bd808 added a comment.

Thanks for the update, @bd808 . the NGINX directive seemed to me the easiest way.

I agree that it is easiest for you, but for us it creates a tight coupling between your Cloud VPS project and our infrastructure. This tight coupling will complicate all future changes that we make to the proxy layer. Its very likely that at some point your assumption of upstream protection from the shared proxy would end up being broken accidentally.

For instance, would it be possible to setup a project-specific NGINX instance? I investigated that, but could not find any documentation.

@bd808, talking about available VPS puppet profiles/roles

There is a very full featured Puppet module for managing an nginx service, but there is not a convenient role or profile class that generically manages nginx for a project. The reason for this is fundamentally that a custom file or template is needed to configure the nginx server. The base nginx class sets up Puppet rules to ensure that only Puppet managed vhost configurations are enabled. This is a great practice for our production servers, but it makes things a bit more complicated for Cloud VPS projects.

To use the ::nginx module in a Cloud VPS project you would need to write a custom role class and either get it merged into the main operations/puppet.git repo or setup a project local Puppetmaster and add the class there. The "easy" thing to do is sudo apt-get install nginx and then edit the configuration files, but Puppet automation can be nicer in the long term.


TASK DETAIL
https://phabricator.wikimedia.org/T192292

EMAIL PREFERENCES
https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: bd808
Cc: bd808, Aklapper, Hjfocs, Zylc, 1978Gage2001, Lahi, aborrero, Gq86, GoranSMilovanovic, Kiailandi, Chicocvenancio, QZanden, Tbscho, dachary, LawExplorer, JJMC89, srodlund, Luke081515, Wikidata-bugs, aude, Gryllida, Ricordisamoa, Sjoerddebruin, Tpt, scfc, Mbch331, Krenair, chasemp
_______________________________________________
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to