... | ... | @@ -122,6 +122,19 @@ This procedure is common to all cases: |
|
|
|
|
|
5. remove the `sudo` rules for the role user
|
|
|
|
|
|
6. If we *do* want to keep a vanity site for the redirection, we
|
|
|
should also do this:
|
|
|
|
|
|
* add an entry to `roles::static_mirror_web_vanity`, in the
|
|
|
`ssl::service` block of
|
|
|
`modules/roles/manifests/static_mirror_web_vanity.pp`
|
|
|
|
|
|
* add a redirect in the template
|
|
|
(`modules/roles/templates/static-mirroring/vhost/vanity-vhosts.erb`),
|
|
|
for example:
|
|
|
|
|
|
Use vanity-host onionperf.torproject.org ^/(.*)$ https://gitlab.torproject.org/tpo/metrics/team/-/wikis/onionperf
|
|
|
|
|
|
6. deploy the changes globally:
|
|
|
|
|
|
ssh staticiforme puppet agent -t
|
... | ... | @@ -147,19 +160,6 @@ This procedure is common to all cases: |
|
|
hosts: global
|
|
|
servicegroups: mirror
|
|
|
|
|
|
If we *do* want to keep a vanity site for the redirection, we should
|
|
|
also do this:
|
|
|
|
|
|
1. add an entry to `roles::static_mirror_web_vanity`, in the
|
|
|
`ssl::service` block of
|
|
|
`modules/roles/manifests/static_mirror_web_vanity.pp`
|
|
|
|
|
|
2. add a redirect in the template
|
|
|
(`modules/roles/templates/static-mirroring/vhost/vanity-vhosts.erb`),
|
|
|
for example:
|
|
|
|
|
|
Use vanity-host onionperf.torproject.org ^/(.*)$ https://gitlab.torproject.org/tpo/metrics/team/-/wikis/onionperf
|
|
|
|
|
|
If we do *not* want to keep a vanity site, we should also do this:
|
|
|
|
|
|
2. remove the host to DNS, if not already present, see [howto/dns](howto/dns). this
|
... | ... | |