Page MenuHomePhabricator

SSL / protoproxy config for wikivoyage
Closed, ResolvedPublic

Description

Details

Reference
rt3881

Related Objects

Event Timeline

rtimport raised the priority of this task from to Medium.Dec 18 2014, 1:25 AM
rtimport added a project: ops-core.
rtimport set Reference to rt3881.

https://gerrit.wikimedia.org/r/#/c/32244/2/manifests/protoproxy.pp
}
293
» # wikivoyage.org
294
» proxy_configuration{ wikivoyage:
295
» » proxy_addresses => {
296
» » » "pmtpa" => [ "208.80.152.219", "[2620:0:860:ed1a::13]" ],
297
» » » "eqiad" => [ "208.80.154.243", "[2620:0:861:ed1a::13]" ],
298
» » » "esams" => [ "127.0.0.1" ]
299
» » },
300
» » proxy_server_name => '*.wikivoyage.org',
301
» » proxy_server_cert_name => 'star.wikivoyage.org',
302
» » proxy_backend => {
303
» » » "pmtpa" => { "primary" => "10.2.1.25" },
304
» » » "eqiad" => { "primary" => "10.2.2.25" },
305
» » » "esams" => { "primary" => "10.2.3.25" }
306
» » },
307
» » ipv6_enabled => 'true',
308
» » enabled => 'true'
309
» }

Status changed from 'new' to 'open' by dzahn

Dependency on ticket #3696 added by dzahn

Dependency by ticket #3750 added by dzahn

nginx did not like us using 127.0.0.1 as a work-around for not having IPs yet.
it broke config on the esams host because it would not accept that as a valid
host.
We had to work around that by not even creating configs for wikidata and
wikivoyage on esams hosts at all.
https://gerrit.wikimedia.org/r/#/c/32411/1/manifests/protoproxy.pp ,
https://gerrit.wikimedia.org/r/#/c/32413/ etc
--
Works for me now. Getting valid Digicert certificate on
https://fr.wikivoyage.org/wiki and similar, no warnings :)

Status changed from 'open' to 'resolved' by dzahn

Dzahn changed the visibility from "WMF-NDA (Project)" to "Public (No Login Required)".Apr 3 2019, 1:09 PM
Dzahn changed the edit policy from "WMF-NDA (Project)" to "All Users".