Skip to content

Latest commit

 

History

History
94 lines (81 loc) · 4.08 KB

README.md

File metadata and controls

94 lines (81 loc) · 4.08 KB
Raw

correcthorse.httpd

Role for installing apache httpd and configuring vhosts.

Role Variables

Variable Default Notes
httpd_mod_ssl true
httpd_mod_deflate false enable global deflate rules
httpd_htcacheclean false
httpd_mpm prefork
httpd_user apache
httpd_group apache
httpd_http_port 80
httpd_https_port 443
httpd_open_http_port false
httpd_open_https_port false
httpd_maxconnectionsperchild 0
httpd_minspareservers 5 prefork
httpd_maxspareservers 10 prefork
httpd_serverlimit 256 prefork, 16 worker/event prefork, worker/event
httpd_maxrequestworkers 256 prefork, 400 worker/event prefork, worker/event
httpd_startservers 5 prefork, 3 worker/event prefork, worker/event
httpd_threadlimit 64 worker/event
httpd_threadsperchild 25 worker/event
httpd_minsparethreads 75 worker/event
httpd_maxsparethreads 250 worker/event
httpd_default_override None
httpd_can_network_connect 'no'
httpd_can_network_connect_db 'yes'
httpd_can_sendmail 'no'
httpd_serversignature Off On, Off, Email
httpd_servertokens Prod Major,Minor,Min,Prod,OS,Full
httpd_traceenable 'off' 'off','on','extended' - turn on for RFC 2616 compliancy
httpd_logrotate_period weekly daily, weekly, monthly
httpd_logrotate_keep 5 number of rotations to keep
httpd_logrotate_compress false compress logs if true
httpd_ssl_disable_default_vhost false disable default ssl vhost
httpd_ssl_certificate /etc/pki/tls/certs/localhost.crt
httpd_ssl_key /etc/pki/tls/private/localhost.key
httpd_ssl_chain ''
httpd_ssl_ca ''
httpd_honor_cipher_order true
httpd_timeout 60
httpd_remoteip_header X-Forwarded-For
httpd_remoteip_internal_proxies []
httpd_remoteip_trusted_proxies []
httpd_extra_modules [] for extra mod_foo packages that don't warrant their own role
httpd_cache_root /var/cache/httpd/proxy
httpd_cache_size 100M
httpd_cache_clean_interval 15 in minutes 
httpd_ssl_ciphers: "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS:!3DES"


httpd_vhosts:
  - servername: localhost2.localdomain	(required)
    serveraliases:				(optional)
      - localhost3.localdomain
    documentroot: /vagrant/static		(required)
    redirect_http_to_https: false		(optional, default false)
    ssl_vhost: true				(optional, set up ssl vhost, default false but ignored if using ssl role to upload cert for vhost)
    ssl_key: /path/to/key		        (optional, default httpd_ssl_key, ignored if using ssl role to setup cert)
    ssl_certificate: /path/to/cert          (optional, default httpd_ssl_certificate, ignored if using ssl role to setup cert)
    ssl_chain: /path/to/chain		(optional, ignored if using ssl role to setup cert
    ssl_offloaded: false			(optional, default false)
    remoteip: false				(optional, active mod_remoteip for vhost, default false)
    raw: |	       				(optional, for passing in extra apache config)
      ExtraApacheConfigDirective1
      ExtraApacheConfigDirective2

Dependencies

  • correcthorse.common

Example Playbook

- hosts: servers
  roles:
     - { role: correcthorse.httpd }

License

MIT

Author Information