roles/apache/vars/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

apache_packages:
  - httpd
  - mod_ssl
  - mod_auth_gssapi
  - mod_session
  - mod_ldap

apache_public_dir: /var/www

apache_session_dir: /var/lib/httpd/session
apache_gssapi_session_key: '{{ apache_session_dir }}/gssapi.key'
apache_letsencrypt_dir: '{{ apache_public_dir }}/letsencrypt'
apache_keytab: /var/lib/gssproxy/clients/apache.keytab

apache_gzip_types:
  - application/javascript
  - application/json
  - application/rss+xml
  - application/vnd.ms-fontobject
  - application/x-font
  - application/x-font-opentype
  - application/x-font-otf
  - application/x-font-truetype
  - application/x-font-ttf
  - application/x-javascript
  - application/xhtml+xml
  - application/xml
  - font/opentype
  - font/otf
  - font/ttf
  - image/svg+xml
  - image/x-icon
  - text/css
  - text/html
  - text/javascript
  - text/plain
  - text/xml

apache_selinux_policy_te: |
	require {
		type unconfined_service_t;
		type httpd_t;
		class key read;
	}

	#============= httpd_t ==============
	allow httpd_t unconfined_service_t:key read;