Files
system-config/playbooks/roles/static/files/50-developer.openstack.org.conf
Clark Boylan 25b08c09a8 Apply UserAgentFilter to every vhost on static
AI crawlers continue to get more and more aggressive. To ensure that
there are more webserver slots for actual users apply the user agent
filter to every vhost on static.o.o.

Note that at least one vhost already used the ua filter so we don't need
to update config management beyond the vhost configs. The macro is
already installed on static.

Change-Id: I7c377d51f0a89272fd6fadbecc3d7923bba3cfd7
2025-07-22 10:02:55 -07:00

44 lines
1.5 KiB
Plaintext

<VirtualHost *:80>
ServerName developer.openstack.org
RewriteEngine on
Use UserAgentFilter
RewriteRule ^/(.*) https://developer.openstack.org/$1 [last,redirect=permanent]
ErrorLog /var/log/apache2/developer.openstack.org_error.log
LogLevel warn
CustomLog /var/log/apache2/developer.openstack.org_access.log combined
ServerSignature Off
</VirtualHost>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName developer.openstack.org
RewriteEngine on
Use UserAgentFilter
SSLCertificateFile /etc/letsencrypt-certs/developer.openstack.org/developer.openstack.org.cer
SSLCertificateKeyFile /etc/letsencrypt-certs/developer.openstack.org/developer.openstack.org.key
SSLCertificateChainFile /etc/letsencrypt-certs/developer.openstack.org/ca.cer
SSLProtocol All -SSLv2 -SSLv3
# Note: this list should ensure ciphers that provide forward secrecy
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP
SSLHonorCipherOrder on
DocumentRoot /afs/openstack.org/developer-docs
<Directory /afs/openstack.org/developer-docs>
Options Indexes FollowSymLinks MultiViews
Require all granted
# Allow mod_rewrite rules
AllowOverride FileInfo
ErrorDocument 404 /errorpage.html
</Directory>
ErrorLog /var/log/apache2/developer.openstack.org_error.log
LogLevel warn
CustomLog /var/log/apache2/developer.openstack.org_access.log combined
ServerSignature Off
</VirtualHost>
</IfModule>