# DO NOT EDIT - This file is being maintained by Prometheus

<VirtualHost *:80>
	ServerName prometheus.openstreetmap.org
	ServerAlias prometheus.osm.org
	ServerAdmin webmaster@openstreetmap.org

	CustomLog /var/log/apache2/prometheus.openstreetmap.org-access.log combined
	ErrorLog /var/log/apache2/prometheus.openstreetmap.org-error.log

	RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
	Redirect permanent / https://prometheus.openstreetmap.org/
</VirtualHost>

<VirtualHost *:443>
	ServerName prometheus.openstreetmap.org
	ServerAdmin webmaster@openstreetmap.org

	CustomLog /var/log/apache2/prometheus.openstreetmap.org-access.log combined
	ErrorLog /var/log/apache2/prometheus.openstreetmap.org-error.log

	SSLEngine on
	SSLCertificateFile /etc/ssl/certs/prometheus.openstreetmap.org.pem
	SSLCertificateKeyFile /etc/ssl/private/prometheus.openstreetmap.org.key

	ProxyPass /prometheus http://localhost:9090/prometheus
	ProxyPass /alertmanager http://localhost:9093/alertmanager
	ProxyPass /karma http://localhost:8081/karma
	ProxyPass /api/live/ws ws://localhost:3000/api/live/ws
	ProxyPass / http://localhost:3000/
	ProxyPreserveHost on

	<Location /prometheus/api/v1/admin>
		Require all denied
	</Location>

	<Location /alertmanager>
<% @admin_hosts.each do |host| -%>
		Require ip <%= host %>
<% end -%>
	</Location>

	<Location /karma>
<% @admin_hosts.each do |host| -%>
		Require ip <%= host %>
<% end -%>
	</Location>
</VirtualHost>