X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/ec3d70f727cf622db949b72d85cdb36504b07f13..f3b0dd8d793994d2661cc416cb4136e85883874e:/tools/salt-install/config_examples/single_host/single_hostname/pillars/nginx_passenger.sls diff --git a/tools/salt-install/config_examples/single_host/single_hostname/pillars/nginx_passenger.sls b/tools/salt-install/config_examples/single_host/single_hostname/pillars/nginx_passenger.sls index 854c543aca..26e2baf044 100644 --- a/tools/salt-install/config_examples/single_host/single_hostname/pillars/nginx_passenger.sls +++ b/tools/salt-install/config_examples/single_host/single_hostname/pillars/nginx_passenger.sls @@ -9,13 +9,13 @@ {%- set passenger_mod = '/usr/lib64/nginx/modules/ngx_http_passenger_module.so' if grains.osfinger in ('CentOS Linux-7',) else '/usr/lib/nginx/modules/ngx_http_passenger_module.so' %} -{%- set passenger_ruby = '/usr/local/rvm/rubies/ruby-2.7.2/bin/ruby' - if grains.osfinger in ('CentOS Linux-7', 'Ubuntu-18.04',) else +{%- set passenger_ruby = '/usr/local/rvm/wrappers/default/ruby' + if grains.osfinger in ('CentOS Linux-7', 'Ubuntu-18.04', 'Debian-10') else '/usr/bin/ruby' %} ### NGINX nginx: - install_from_phusionpassenger: true + __NGINX_INSTALL_SOURCE__: true lookup: passenger_package: {{ passenger_pkg }} ### PASSENGER @@ -25,11 +25,17 @@ nginx: ### SERVER server: config: + # Needed for RVM, harmless otherwise. Cf. https://dev.arvados.org/issues/19015 + env: GEM_HOME + # As we now differentiate where passenger is required or not, we need to + # load this module conditionally, so we add this conditional just to use + # the same pillar file + {% if "install_from_phusionpassenger" == "__NGINX_INSTALL_SOURCE__" %} # This is required to get the passenger module loaded # In Debian it can be done with this # include: 'modules-enabled/*.conf' load_module: {{ passenger_mod }} - + {% endif %} worker_processes: 4 ### SNIPPETS @@ -49,7 +55,7 @@ nginx: - add_header: 'Strict-Transport-Security "max-age=63072000" always' # OCSP stapling - # FIXME! Stapling does not work with self-signed certificates, so disabling for tests + # NOTE! Stapling does not work with self-signed certificates, so disabling for tests # - ssl_stapling: 'on' # - ssl_stapling_verify: 'on'