.default when used with non-standard documentroot.
Now uses documentroot, instead of previously "default" documentroot path.
6 years ago
Adrien "ze" Urban
70ae79b991
vhosts/standard: Directory_default to DocumentRoot
6 years ago
ardin
7bac5c7c30
mod_mpm for RedHat ( #160 )
6 years ago
Arthur Lutz
a5debf58b3
207 configure ssl ( #218 )
* [ssl] [debian] manage ssl.conf with pillars
* [apache] make cyphersuite a list
* [apache/ssl] switch back to strings, lists merge is not good
6 years ago
Niels Abspoel
ac7e71bf56
Merge pull request #228 from ze42/docroot_sitename
DocumentRoot: fallback to SiteName like templates
6 years ago
Niels Abspoel
32f92e8acd
Merge pull request #227 from ze42/geoip_debian
geoip: Debian support
6 years ago
Niels Abspoel
03de980860
Merge pull request #230 from ze42/docroot_owner
vhosts/standard: allow to set docroot ownership
6 years ago
Niels Abspoel
00b437aa27
Merge pull request #232 from ze42/vhosts_cleanup
vhosts/cleanup: clean non-salted sites
6 years ago
Javier Bértoli
760cadebc3
Merge pull request #233 from alxwr/master
Create Apache's logdir if necessary
6 years ago
Alexander Weidinger
33e1302a12
Create Apache's logdir if necessary
6 years ago
Adrien "ze" Urban
fdaa62d7a9
vhosts/cleanup: clean non-salted sites
Makes it easier to clean any unwanted sites
6 years ago
Adrien "ze" Urban
37f8af4b3a
vhosts/standard: rewrite, simplify code
* No more if.
* Allow lookup to set default value for all docroot
* updated pillar.example
6 years ago
Adrien "ze" Urban
2bae6fea10
vhosts/standard: fix set user/group
unless test -d on file.directory seems useless.
6 years ago
Adrien "ze" Urban
5211bdd72b
vhosts/standard: allow user/group option
Support for DocumentRootUser and DocumentRootGroup
6 years ago
Javier Bértoli
dc46bc8340
Merge pull request #224 from arthurlogilab/fix-fcgid-redhat
Fix fcgid redhat
6 years ago
Javier Bértoli
4e73a80b62
Merge pull request #229 from ze42/manage_security_file_presence
manage_security: fix file presence detection
6 years ago
Adrien "ze" Urban
76f05dda8e
manage_security: fix file presence detection
Detect runtime, rather than before starting/installing anything.
6 years ago