# Qinling API port
Listen 7070

#################
# Hardening 1/2 #
#################
ServerSignature Off
ServerTokens Prod
TraceEnable off

<VirtualHost *:7070>

  DocumentRoot "/var/www/cgi-bin/qinling"

  # Avoid this issue: https://bugs.launchpad.net/charm-heat/+bug/1717615
  AllowEncodedSlashes On

  ###########
  # Logging #
  ###########
  # Paths have to be changed to fit your deployment
  ErrorLog "/var/log/apache2/qinling_wsgi_error.log"
  LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b %D \"%{Referer}i\" \"%{User-Agent}i\"" logformat
  CustomLog "/var/log/apache2/qinling_wsgi_access.log" logformat

  ######################
  # WSGI configuration #
  ######################
  WSGIApplicationGroup %{GLOBAL}
  # Paths and user/group have to be changed to fit your deployment
  # Here Python 3.6 is issued.
  WSGIDaemonProcess qinling group=qinling processes=5 threads=1 user=qinling python-path=/var/lib/kolla/venv/lib/python3.6/site-packages
  WSGIProcessGroup qinling
  WSGIScriptAlias / "/var/www/cgi-bin/qinling/wsgi.py"
  WSGIPassAuthorization On

  #################
  # Hardening 2/2 #
  #################
  # Paths have to be changed to fit your deployment
  <Directory "/var/www/cgi-bin/qinling">
      <FilesMatch "^wsgi.py$">
        Options Indexes FollowSymLinks MultiViews
        Require all granted
      </FilesMatch>
  </Directory>

</VirtualHost>