X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/9cdb601941af4b17abb5aedb75cadbe7376773a3..0fcf341478df2184e3e78a29d093aa6017911251:/cookbooks/trac/templates/default/apache.erb diff --git a/cookbooks/trac/templates/default/apache.erb b/cookbooks/trac/templates/default/apache.erb index ad9429bb1..bc58ed276 100644 --- a/cookbooks/trac/templates/default/apache.erb +++ b/cookbooks/trac/templates/default/apache.erb @@ -3,48 +3,70 @@ WSGIDaemonProcess <%= @name %> user=<%= @user %> group=<%= @group %> maximum-requests=5000 threads=25 inactivity-timeout=180 - ServerName <%= @name %> - ServerAdmin webmaster@openstreetmap.org + ServerName <%= @name %> +<% @aliases.each do |alias_name| -%> + ServerAlias <%= alias_name %> +<% end -%> + ServerAdmin webmaster@openstreetmap.org - CustomLog /var/log/apache2/<%= @name %>-access.log combined - ErrorLog /var/log/apache2/<%= @name %>-error.log + CustomLog /var/log/apache2/<%= @name %>-access.log combined + ErrorLog /var/log/apache2/<%= @name %>-error.log - RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/ - RedirectPermanent / https://<%= @name %>/ + RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/ + RedirectPermanent / https://<%= @name %>/ +<% unless @aliases.empty? -%> - ServerName <%= @name %> - ServerAdmin webmaster@openstreetmap.org + ServerName <%= @aliases.first %> +<% @aliases.drop(1).each do |alias_name| -%> + ServerAlias <%= alias_name %> +<% end -%> + ServerAdmin webmaster@openstreetmap.org - SSLEngine on - SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem - SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key + SSLEngine on + SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem + SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key - CustomLog /var/log/apache2/<%= @name %>-access.log combined - ErrorLog /var/log/apache2/<%= @name %>-error.log + CustomLog /var/log/apache2/<%= @name %>-access.log combined + ErrorLog /var/log/apache2/<%= @name %>-error.log - DocumentRoot <%= @directory %>/htdocs - Alias /robots.txt <%= @directory %>/htdocs/site/robots.txt - WSGIScriptAlias / <%= @directory %>/cgi-bin/trac.wsgi + RedirectPermanent / https://<%= @name %>/ + +<% end -%> + + + ServerName <%= @name %> + ServerAdmin webmaster@openstreetmap.org + + SSLEngine on + SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem + SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key + + CustomLog /var/log/apache2/<%= @name %>-access.log combined + ErrorLog /var/log/apache2/<%= @name %>-error.log + + DocumentRoot <%= @directory %>/htdocs + Alias /robots.txt <%= @directory %>/htdocs/site/robots.txt + WSGIScriptAlias / <%= @directory %>/cgi-bin/trac.wsgi - WSGIProcessGroup <%= @name %> + WSGIProcessGroup <%= @name %> - DefineExternalAuth osm pipe /usr/local/bin/trac-authenticate + DefineExternalAuth osm pipe /usr/local/bin/trac-authenticate - - AuthType Basic - AuthName "OpenStreetMap Trac" - AuthBasicProvider external - AuthExternal osm - Require valid-user - + + AuthType Basic + AuthName "OpenStreetMap Trac" + AuthBasicProvider external + AuthExternal osm + Require valid-user + /htdocs> - Require all granted + Require all granted /cgi-bin> - Require all granted + Require all granted