summaryrefslogtreecommitdiff
path: root/hieradata/nodes/proxyin.yaml
diff options
context:
space:
mode:
authorJan Dittberner <jandd@cacert.org>2021-08-15 11:41:31 +0200
committerJan Dittberner <jandd@cacert.org>2021-08-15 11:41:31 +0200
commitdbb08e645963ac758541d955867d441f069aaef2 (patch)
tree52230b679347f9cdf544147f46ff09a26d349807 /hieradata/nodes/proxyin.yaml
parent500b0413b52a1417391bd35d07397cdf9ce1e227 (diff)
downloadcacert-puppet-dbb08e645963ac758541d955867d441f069aaef2.tar.gz
cacert-puppet-dbb08e645963ac758541d955867d441f069aaef2.tar.xz
cacert-puppet-dbb08e645963ac758541d955867d441f069aaef2.zip
Implement http redirect/proxy support for sniproxy
Diffstat (limited to 'hieradata/nodes/proxyin.yaml')
-rw-r--r--hieradata/nodes/proxyin.yaml91
1 files changed, 62 insertions, 29 deletions
diff --git a/hieradata/nodes/proxyin.yaml b/hieradata/nodes/proxyin.yaml
index f59c10c..cd93e55 100644
--- a/hieradata/nodes/proxyin.yaml
+++ b/hieradata/nodes/proxyin.yaml
@@ -3,35 +3,68 @@ classes:
- roles::proxyin
profiles::base::admins:
- jandd
-profiles::sniproxy::https_forwards:
- blog.cacert.org: "10.0.0.13:443"
- board.cacert.org: "10.0.0.34:443"
- bugs.cacert.org: "10.0.0.16:443"
- cats.cacert.org: "10.0.0.27:443"
- cats.test.cacert.org: "10.0.0.248:443"
- cats.test2.cacert.org: "10.0.0.249:443"
- cats.test3.cacert.org: "10.0.0.149:443"
- cert.svn.cacert.org: "10.0.0.20:443"
- community.cacert.org: "10.0.0.118:443"
- issue.cacert.org: "10.0.0.28:443"
- mgr.test.cacert.org: "10.0.0.248:443"
- mgr.test2.cacert.org: "10.0.0.249:443"
- mgr.test3.cacert.org: "10.0.0.149:443"
- motion.cacert.org: "10.0.0.117:8443"
- nocert.svn.cacert.org: "10.0.0.20:443"
- secure.test.cacert.org: "10.0.0.248:443"
- secure.test2.cacert.org: "10.0.0.249:443"
- secure.test3.cacert.org: "10.0.0.149:443"
- selfservice.cacert.org: "10.0.0.118:8443"
- svn.cacert.org: "10.0.0.20:443"
- test.cacert.org: "10.0.0.248:443"
- test2.cacert.org: "10.0.0.249:443"
- test3.cacert.org: "10.0.0.149:443"
- testmgr.cacert.org: "10.0.0.148:443"
- wiki.cacert.org: "10.0.0.12:443"
- www.test.cacert.org: "10.0.0.248:443"
- www.test2.cacert.org: "10.0.0.249:443"
- www.test3.cacert.org: "10.0.0.149:443"
+profiles::sniproxy::forwarded:
+ - name: blog.cacert.org
+ ip: "10.0.0.13"
+ - name: board.cacert.org
+ ip: "10.0.0.34"
+ - name: bugs.cacert.org
+ ip: "10.0.0.16"
+ - name: cats.cacert.org
+ ip: "10.0.0.27"
+ - name: cats.test.cacert.org
+ ip: "10.0.0.248"
+ - name: cats.test2.cacert.org
+ ip: "10.0.0.249"
+ - name: cats.test3.cacert.org
+ ip: "10.0.0.149"
+ - name: cert.svn.cacert.org
+ ip: "10.0.0.20"
+ - name: community.cacert.org
+ ip: "10.0.0.118"
+ redirect_http: true
+ - name: issue.cacert.org
+ ip: "10.0.0.28"
+ - name: mgr.test.cacert.org
+ ip: "10.0.0.248"
+ - name: mgr.test2.cacert.org
+ ip: "10.0.0.249"
+ - name: mgr.test3.cacert.org
+ ip: "10.0.0.149"
+ - name: motion.cacert.org
+ ip: "10.0.0.117"
+ port: 8443
+ redirect_http: true
+ - name: nocert.svn.cacert.org
+ ip: "10.0.0.20"
+ - name: secure.test.cacert.org
+ ip: "10.0.0.248"
+ - name: secure.test2.cacert.org
+ ip: "10.0.0.249"
+ - name: secure.test3.cacert.org
+ ip: "10.0.0.149"
+ - name: selfservice.cacert.org
+ ip: "10.0.0.118"
+ port: 8443
+ redirect_http: true
+ - name: svn.cacert.org
+ ip: "10.0.0.20"
+ - name: test.cacert.org
+ ip: "10.0.0.248"
+ - name: test2.cacert.org
+ ip: "10.0.0.249"
+ - name: test3.cacert.org
+ ip: "10.0.0.149"
+ - name: testmgr.cacert.org
+ ip: "10.0.0.148"
+ - name: wiki.cacert.org
+ ip: "10.0.0.12"
+ - name: www.test.cacert.org
+ ip: "10.0.0.248"
+ - name: www.test2.cacert.org
+ ip: "10.0.0.249"
+ - name: www.test3.cacert.org
+ ip: "10.0.0.149"
profiles::icinga2_agent::pki_ticket: >
ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
DQYJKoZIhvcNAQEBBQAEggEAVh+d4e8x8Tub+RMVEeyllfUZz2VGaqIL0mW7