nominatim: enable ssl

[chef.git] / cookbooks / nominatim / templates / default / apache.erb

diff --git a/cookbooks/nominatim/templates/default/apache.erb b/cookbooks/nominatim/templates/default/apache.erb
index 91fb9a2a8c09ff6ab692b54621750994345d90a6..120bccececfa9b8c03c827e8a06d2b2360d0723a 100644 (file)
--- a/cookbooks/nominatim/templates/default/apache.erb
+++ b/cookbooks/nominatim/templates/default/apache.erb
@@ -1,6 +1,7 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
-<VirtualHost *:80>
+<% [80, 443].each do |port| -%>
+<VirtualHost *:<%= port %>>
     ServerName nominatim.openstreetmap.org
     ServerAdmin webmaster@openstreetmap.org
     ServerAlias nominatim.osm.org
@@ -9,6 +10,13 @@
     ServerAlias nominatim.openstreetmaps.org
     ServerAlias nominatim.openmaps.org
 
+<% if port == 443 -%>
+    #
+    # Enable SSL
+    #
+    SSLEngine on
+<% end -%>
+
     CustomLog /var/log/apache2/nominatim.openstreetmap.org-access.log combined
     ErrorLog /var/log/apache2/nominatim.openstreetmap.org-error.log
 
@@ -33,10 +41,10 @@
     </Location>
     <% end -%>
 
-    Redirect 509 /pool-block/
-    ErrorDocument 509 /509.html
+    Redirect 420 /pool-block/
+    ErrorDocument 420 /509.html
     <Location /pool-block>
-        ErrorDocument 509 /509.html
+        ErrorDocument 420 /509.html
     </Location>
     Redirect 403 /pool-ban/
     <Location /pool-ban>
@@ -54,3 +62,5 @@
     RewriteRule ^/([sdr].*) /pool-${bulklist:%{REMOTE_ADDR}|www}/$1 [PT]
 
 </VirtualHost>
+
+<% end -%>