What is it?
A puppet module that installs apache with mod_evasive and mod_security (optional). This module has been written and tested on CentOS 6 and is primarily used for configuring apache as a proxy for Tomcat via AJP and other services via TCP, but it also has support for mod_passenger, mod_python, and mod_wsgi as well.
Disabling mod_security by vhost, rule, or IP are provided. JSON logging for vhosts allowing easy import into logstash is available.
Support for SSL certificates, password files, or any other sensitive information may be installed installed to a limted access directory through apache::securefile.
Monitoring by sensu is provided, but additional monitoring solutions can easily be added.
Generic apache install
Adding a NameVirtualHost on port 80:
Generic config files:
Tomcat AJP proxy with http -> https redirect:
Only tested on CentOS 6
[ ] Make mod_evasive optional [ ] Make mod_status optional and configurable [ ] Allow disabling mod_security by file [ ] Improve documentation, complex module
Released under the Apache 2.0 licence
- Fork it
- Create a topic branch
- Improve/fix (with spec tests)
- Push new topic branch
- Submit a PR
v2.0.0: Initial public release
Copyright 2013 EvenUp Inc Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.