diff --git a/uwsgi-python/handlers/main.yml b/uwsgi-python/handlers/main.yml index 783684a0313d4e2fe2789ecdead8c8ba4b0bfc25..909b259601ced8db8e983cd442b019eb3a483234 100644 --- a/uwsgi-python/handlers/main.yml +++ b/uwsgi-python/handlers/main.yml @@ -23,6 +23,9 @@ - name: restart uwsgi instance sso service: name="uwsgi@sso" state=restarted +- name: restart uwsgi instance sso-vampir + service: name="uwsgi@sso-vampir" state=restarted + - name: restart uwsgi instance migration-webapp service: name="uwsgi@migration-webapp" state=restarted diff --git a/webserver/files/snippets/sso-locations.conf b/webserver/files/snippets/sso-locations-fsmpi.conf similarity index 100% rename from webserver/files/snippets/sso-locations.conf rename to webserver/files/snippets/sso-locations-fsmpi.conf diff --git a/webserver/files/snippets/sso-locations-vampir.conf b/webserver/files/snippets/sso-locations-vampir.conf new file mode 100644 index 0000000000000000000000000000000000000000..98d2e44de81eb8e5099e25fe61ff2c2b649ea5e9 --- /dev/null +++ b/webserver/files/snippets/sso-locations-vampir.conf @@ -0,0 +1,17 @@ +location = /sso { + internal; + proxy_pass https://sso.vampir.rwth-aachen.de/backend?group=$sso_group; + proxy_pass_request_body off; + proxy_set_header Content-Length ""; + proxy_set_header X-Original-URI $request_uri; +} + +location @sso { + add_header Cache-Control no-store; + return 302 https://sso.vampir.rwth-aachen.de?next=https://$server_name$request_uri; +} + +location @sso_logout { + add_header Cache-Control no-store; + return 302 https://sso.vampir.rwth-aachen.de/logout?next=https://$server_name$request_uri; +} diff --git a/webserver/templates/sites/tlsproxy.conf b/webserver/templates/sites/tlsproxy.conf index e0427ab50164ad748f9cfadfa80938cea1dd7ede..bb31ed7e83fdbc447fe1993ef52db2ad225cf36f 100644 --- a/webserver/templates/sites/tlsproxy.conf +++ b/webserver/templates/sites/tlsproxy.conf @@ -39,7 +39,7 @@ server { {% endfor %} {% if server.use_sso is defined and server.use_sso %} - include /etc/nginx/snippets/sso-locations.conf; + include /etc/nginx/snippets/sso-locations-{{server.sso_domain|default("fsmpi")}}.conf; {% else %} {% endif %}