Diffusion c4science (master) History

c4science/roles/haproxy
master64e4f685301243e29628c36…

Aug 22 2017

Twitter account on 503 page
64e4f6853012
·aubort on Aug 22 2017, 09:17.

Aug 8 2017

Allow some instance to flap state and not to interrupt a clone of a 'big' repo…
5e7f2f40b7c5
·aubort on Aug 8 2017, 12:55.

May 24 2017

Update cipher list for haproxy
9191a04b7882
·aubort on May 24 2017, 10:26.

Dec 21 2016

Use haproxy for inbound email on phab
0989b3023f92
·aubort on Dec 21 2016, 11:26.

Oct 20 2016

Use port 22 for VCS, move admin port to 222, internaly it's still 2222
90b9b6c37ac1
·D97
·aubort on Oct 20 2016, 17:34.

Oct 14 2016

Better haproxy 503 error message..
8e8c49adc495
·aubort on Oct 14 2016, 08:53.

Sep 4 2016

Haproxy not needed for mysql anymore
df690a9c9261
·aubort on Sep 4 2016, 21:17.

Jul 25 2016

mitigate httpoxy vuln
3769725aa94e
·aubort on Jul 25 2016, 11:13.

Jul 19 2016

use host_name from inventory again for haproxy config..
85a1afc95232
·aubort on Jul 19 2016, 09:48.

Jul 18 2016

refactor ansible so inventory is not created at every run -> much faster
8fd61b1f5672
·aubort on Jul 18 2016, 17:08.

Jun 21 2016

fix stuff for test env: jenkins is working, fix haproxy config
84279e01839a
·aubort on Jun 21 2016, 17:09.
Fix haproxy configuration file permissions
b43d565cca51
·aubort on Jun 21 2016, 15:25.

Jun 2 2016

Apply all linters
40421d204285
·aubort on Jun 2 2016, 16:43.

May 20 2016

Google webmaster verification file
5a007e88161a
·aubort on May 20 2016, 16:24.

Apr 14 2016

Let haproxy listen in ipv6
f15f0ec27ec5
·aubort on Apr 14 2016, 17:41.
haproxy: increase ssh timeout to huge numbers
8b539f035a9b
·aubort on Apr 14 2016, 14:52.
send keep alive for ssh
f0c406b6d593
·aubort on Apr 14 2016, 14:26.

Apr 4 2016

fix end of line
ea788c1ad6ef
·aubort on Apr 4 2016, 17:41.
only one mysql server for now, other on backup
ec42bb3ed3ab
·aubort on Apr 4 2016, 17:05.
Fix haproxy sorry page
7b7ec32f665a
·aubort on Apr 4 2016, 11:33.

Mar 11 2016

For now do not disable tlsv1 because phabricator uses cURL which is a mess with…
d964d67024b0
·aubort on Mar 11 2016, 17:16.

Mar 8 2016

Shibboleth extension for Phabricator now uses environment variables instead of…
ee2b86527d24
·aubort on Mar 8 2016, 21:52.
Filter shibboleth header on lb
85f87e1491fd
·aubort on Mar 8 2016, 11:28.

Mar 7 2016

haproxy: Use password from config
2f2c4157b805
·aubort on Mar 7 2016, 13:35.
remove shib tests from haproxy
7719541794bf
·aubort on Mar 7 2016, 13:35.
Shibboleth on every app instance, connected with mysql galera, phabricator…
83d52ff79fcf
·aubort on Mar 7 2016, 13:35.
Migrate from nginx to apache for app servers (to integrate with mod_shibd)
5a3c7f3b9653
·aubort on Mar 7 2016, 13:35.
Create instance
50f97d0b53e8
·aubort on Mar 7 2016, 13:35.
Configure shib frontend
39caf05a8732
·aubort on Mar 7 2016, 13:35.

Feb 23 2016

haproxy stats and nagios/ganglia over TLS
277e18ff2019
·aubort on Feb 23 2016, 15:04.
option to allow http for jenkins
a8c62200f1b6
·aubort on Feb 23 2016, 11:42.

Feb 22 2016

order of options
64345608c4df
·aubort on Feb 22 2016, 21:42.
Moar good ciphers and blacklist tlsv1 and add hsts
60af6983846e
·aubort on Feb 22 2016, 21:39.
May I have secure ciphers ?
d2dbb21ce542
·aubort on Feb 22 2016, 21:36.
SSL everywhere
9690370a0003
·aubort on Feb 22 2016, 18:02.
Jenkins is accessed by subdomain instead of by port
c1071710a2c1
·aubort on Feb 22 2016, 16:37.
haproxy: httpcheck and sorry page
ca995d8b1b29
·aubort on Feb 22 2016, 15:52.

Feb 17 2016

Add shibboleth tests
77c7ad41a7ff
·aubort on Feb 17 2016, 17:09.
Disable ssl for now
6f516cf5afdb
·aubort on Feb 17 2016, 10:20.

Feb 10 2016

https by default (not on the app level though it doesnt know it's been accessed…
7fea3c2a7692
·aubort on Feb 10 2016, 11:18.
Enable SSL and some config tuning
b4d79010cf3b
·aubort on Feb 10 2016, 11:10.

Feb 8 2016

better mysql connection check with haproxy
d969ed525337
·aubort on Feb 8 2016, 10:56.
balance using source address, ssh is load balanced again (testing it again with…
f0fd26ca9b7d
·aubort on Feb 8 2016, 10:35.

Jan 26 2016

Use jenkins users, create admin account
f4d22d8f94e2
·aubort on Jan 26 2016, 19:39.

Jan 25 2016

Use loops to create instances, prepare to rename phab path
f12f504b6400
·aubort on Jan 25 2016, 15:15.

Jan 20 2016

replace nginx by apache for monit server as it's a pain to configure nginx for…
cab2d611b8ed
·aubort on Jan 20 2016, 18:29.

Jan 18 2016

Remove allbackups for ssh server, only one at a time
f31b20d8d32b
·aubort on Jan 18 2016, 15:14.
Better app check for haproxy
27b460817c35
·aubort on Jan 18 2016, 13:20.

Jan 12 2016

Make HAProxy loggin work, add entry for TLS
68edfcbfc6a2
·aubort on Jan 12 2016, 16:26.

Jan 8 2016

http auth for monitoring and jenkins
4c7aca0a9e5d
·aubort on Jan 8 2016, 17:14.

Jan 6 2016

move errorfile to frontend, move galera config out of main task
961e3c1a8246
·aubort on Jan 6 2016, 13:06.
Add sorry page when app is unavailable
ca5cde39b9c1
·aubort on Jan 6 2016, 12:55.

Jan 5 2016

ssh tweak for haproxy, add readme stuff: ssh host key for phabricator, add todo
33db8958c31d
·aubort on Jan 5 2016, 15:26.

Jan 4 2016

Create ci again
4ea62d6d249c
·aubort on Jan 4 2016, 16:37.
harpoxy config
ba58a0893c20
·aubort on Jan 4 2016, 13:58.

Dec 17 2015

phabricate, common and jump roles
5bc6a502452c
·aubort on Dec 17 2015, 13:31.

Dec 16 2015

Move haproxy config to a role
8b1c322e4aec
·aubort on Dec 16 2015, 16:31.