removed unused config, updated requirements to use ansible-galaxy
This commit is contained in:
		
							parent
							
								
									bb55714abb
								
							
						
					
					
						commit
						11b9052bee
					
				|  | @ -1,9 +1,5 @@ | |||
| --- | ||||
| 
 | ||||
| # main switches | ||||
| configure_anti_ddos: true  # mod_evasive | ||||
| configure_security: true  # https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu | ||||
| 
 | ||||
| # default config => is overwritten by provided config | ||||
| default_apache: | ||||
|   sites: {} | ||||
|  | @ -166,37 +162,6 @@ default_site_config: | |||
|     key_size: | ||||
|     email: | ||||
| 
 | ||||
| default_modules: | ||||
|   # <IfModule ${MOD}> | ||||
|   # </IfModule> | ||||
|   prefork:  # see: https://httpd.apache.org/docs/2.4/mod/mpm_common.html | ||||
|     ifname: 'prefork.c' | ||||
|     settings: | ||||
|       StartServers: 5 | ||||
|       MinSpareServers: 5 | ||||
|       MaxSpareServers: 10 | ||||
|       MaxRequestWorkers: 256 | ||||
|       MaxConnectionsPerChild: 0 | ||||
|   mod_evasive: | ||||
|     ifname: 'mod_evasive20.c' | ||||
|     settings: | ||||
|       DOSHashTableSize: 4096 | ||||
|       DOSPageCount: 25 | ||||
|       DOSSiteCount: 100 | ||||
|       DOSPageInterval: 1 | ||||
|       DOSSiteInterval: 1 | ||||
|       DOSBlockingPeriod: 60 | ||||
|       DOSLogDir: "{{ CONFIG.log.path }}" | ||||
|       # DOSSystemCommand: | ||||
|       # DOSEmailNotify: mail@yourdomain.com | ||||
|       DOSWhitelist: [ | ||||
|         '127.0.0.*', '192.168.*.*', '10.*.*.*', '172.16.*.*', '172.17.*.*', '172.18.*.*', '172.19.*.*', | ||||
|         '172.20.*.*', '172.21.*.*', '172.22.*.*', '172.23.*.*', '172.24.*.*', '172.25.*.*', '172.26.*.*', | ||||
|         '172.27.*.*', '172.28.*.*', '172.29.*.*', '172.30.*.*', '172.31.*.*', '172.32.*.*', | ||||
|       ] | ||||
| 
 | ||||
| APACHE_MODULES: "{{ default_modules | combine(modules, recursive=true) }}" | ||||
| 
 | ||||
| apache_config_graylist: [ | ||||
|   'SSLEngine', 'SSLCertificateKeyFile', 'SSLCertificateFile', 'SSLCertificateChainFile', 'ErrorLog', 'CustomLog', 'ServerAdmin', | ||||
|   'ServerAlias', 'ServerName', 'Redirect' | ||||
|  |  | |||
|  | @ -10,6 +10,4 @@ collections: | |||
|     source: 'https://galaxy.ansible.com' | ||||
| 
 | ||||
| roles: | ||||
|   - src: 'https://github.com/ansibleguy/infra_certs.git' | ||||
|     version: 'stable' | ||||
|     name: 'ansibleguy.infra_certs' | ||||
|   - src: 'ansibleguy.infra_certs' | ||||
|  |  | |||
		Loading…
	
		Reference in New Issue