system-config/inventory/service/group_vars/mirror.yaml
Cédric Jeanneret d6a5c34eb0 Correct how ansible-galaxy is proxified
ansible-galaxy CLI makes multiple calls to the remote server, with
various API endpoint, and expects JSON containing fully qualified URI
(scheme://host/path), meaning we must inspect the different files and
ensure we're rewriting the content so that it points to the proxy all
the time.

Also, the remote galaxy.ansible.com has some redirects with absolute
paths, breaking for some reason the ProxyPassReverse - this is why we
get yet a new pair of dedicated ports for this proxy (TLS/non-TLS).

Then, there's the protocol issue: since mod_substitute is apparently
unable to take httpd variables such as the REQUEST_SCHEME, we have to
use some If statement in order to ensure we're passing the correct
scheme, being http or https. Note that ansible-galaxy doesn't understand
the "//host/path".

This patch also adds some more tests in order to ensure the API answers
as expected through the proxy.

Change-Id: Icf6f5c83554b51854fabde6e4cc2d646d120c0e9
2022-12-01 17:40:42 +00:00

14 lines
138 B
YAML

iptables_extra_public_tcp_ports:
- 80
- 443
- 4443
- 4445
- 4446
- 4447
- 4448
- 8080
- 8082
- 8083
- 8084
- 8085