With the local part of the config done (first two steps) we can hit nginx/apache locally to test basic functionality. Here's how I'm doing that, on laptop, set /etc/hosts to include:

127.0.0.1 localhost payments-listener.frdev.wikimedia.org

Then, as root: ssh -i /home/jgreen/.ssh/fr_id_rsa -L 443:frpig1001:443 jgreen@frbast.wikimedia.org

This allows me to use a normal browser to access https://payments-listener.frdev.wikimedia.org/globalcollect via SSH tunnel through the bastion.

I'm getting an HTTP/500 error, here's what's logged at frpig1001:/var/log/syslog for that error:

PHP Fatal error: Uncaught Symfony\\Component\\Yaml\\Exception\\ParseException: (snip)

@Ejegg can you take a look at the Apache error?

@Jgreen I think I found the yaml error. In my homedir on frpig1001 there's an updated copy of /etc/smashpig/main.yaml that ought to work.

In T202426#4521686, @Ejegg wrote:

@Jgreen I think I found the yaml error. In my homedir on frpig1001 there's an updated copy of /etc/smashpig/main.yaml that ought to work.

Yah, that worked!

Change 454587 had a related patch set uploaded (by Jgreen; owner: Jgreen):
[operations/dns@master] Simplify frbast* A/PTR/CNAME scheme, add payments-listener.frdev.wikimedia.org

https://gerrit.wikimedia.org/r/454587

Change 454587 merged by Jgreen:
[operations/dns@master] Simplify frbast* A/PTR/CNAME scheme, add payments-listener.frdev.wikimedia.org

https://gerrit.wikimedia.org/r/454587

@Ejegg ok the host is ready for testing

Shoot, I just sent it some Amazon IPNs and got 500 errors. Looks like our last-ditch error handler is masking the original error, too!