Changeset 38567 for main/trunk/greenstone3

Timestamp:

2024-01-16T22:35:39+13:00 (4 months ago)

Author:

davidb

Message:

Commented out entries pondering what to do with opening up firewall ports

Location:

main/trunk/greenstone3/src/ansible-playbooks

Files:

• reverse-proxy-http-tasks.yml (modified) (1 diff)
• reverse-proxy-https-tasks.yml (modified) (1 diff)

main/trunk/greenstone3/src/ansible-playbooks/reverse-proxy-http-tasks.yml

@@ -20 +20 @@
 #      port: "{{ gsdl3servlet_external.port | default('80',true) }}"
 #      proto: tcp
+#      when gsdl3servlet_external.protocol == "http"
+
+#  - name: "UFW - Allow HTTP on port {{ gsdl3servlet_external.port | default('80',true) }}"
+#    ufw:
+#      rule: allow
+#      port: "{{ gsdl3servlet_external.port | default('80',true) }}"
+#      proto: tcp
+#      when gsdl3servlet_external.port == "http"

main/trunk/greenstone3/src/ansible-playbooks/reverse-proxy-https-tasks.yml

@@ -16 +16 @@
 
 
-#    - name: "UFW - Allow HTTP on port {{ gsdl3servlet_external.port | default('80',true) }}"
+#    - name: "UFW - Allow HTTPS on port {{ gsdl3servlet_external.port | default('443',true) }}"
 #      ufw:
 #        rule: allow
-#        port: "{{ gsdl3servlet_external.port | default('80',true) }}"
+#        port: "{{ gsdl3servlet_external.port | default('443',true) }}"
 #        proto: tcp
+#      when gsdl3servlet_external.protocol == "https"
 
+##
+# ???? Open up Port 80, and assume there is a config rule for rewriting to HTTPS port ??
+##
+#    - name: "UFW - Allow HTTP on port 80"
+#      ufw:
+#        rule: allow
+#        port: 80
+#        proto: tcp
+#      when gsdl3servlet_external.protocol == "https"
+