diff --git a/playbooks/host_vars/static01.opendev.org.yaml b/playbooks/host_vars/static01.opendev.org.yaml
index 8954391fa1..61f1c0f385 100644
--- a/playbooks/host_vars/static01.opendev.org.yaml
+++ b/playbooks/host_vars/static01.opendev.org.yaml
@@ -7,6 +7,8 @@ letsencrypt_certs:
- governance.openstack.org
static01-security-openstack-org:
- security.openstack.org
+ static01-specs-openstack-org:
+ - specs.openstack.org
static01-tarballs-opendev-org:
- tarballs.opendev.org
static01-tarballs-openstack-org:
diff --git a/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml b/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
index f6b91924e6..805110c5a8 100644
--- a/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
+++ b/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
@@ -41,6 +41,9 @@
- name: letsencrypt updated static01-governance-openstack-org
include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+- name: letsencrypt updated static01-specs-openstack-org
+ include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
- name: letsencrypt updated static01-security-openstack-org
include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
diff --git a/playbooks/roles/static/files/50-specs.openstack.org.conf b/playbooks/roles/static/files/50-specs.openstack.org.conf
new file mode 100755
index 0000000000..13b67925c4
--- /dev/null
+++ b/playbooks/roles/static/files/50-specs.openstack.org.conf
@@ -0,0 +1,41 @@
+Define AFS_ROOT /afs/openstack.org/project/specs.openstack.org
+
+
+ ServerName specs.openstack.org
+ RewriteEngine On
+ RewriteRule ^/(.*) https://specs.openstack.org/$1 [last,redirect=permanent]
+ LogLevel warn
+ ErrorLog /var/log/apache2/specs.openstack.org_error.log
+ CustomLog /var/log/apache2/specs.openstack.org_access.log combined
+ ServerSignature Off
+
+
+
+
+
+ ServerName specs.openstack.org
+
+ DocumentRoot ${AFS_ROOT}
+
+ SSLCertificateFile /etc/letsencrypt-certs/specs.openstack.org/specs.openstack.org.cer
+ SSLCertificateKeyFile /etc/letsencrypt-certs/specs.openstack.org/specs.openstack.org.key
+ SSLCertificateChainFile /etc/letsencrypt-certs/specs.openstack.org/ca.cer
+ SSLProtocol All -SSLv2 -SSLv3
+ # Note: this list should ensure ciphers that provide forward secrecy
+ SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP
+ SSLHonorCipherOrder on
+
+
+ Options Indexes FollowSymLinks MultiViews
+ AllowOverrideList Redirect RedirectMatch
+ Satisfy Any
+ Require all granted
+
+
+ LogLevel warn
+ ErrorLog /var/log/apache2/specs.openstack.org_error.log
+ CustomLog /var/log/apache2/specs.openstack.org_access.log combined
+ ServerSignature Off
+
+
+
diff --git a/playbooks/roles/static/tasks/main.yaml b/playbooks/roles/static/tasks/main.yaml
index ba1984ea6e..6f4724c668 100644
--- a/playbooks/roles/static/tasks/main.yaml
+++ b/playbooks/roles/static/tasks/main.yaml
@@ -118,3 +118,19 @@
creates: /etc/apache2/sites-enabled/50-tarballs.openstack.org
notify:
- Reload apache2
+
+# specs.openstack.org
+- name: Install specs.openstack.org
+ copy:
+ src: 50-specs.openstack.org.conf
+ dest: /etc/apache2/sites-available/
+ owner: root
+ group: root
+ mode: 0644
+
+- name: Enable specs.openstack.org
+ command: a2ensite 50-specs.openstack.org
+ args:
+ creates: /etc/apache2/sites-enabled/50-specs.openstack.org
+ notify:
+ - Reload apache2
diff --git a/testinfra/test_static.py b/testinfra/test_static.py
index c200d4918a..112f3e9b5f 100644
--- a/testinfra/test_static.py
+++ b/testinfra/test_static.py
@@ -47,3 +47,9 @@ def test_tarballs_opendev_org(host):
'https://tarballs.opendev.org/openstack/nova/')
# An old file that should be present
assert 'nova-12.0.0.tar.gz' in cmd.stdout
+
+def test_specs_opendev_org(host):
+ cmd = host.run('curl --insecure '
+ '--resolve specs.openstack.org:443:127.0.0.1 '
+ 'https://specs.openstack.org/specs.opml')
+ assert 'OpenStack Specs Feeds' in cmd.stdout