Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

#97 #100 SSL reverse proxies with apache and nginx for FireEdge #101

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

dann1
Copy link
Contributor

@dann1 dann1 commented Nov 21, 2024

With Ruby Sunstone deprecated on 6.10. FireEdge is now being served as the web UI on the web server of choice. apache and nginx as reverse proxies with ssl termination are the only choices contemplated at the moment.

Updated the GUI role and its references

  • the certificates options are now grouped within the ssl variable
  • ssl includes the web server of choice. The no ssl option has been removed.
  • passenger references and ruby sunstone are removed. Instead the fireedge sunstone config file is now managed.
  • the apache configuration file is now exclusively reverse proxying fireedge

Closes #97
Closes #100

@dann1 dann1 requested a review from sk4zuzu November 21, 2024 05:29
@dann1 dann1 changed the title #97 #100 SSL reverse proxies with apache and nginx #97 #100 SSL reverse proxies with apache and nginx for FireEdge Nov 21, 2024
- name: Install Web Server
ansible.builtin.include_tasks:
file: "{{ role_path }}/tasks/{{ ssl.web_server }}.yml"
when: ssl.web_server in ['nginx', 'apache']
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
when: ssl.web_server in ['nginx', 'apache']

IMO this should be asserted in precheck, and then I'd let it simply fail here. 🤔

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it should be renamed from passenger-ha to ssl-ha, no? 🤔

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

register: service_sunstone

can be removed I guess 🤔

@dann1 dann1 requested a review from sk4zuzu November 22, 2024 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

add ssl reverse proxy option with nginx FireEdge Sunstone as main WebUI with ssl reverse proxy
2 participants