Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/puppet/zulip_ops/templates/nagios_apache_site.conf.tem...

55 lines
1.8 KiB
Plaintext
Raw Normal View History

Switch nagios to .zulip.net and add cert We maintain a legacy hhq.c cert to avoid breaking links. (imported from commit 4e8878185b02c0ed6c9193e21ff94ac96a2ef7b4)
2013-09-05 00:17:05 +02:00
<VirtualHost *:80>
nagios: Update apache configuration to be generated. Since this is basically just stock Apache configuration for Nagios with a hostname put in, we can just fetch the hostname from our configuration.
2016-07-21 07:46:02 +02:00
ServerName nagios.<%= @hosts_domain %>
Redirect permanent / https://nagios.<%= @hosts_domain %>/
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
</VirtualHost>
Switch nagios to .zulip.net and add cert We maintain a legacy hhq.c cert to avoid breaking links. (imported from commit 4e8878185b02c0ed6c9193e21ff94ac96a2ef7b4)
2013-09-05 00:17:05 +02:00
<VirtualHost *:443>
nagios: Update apache configuration to be generated. Since this is basically just stock Apache configuration for Nagios with a hostname put in, we can just fetch the hostname from our configuration.
2016-07-21 07:46:02 +02:00
ServerName nagios.<%= @hosts_domain %>
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
SSLEngine on
nagios: Update apache configuration to be generated. Since this is basically just stock Apache configuration for Nagios with a hostname put in, we can just fetch the hostname from our configuration.
2016-07-21 07:46:02 +02:00
SSLCertificateFile /etc/letsencrypt/live/nagios.<%= @hosts_domain %>/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/nagios.<%= @hosts_domain %>/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/nagios.<%= @hosts_domain %>/privkey.pem
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
Header add Strict-Transport-Security "max-age=15768000"
Add X-Frame-Options header on nagios, trac, wiki Prevents clickjacking attacks. (imported from commit 8b3872e607d8a4e714c280a3226465fde0d5a6ed)
2012-12-01 03:08:26 +01:00
Header add X-Frame-Options DENY
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
ScriptAlias /cgi-bin/nagios3 /usr/lib/cgi-bin/nagios3
ScriptAlias /nagios3/cgi-bin /usr/lib/cgi-bin/nagios3
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
# Where the stylesheets (config files) reside
Alias /nagios3/stylesheets /etc/nagios3/stylesheets
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
# Where the HTML pages live
Alias /nagios3 /usr/share/nagios3/htdocs
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
nagios: Update apache configuration to be generated. Since this is basically just stock Apache configuration for Nagios with a hostname put in, we can just fetch the hostname from our configuration.
2016-07-21 07:46:02 +02:00
RedirectMatch ^/?$ https://nagios.<%= @hosts_domain %>/cgi-bin/nagios3/status.cgi?host=all
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Move the nagios Apache authentication directives to a <Location> block Following the trac Apache config. (imported from commit 01e773f2361d85f45f190f6ade2510b84a2f88ee)
2012-12-01 03:07:08 +01:00
<Location "/">
AuthType Digest
puppet: Rename "wiki" realm to "monitoring". This is vestigial. It requires manually altering the `htdigest` file (not stored in this repo) to change the digest realm from `wiki` to `monitoring`, and will re-prompt users for their passwords if the browsers currently store them.
2020-05-29 00:00:30 +02:00
AuthName "monitoring"
Move the nagios Apache authentication directives to a <Location> block Following the trac Apache config. (imported from commit 01e773f2361d85f45f190f6ade2510b84a2f88ee)
2012-12-01 03:07:08 +01:00
AuthDigestProvider file
puppet: Rename "wiki" realm to "monitoring". This is vestigial. It requires manually altering the `htdigest` file (not stored in this repo) to change the digest realm from `wiki` to `monitoring`, and will re-prompt users for their passwords if the browsers currently store them.
2020-05-29 00:00:30 +02:00
AuthUserFile /etc/apache2/users/monitoring
Move the nagios Apache authentication directives to a <Location> block Following the trac Apache config. (imported from commit 01e773f2361d85f45f190f6ade2510b84a2f88ee)
2012-12-01 03:07:08 +01:00
Require valid-user
</Location>
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
<DirectoryMatch (/usr/share/nagios3/htdocs|/usr/lib/cgi-bin/nagios3|/etc/nagios3/stylesheets)>
Options FollowSymLinks
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
DirectoryIndex index.php index.html
Add Nagios configuration to puppet. (imported from commit 34c09661e63b31bd177b9704b69a0d8d0d644de7)
2012-10-26 20:01:55 +02:00
Rework the nagios Apache config as a proper vhost This also adds HSTS. Based on the trac Apache config. Fixes #435. Suggested viewing: git show -w (imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)
2012-12-01 03:03:41 +01:00
Order Allow,Deny
Allow From All
</DirectoryMatch>
<Directory /usr/share/nagios3/htdocs>
Options +ExecCGI
</Directory>
# Enable this ScriptAlias if you want to enable the grouplist patch.
# See http://apan.sourceforge.net/download.html for more info
# It allows you to see a clickable list of all hostgroups in the
# left pane of the Nagios web interface
ScriptAlias /nagios3/side.html /usr/lib/cgi-bin/nagios3/grouplist.cgi
</VirtualHost>