Make planet redirect to https
[chef.git] / cookbooks / planet / templates / default / apache.erb
1 # DO NOT EDIT - This file is being maintained by Chef
2    
3 <VirtualHost *:443>
4         ServerName planet.openstreetmap.org
5         ServerAlias planet.osm.org
6         ServerAdmin webmaster@openstreetmap.org
7
8         SSLEngine on
9         SSLCertificateFile /etc/ssl/certs/planet.openstreetmap.org.pem
10         SSLCertificateKeyFile /etc/ssl/private/planet.openstreetmap.org.key
11
12         CustomLog /var/log/apache2/planet.openstreetmap.org-access.log combined
13         ErrorLog /var/log/apache2/planet.openstreetmap.org-error.log
14
15         DocumentRoot /store/planet
16
17         <Directory /store/planet>
18                 Options Indexes FollowSymLinks MultiViews ExecCGI
19                 AllowOverride All
20                 IndexIgnore .ht* . robots.txt HEADER.html HEADER.cgi logo.png style.css
21                 IndexOptions FancyIndexing FoldersFirst NameWidth=* TrackModified SuppressHTMLPreamble
22                 HeaderName HEADER.cgi
23                 IndexOrderDefault Descending Date
24                 AddType text/html .cgi
25                 AddHandler cgi-script .cgi
26                 Require all granted
27         </Directory>
28
29         ProxyPass /replication/streaming http://127.0.0.1:8080
30
31         <Location /replication/steaming>
32                 Require all granted
33         </Location>
34
35         Redirect /pbf-experimental/     /pbf/
36
37         <IfModule mod_headers.c>
38                 Header set Access-Control-Allow-Origin "*"
39         </IfModule>
40
41         RewriteEngine on
42         RewriteMap latestplanet prg:/usr/local/bin/apache-latest-planet-filename
43
44         #Direct, no redirect for the following
45         RewriteCond     %{REMOTE_ADDR}  ^193\.63\.              [OR]
46         RewriteCond     %{REMOTE_ADDR}  ^127\.                  [OR]
47         RewriteCond     %{REMOTE_ADDR}  ^10\.                   [OR]
48         RewriteCond     %{REMOTE_ADDR}  ^193\.1\.219\.88        [OR]
49         RewriteCond     %{REMOTE_ADDR}  ^193\.1\.193\.64        [OR]
50         RewriteCond     %{REMOTE_ADDR}  ^146\.169\.             [OR]
51         RewriteCond     %{REMOTE_ADDR}  ^129\.31\.              [OR]
52         RewriteCond     %{REMOTE_ADDR}  ^193\.60\.              [OR]
53         RewriteCond     %{REMOTE_ADDR}  ^193\.61\.              [OR]
54         RewriteCond     %{REMOTE_ADDR}  ^193\.62\.              [OR]
55         RewriteCond     %{REMOTE_ADDR}  ^193\.63\.              [OR]
56         RewriteCond     %{QUERY_STRING} nomirror
57         RewriteRule     .*      - [L]
58
59         RewriteRule     ^(/planet/planet\-latest\.osm\.bz2)$    ${latestplanet:$1}      [R,L]
60 </VirtualHost>
61
62 <VirtualHost *:80>
63         ServerName planet.openstreetmap.org
64         ServerAlias planet.osm.org
65         ServerAdmin webmaster@openstreetmap.org
66
67         CustomLog /var/log/apache2/planet.openstreetmap.org-access.log combined
68         ErrorLog /var/log/apache2/planet.openstreetmap.org-error.log
69
70         RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
71         RedirectPermanent / https://planet.openstreetmap.org/
72 </VirtualHost>