Puppet Class: capsule::reverse_proxy

Defined in:
manifests/reverse_proxy.pp

Overview

Adds http reverse-proxy to parent conf

Parameters:

  • path (Any) (defaults to: '/')
  • url (Any) (defaults to: "https://${capsule::parent_fqdn}/")
  • port (Any) (defaults to: $capsule::params::reverse_proxy_port) 


2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'manifests/reverse_proxy.pp', line 2

class capsule::reverse_proxy (

  $path = '/',
  $url  = "https://${capsule::parent_fqdn}/",
  $port = $capsule::params::reverse_proxy_port

  ) {

  include ::apache

  Class['certs::foreman_proxy'] ~>
  apache::vhost { 'katello-reverse-proxy':
    servername        => $capsule::capsule_fqdn,
    port              => $port,
    docroot           => '/var/www/',
    priority          => '28',
    ssl_options       => ['+StdEnvVars',
                          '+ExportCertData',
                          '+FakeBasicAuth'],
    ssl               => true,
    ssl_proxyengine   => true,
    ssl_cert          => $certs::apache::apache_cert,
    ssl_key           => $certs::apache::apache_key,
    ssl_ca            => $certs::ca_cert,
    ssl_verify_client => 'optional',
    ssl_verify_depth  => 10,
    request_headers   => ['set X_RHSM_SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"'],
    proxy_pass        => [{
      'path'         => $path,
      'url'          => $url,
      'reverse_urls' => [$path, $url]
    }],
    error_documents   => [{
        'error_code' => '503',
        'document'   => '\'{"displayMessage": "Internal error, contact administrator", "errors": ["Internal error, contact administrator"], "status": "500" }\''
      },
      {
        'error_code' => '503',
        'document'   => '\'{"displayMessage": "Service unavailable or restarting, try later", "errors": ["Service unavailable or restarting, try later"], "status": "503" }\''
      },
    ],
    custom_fragment   => "
      SSLProxyCACertificateFile ${::certs::ca_cert}
      SSLProxyMachineCertificateFile ${certs::foreman_proxy::foreman_proxy_ssl_client_bundle}
    ",
  }
}