4edb378b1e
Apply configuration to add request time to the access log. Creates virtual hosts for each Keystone service. Enables SSL termination within Nginx. The Uwsgi sockets are updated to match the Keystone developer docs to improve consistency of experience for operators. No Shibboleth integration is included. Not introducing any additional Nginx restarts based on changes in Federation configuration yet for this reason. Change-Id: Iec42810be7ff6d05fa38deb23996e66e0c34da8e Related: blueprint keystone-uwsgi
52 lines
1.6 KiB
YAML
52 lines
1.6 KiB
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Ensure Apache is not running
|
|
service:
|
|
name: "{{ keystone_system_service_name }}"
|
|
state: stopped
|
|
pattern: "{{ keystone_system_service_name }}"
|
|
failed_when: false
|
|
when: not keystone_apache_mod_wsgi_enabled | bool
|
|
|
|
- name: Disable default configuration
|
|
file:
|
|
path: /etc/nginx/sites-enabled/default
|
|
state: absent
|
|
notify: Restart Nginx
|
|
|
|
- name: Configure custom nginx log format
|
|
lineinfile:
|
|
insertbefore: access_log
|
|
dest: "/etc/nginx/nginx.conf"
|
|
line: "log_format custom '{{ keystone_nginx_access_log_format_combined }} {{ keystone_nginx_access_log_format_extras }}';"
|
|
notify: Restart Nginx
|
|
|
|
# Configure app
|
|
- name: Configure virtual hosts
|
|
template:
|
|
src: keystone_nginx.conf.j2
|
|
dest: "/etc/nginx/sites-available/{{ item }}.conf"
|
|
with_items: keystone_wsgi_program_names
|
|
notify: Restart Nginx
|
|
|
|
- name: Link to enable virtual hosts
|
|
file:
|
|
src: "/etc/nginx/sites-available/{{ item }}.conf"
|
|
path: "/etc/nginx/sites-enabled/{{ item }}.conf"
|
|
state: link
|
|
with_items: keystone_wsgi_program_names
|
|
notify: Restart Nginx
|