This is one part of a change to try and make pki.fedoraproject.org not
spit out an ugly "you are going to a bad site" warning. The other
change is taking out the cname and making pki go to wildcard.

diff --git a/playbooks/include/proxies-redirects.yml
b/playbooks/include/proxies-redirects.yml
index 21b1583..919d911 100644
--- a/playbooks/include/proxies-redirects.yml
+++ b/playbooks/include/proxies-redirects.yml
@@ -539,6 +539,11 @@
     target: https://fedorahosted.org/k12linux/


+ - role: httpd/redirect
+   shortname: dogtagpki
+   website: pki.fedoraproject.org
+   target: http://dogtagpki.org/
+
   # Cloudy bits
   - role: httpd/redirect
     shortname: cloud-front-page
diff --git a/playbooks/include/proxies-websites.yml
b/playbooks/include/proxies-websites.yml
index 132bea5..9c0e173 100644
--- a/playbooks/include/proxies-websites.yml
+++ b/playbooks/include/proxies-websites.yml
@@ -190,6 +190,11 @@
     cert_name: "{{wildcard_cert_name}}"

   - role: httpd/website
+    site_name: pki.fedoraproject.org
+    sslonly: true
+    cert_name: "{{wildcard_cert_name}}"
+
+  - role: httpd/website
     site_name: spins.fedoraproject.org
     server_aliases:
     - spins.stg.fedoraproject.org

-- 
Stephen J Smoogen.
_______________________________________________
infrastructure mailing list -- infrastructure@lists.fedoraproject.org
To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org

Reply via email to