people: add anubis el container to fedorapeople

Scrapers are hitting git projects really hard, so lets put this behind
anubis as well.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

playbooks/groups/people.yml

@@ -79,6 +79,10 @@
 
   - role: apache
 
+  - role: anubis-el
+    tags:
+    - anubis
+
   - role: httpd/certificate
     certname: wildcard-2025.fedorapeople.org
     SSLCertificateChainFile: wildcard-2025.fedorapeople.org.intermediate.cert

roles/people/templates/people.conf

@@ -43,6 +43,38 @@ NameVirtualHost *:80
   ErrorLog logs/fedorapeople.org-error.log
   CustomLog logs/fedorapeople.org-access.log vcombined
 
+  # proxy all requests to anubis after ssl termination
+
+  RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR}
+  RequestHeader set X-Forwarded-Proto "https"
+  RequestHeader set "X-Http-Version" "%{SERVER_PROTOCOL}s"
+  # Pagure uses X-Scheme, not X-Forwarded-Proto, see pagure/proxy.py
+  RequestHeader set X-Scheme "https"
+
+  ProxyPreserveHost On
+
+  ProxyRequests Off
+  ProxyVia Off
+
+  ProxyPass / http://[::1]:8923/
+  ProxyPassReverse / http://[::1]:8923/
+
+  <Location /apache-status>
+      SetHandler server-status
+      <RequireAny>
+          Require ip 127.0.0.1
+          Require ip ::1
+          Require host localhost
+      </RequireAny>
+  </Location>
+
+</VirtualHost>
+
+# Once anubis has processed the request it sends it to port 3923
+
+Listen 3923 http
+<VirtualHost *:3923>
+
     <Location />
         ExpiresActive On
         ExpiresDefault "access plus 30 minutes"