======= Service v1.chapril.org ======= Ce service est un site statique, archive en ligne de la première version de www.chapril.org. Actuellement, le v1.chapril.org est installé sur la **//vm lamp//**. ===== Configuration ===== ==== Configuration NGINX ==== La première version du site www.chapril.org était utilisée pour propagée la bannière affichée en haut des services Chapril. Cela passait par un ajout au niveau de NGinx. Il suffisait d'ajouter 2 //include// dans le fichier de configuration NGinx du site ciblé. Pour l'archivage, ces 2 //include// ont été ré-insérés dans la conf de v1.chapril.org : server { listen 80; listen [::]:80; server_name v1.chapril.org; access_log /var/log/nginx/v1.chapril.org/v1.chapril.org.access_log; error_log /var/log/nginx/v1.chapril.org/v1.chapril.org.error_log; include /etc/nginx/acme-challenge; include /etc/nginx/sexy-chapril; include /etc/nginx/force-ssl.conf; } server { listen 443 ssl; listen [::]:443 ssl; server_name v1.chapril.org; access_log /var/log/nginx/v1.chapril.org/v1.chapril.org.access_log; error_log /var/log/nginx/v1.chapril.org/v1.chapril.org.error_log; ssl_certificate /var/lib/dehydrated/certs/v1.chapril.org/fullchain.pem; ssl_certificate_key /var/lib/dehydrated/certs/v1.chapril.org/privkey.pem; include /etc/nginx/sexy-chapril; include /etc/nginx/acme-challenge; #include /etc/nginx/chapril-banner-location-v2; location /Chapril-banner { root /var/www/chapril.org/; proxy_set_header Host banner.chapril.org; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_pass http://lamp.cluster.chapril.org; } location / { #include /etc/nginx/chapril-banner; set $banner_head ' '; set $banner_body '
'; subs_filter '' ' $banner_head '; subs_filter '' ' $banner_body '; sub_filter_once on; proxy_set_header Host $http_host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_pass http://lamp.cluster.chapril.org; } }
==== Supervision ==== Ajout de sondes dans //root@admin:/etc/icinga2/zones.d/master/cluster//lamp.conf : vars.http_vhosts["v1.chaprilorg force-ssl"] = { http_vhost = "v1.chapril.org" http_uri = "/" http_ssl = false http_expect = "HTTP/1.1 301 Moved Permanently,Location: https://v1.chapril.org/" } vars.http_vhosts["v1.chaprilorg homepage"] = { http_vhost = "v1.chapril.org" http_uri = "/" http_ssl = true http_string = "Cha ronronne !" }