Merge ~lgp171188/launchpad-mojo-specs:fix-broken-primary-archive-site into launchpad-mojo-specs:master

[Guruprasad]

Fix the broken HTTP version of the primary host site

Now there is an HTTPS-only version of that site, without a redirect from
HTTP to HTTPS, and an HTTP-only version of the same site. With this, we
have the site on both HTTP and HTTPS, without the former redirecting to
the latter.

[Clinton Fung (clinton-fung)]

Looks good, thanks!

review: Approve

Unmerged commits

2be2a23... by Guruprasad on 2024-04-15

Fix the broken HTTP version of the primary host site

Now there is an HTTPS-only version of that site, without a redirect from
HTTP to HTTPS, and an HTTP-only version of the same site. With this, we
have the site on both HTTP and HTTPS, without the former redirecting to
the latter.

lint:0 (build)

1 → 1 of 1 result

First • Previous • Next • Last

diff --git a/lp-archive/bundle.yaml b/lp-archive/bundle.yaml
index 95a85c0..46ef3b6 100644
--- a/lp-archive/bundle.yaml
+++ b/lp-archive/bundle.yaml
@@ -145,6 +145,15 @@ applications:
                 - real_ip_header X-Forwarded-For
                 - allow 127.0.0.1
                 - deny all
+        # We need the following configuration to have separate
+        # HTTP and HTTPS versions of the primary host's site,
+        # with the former *not* redirecting to the latter.
+        # The key below creates an HTTP-only version of the site.
+        {{ primary_host }}:
+          <<: *ARCHIVE_SITE
+          tls-cert-bundle-path: ""
+        # The key below creates an HTTPS-only version of the site
+        # without a corresponding redirect from HTTP to HTTPS.
         {{ primary_host }}:
           <<: *ARCHIVE_SITE
           redirect-http-to-https: false