opendev/system-config
Code Issues Proposed changes

Update mirror apache configs to 2.4 acl primitives

Browse Source 
We don't need to keep using the old 2.2 Order, Allow, Deny, Satisfy acl
primitives because we are now running Apache 2.4 everywhere. Stick to
these as they simplify understanding of acls by being consistent.

Change-Id: I9ed4edf15f206006fd79bdef298f8ed101a7a381
This commit is contained in:
Clark Boylan 2020-10-15 10:07:07 -07:00
parent 9b6398394d
commit e9ddc2eb45
1 changed files with 5 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
playbooks/roles/mirror/templates/mirror.vhost.j2
View File

@ -33,12 +33,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Directory /var/www/mirror> <Directory /var/www/mirror>
Options Indexes FollowSymLinks MultiViews Options Indexes FollowSymLinks MultiViews
AllowOverride None AllowOverride None
Order allow,deny
allow from all
Satisfy any
<IfVersion >= 2.4>
Require all granted Require all granted
</IfVersion>
</Directory> </Directory>
# Caching reverse proxy for things that don't make sense in AFS # Caching reverse proxy for things that don't make sense in AFS
@ -153,8 +148,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Macro ProxyMirror $port> <Macro ProxyMirror $port>
# Disable directory listing by default. # Disable directory listing by default.
<Directory /> <Directory />
Order Deny,Allow Require all denied
Deny from all
Options None Options None
AllowOverride None AllowOverride None
</Directory> </Directory>
@ -328,8 +322,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Macro Dockerv2Mirror $port> <Macro Dockerv2Mirror $port>
# Disable directory listing by default. # Disable directory listing by default.
<Directory /> <Directory />
Order Deny,Allow Require all denied
Deny from all
Options None Options None
AllowOverride None AllowOverride None
</Directory> </Directory>
@ -397,8 +390,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
<Macro RHRegistryMirror $port> <Macro RHRegistryMirror $port>
# Disable directory listing by default. # Disable directory listing by default.
<Directory /> <Directory />
Order Deny,Allow Require all denied
Deny from all
Options None Options None
AllowOverride None AllowOverride None
</Directory> </Directory>
@ -463,8 +455,7 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
# Disable directory listing by default. # Disable directory listing by default.
<Directory /> <Directory />
Order Deny,Allow Require all denied
Deny from all
Options None Options None
AllowOverride None AllowOverride None
</Directory> </Directory>