Merge "Serve gating.dev static website"

inventory/service/host_vars/static01.opendev.org.yaml

@@ -68,3 +68,6 @@ letsencrypt_certs:
     - www.zuul-ci.org
     - zuulci.org
     - www.zuulci.org
+  static01-gating-dev:
+    - gating.dev
+    - www.gating.dev

playbooks/roles/letsencrypt-create-certs/handlers/main.yaml

@@ -132,6 +132,9 @@
 - name: letsencrypt updated static01-zuul-ci-org
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
 
+- name: letsencrypt updated static01-gating-dev
+  include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
 # Grafana
 
 - name: letsencrypt updated grafana01-opendev-org-main

playbooks/roles/static/files/50-gating.dev.conf

@@ -0,0 +1,50 @@
+<VirtualHost *:80>
+    ServerName gating.dev
+    ServerAlias www.gating.dev
+
+    RewriteEngine on
+    RewriteRule ^/(.*) https://gating.dev/$1 [last,redirect=permanent]
+
+    ErrorLog /var/log/apache2/gating.dev_error.log
+    LogLevel warn
+    CustomLog /var/log/apache2/gating.dev_access.log combined
+    ServerSignature Off
+</VirtualHost>
+
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
+    ServerName gating.dev
+    ServerAlias www.gating.dev
+
+    RewriteEngine on
+
+    RewriteCond %{HTTP_HOST} !^gating\.dev [nocase]                               
+    RewriteRule ^/(.*) https://gating.dev/$1 [last,redirect=permanent]            
+
+    SSLEngine on
+    SSLProtocol All -SSLv2 -SSLv3
+    # Once the machine is using something to terminate TLS that supports ECDHE
+    # then this should be edited to remove the RSA+AESGCM:RSA+AES so that PFS
+    # only is guarenteed.
+    SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLCertificateFile /etc/letsencrypt-certs/gating.dev/gating.dev.cer
+    SSLCertificateKeyFile /etc/letsencrypt-certs/gating.dev/gating.dev.key
+    SSLCertificateChainFile /etc/letsencrypt-certs/gating.dev/ca.cer
+
+    DocumentRoot /afs/openstack.org/project/zuul-ci.org/gating.dev/www
+    <Directory /afs/openstack.org/project/zuul-ci.org/gating.dev/www>
+        Options Indexes FollowSymLinks MultiViews
+        Require all granted
+        AllowOverride None
+        # Allow mod_rewrite rules
+        AllowOverrideList Redirect RedirectMatch
+        ErrorDocument 404 /errorpage.html
+    </Directory>
+
+    ErrorLog /var/log/apache2/gating.dev_error.log
+    LogLevel warn
+    CustomLog /var/log/apache2/gating.dev_access.log combined
+    ServerSignature Off
+</VirtualHost>
+</IfModule>

playbooks/roles/static/tasks/main.yaml

@@ -99,6 +99,7 @@
     - 50-docs.openstack.org
     - 50-docs.starlingx.io
     - 50-eavesdrop.openstack.org
+    - 50-gating.dev
     - 50-governance.openstack.org
     - 50-glance.openstack.org
     - 50-horizon.openstack.org