Move keystone::auth into service_config_settings
[apex-tripleo-heat-templates.git] / puppet / services / apache.yaml
index 758d951..c979201 100644 (file)
@@ -5,6 +5,14 @@ description: >
   automatically via other services which run via Apache.
 
 parameters:
+  ApacheMaxRequestWorkers:
+    default: 256
+    description: Maximum number of simultaneously processed requests.
+    type: number
+  ApacheServerLimit:
+    default: 256
+    description: Maximum number of Apache processes.
+    type: number
   ServiceNetMap:
     default: {}
     description: Mapping of service_name -> network name. Typically set
@@ -31,10 +39,14 @@ outputs:
         # internal_api_uri -> [IP]
         # internal_api_subnet - > IP/CIDR
         apache::ip: {get_param: [ServiceNetMap, ApacheNetwork]}
+        apache::server_signature: 'Off'
+        apache::server_tokens: 'Prod'
         apache_remote_proxy_ips_network:
           str_replace:
             template: "NETWORK_subnet"
             params:
               NETWORK: {get_param: [ServiceNetMap, ApacheNetwork]}
+        apache::mod::prefork::maxclients: { get_param: ApacheMaxRequestWorkers }
+        apache::mod::prefork::serverlimit: { get_param: ApacheServerLimit }
         apache::mod::remoteip::proxy_ips:
           - "%{hiera('apache_remote_proxy_ips_network')}"