71 lines
2.0 KiB
Plaintext
71 lines
2.0 KiB
Plaintext
<VirtualHost *:80>
|
|
ServerAdmin <%= @httpd_admin_email %>
|
|
ServerName <%= @httpd_vhost %>
|
|
|
|
DocumentRoot /var/www
|
|
<Directory />
|
|
Options FollowSymLinks
|
|
AllowOverride None
|
|
</Directory>
|
|
<Directory /var/www/>
|
|
Options Indexes FollowSymLinks MultiViews
|
|
AllowOverride None
|
|
Order allow,deny
|
|
Allow from all
|
|
</Directory>
|
|
|
|
RewriteEngine on
|
|
RewriteCond %{SERVER_PORT} !^443$
|
|
RewriteRule ^/(.*)$ https://<%= @httpd_vhost %>/$1 [L,R]
|
|
|
|
ErrorLog /var/log/apache2/phabricator-error.log
|
|
|
|
# Possible values include: debug, info, notice, warn, error, crit,
|
|
# alert, emerg.
|
|
LogLevel warn
|
|
|
|
CustomLog /var/log/apache2/phabricator-access.log combined
|
|
ServerSignature Off
|
|
|
|
</VirtualHost>
|
|
<VirtualHost *:443>
|
|
ServerAdmin noc@openstack.org
|
|
ServerName <%= @httpd_vhost %>
|
|
|
|
SSLEngine on
|
|
SSLProtocol All -SSLv2 -SSLv3
|
|
SSLCertificateFile <%= @ssl_cert_file %>
|
|
SSLCertificateKeyFile <%= @ssl_key_file %>
|
|
<%# scope.lookupvar returns nil for an undefined variable in puppet 4 -%>
|
|
<%# scope.lookupvar returns :undef for an undefined variable in puppet 3 -%>
|
|
<% unless ['', nil, :undef].include?(scope.lookupvar("ssl_chain_file")) %>
|
|
SSLCertificateChainFile <%= @ssl_chain_file %>
|
|
<% end %>
|
|
|
|
DocumentRoot <%= @httpd_docroot %>
|
|
<Directory />
|
|
Options FollowSymLinks
|
|
AllowOverride None
|
|
</Directory>
|
|
<Directory <%= @httpd_docroot %>>
|
|
Options Indexes FollowSymLinks MultiViews
|
|
AllowOverride None
|
|
Order allow,deny
|
|
Allow from all
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<Location <%= @auth_location %> >
|
|
AuthType OpenID
|
|
require valid-user
|
|
AuthOpenIDSingleIdP <%= @authopenidsingleidp %>
|
|
</Location>
|
|
|
|
RewriteEngine on
|
|
RewriteRule ^/rsrc/(.*) - [L,QSA]
|
|
RewriteRule ^/favicon.ico - [L,QSA]
|
|
RewriteRule ^(.*)$ /index.php?__path__=$1 [B,L,QSA]
|
|
|
|
SetEnv PHABRICATOR_ENV production
|
|
</VirtualHost>
|