opendev
/
system-config
Code Issues Proposed changes

Update mirror apache configs to 2.4 acl primitives 

We don't need to keep using the old 2.2 Order, Allow, Deny, Satisfy acl
primitives because we are now running Apache 2.4 everywhere. Stick to
these as they simplify understanding of acls by being consistent.

Change-Id: I9ed4edf15f206006fd79bdef298f8ed101a7a381
This commit is contained in:
Clark Boylan 2020-10-15 10:07:07 -07:00
parent 9b6398394d
commit e9ddc2eb45
1 changed files with 5 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
playbooks/roles/mirror/templates/mirror.vhost.j2
View File

@ -33,12 +33,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Directory /var/www/mirror>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
Satisfy any
<IfVersion >= 2.4>
Require all granted
</IfVersion>
Require all granted
</Directory>
# Caching reverse proxy for things that don't make sense in AFS
@ -153,8 +148,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Macro ProxyMirror $port>
# Disable directory listing by default.
<Directory />
Order Deny,Allow
Deny from all
Require all denied
Options None
AllowOverride None
</Directory>
@ -328,8 +322,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Macro Dockerv2Mirror $port>
# Disable directory listing by default.
<Directory />
Order Deny,Allow
Deny from all
Require all denied
Options None
AllowOverride None
</Directory>
@ -397,8 +390,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Macro RHRegistryMirror $port>
# Disable directory listing by default.
<Directory />
Order Deny,Allow
Deny from all
Require all denied
Options None
AllowOverride None
</Directory>
@ -463,8 +455,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
# Disable directory listing by default.
<Directory />
Order Deny,Allow
Deny from all
Require all denied
Options None
AllowOverride None
</Directory>