CustomLog /var/log/apache2/chef.openstreetmap.org-access.log combined
ErrorLog /var/log/apache2/chef.openstreetmap.org-error.log
+ RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
Redirect permanent / https://chef.openstreetmap.org/
</VirtualHost>
SSLEngine on
SSLProxyEngine on
+ SSLCertificateFile /etc/ssl/certs/chef.openstreetmap.org.pem
+ SSLCertificateKeyFile /etc/ssl/private/chef.openstreetmap.org.key
+ ProxyPassMatch ^/.*\.git/ !
ProxyPass / https://<%= node[:fqdn] %>:4443/
+ ProxyPreserveHost on
+
+ SetEnv GIT_PROJECT_ROOT /var/lib/git
+ SetEnv GIT_HTTP_EXPORT_ALL
+ ScriptAlias / /usr/lib/git-core/git-http-backend/
</VirtualHost>
+
+<Directory /usr/lib/git-core>
+ Options ExecCGI
+ Require ip <%= @git_allowed.sort.join(" ") %>
+</Directory>