diff options
| author | Micah Anderson <micah@riseup.net> | 2013-02-19 15:18:30 -0500 |
|---|---|---|
| committer | Micah Anderson <micah@riseup.net> | 2013-02-19 15:18:30 -0500 |
| commit | 4dcc5f884cd22d0673f6493799ace2f03a9e66fe (patch) | |
| tree | 3f3f5c217c40f3037c1b2a9cd8da3fe91fdd8389 /puppet/modules/site_apache/templates/vhosts.d/api.conf.erb | |
| parent | 253b765620961bbc9d96e8f3653b0b9693d29811 (diff) | |
| parent | 2e5eec3856b58aaff0a2049599a6455e6ff91122 (diff) | |
Merge remote-tracking branch 'origin/release/v0.2.0'0.2.0
Diffstat (limited to 'puppet/modules/site_apache/templates/vhosts.d/api.conf.erb')
| -rw-r--r-- | puppet/modules/site_apache/templates/vhosts.d/api.conf.erb | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/puppet/modules/site_apache/templates/vhosts.d/api.conf.erb b/puppet/modules/site_apache/templates/vhosts.d/api.conf.erb new file mode 100644 index 00000000..cdfcbd68 --- /dev/null +++ b/puppet/modules/site_apache/templates/vhosts.d/api.conf.erb @@ -0,0 +1,39 @@ +<VirtualHost *:80> + ServerName <%= api_domain %> + RewriteEngine On + RewriteRule ^.*$ https://<%= api_domain -%>:<%= api_port -%>%{REQUEST_URI} [R=permanent,L] +</VirtualHost> + +Listen 0.0.0.0:<%= api_port %> + +<VirtualHost *:<%= api_port -%>> + ServerName <%= api_domain %> + + SSLEngine on + SSLProtocol -all +SSLv3 +TLSv1 + SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH + SSLHonorCipherOrder on + + SSLCACertificatePath /etc/ssl/certs + SSLCertificateChainFile /etc/ssl/certs/leap_api.pem + SSLCertificateKeyFile /etc/x509/keys/leap_api.key + SSLCertificateFile /etc/x509/certs/leap_api.crt + + RequestHeader set X_FORWARDED_PROTO 'https' + + DocumentRoot /srv/leap-webapp/public + Alias /1 /srv/leap-webapp/public + + # Check for maintenance file and redirect all requests + RewriteEngine On + RewriteCond %{DOCUMENT_ROOT}/system/maintenance.html -f + RewriteCond %{SCRIPT_FILENAME} !maintenance.html + RewriteCond %{REQUEST_URI} !/images/maintenance.jpg + RewriteRule ^.*$ %{DOCUMENT_ROOT}/system/maintenance.html [L] + + # http://www.modrails.com/documentation/Users%20guide%20Apache.html#_passengerallowencodedslashes_lt_on_off_gt + AllowEncodedSlashes on + PassengerAllowEncodedSlashes on + PassengerFriendlyErrorPages off + SetEnv TMPDIR /var/tmp +</VirtualHost> |