#
# Apache reverse proxy configuration for the Nickserver
#

Listen 0.0.0.0:<%= @nickserver_port -%>

<VirtualHost *:<%= @nickserver_port -%>>
  ServerName <%= @nickserver_domain %>
  ServerAlias <%= @address_domain %>

  SSLEngine on
  SSLProtocol -all +SSLv3 +TLSv1
  SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH
  SSLHonorCipherOrder on

  SSLCACertificatePath /etc/ssl/certs
  SSLCertificateChainFile <%= scope.lookupvar('x509::variables::local_CAs') %>/<%= scope.lookupvar('site_config::params::ca_name') %>.crt
  SSLCertificateKeyFile <%= scope.lookupvar('x509::variables::keys') %>/<%= scope.lookupvar('site_config::params::cert_name') %>.key
  SSLCertificateFile <%= scope.lookupvar('x509::variables::certs') %>/<%= scope.lookupvar('site_config::params::cert_name') %>.crt

  ProxyPass / http://localhost:<%= @nickserver_local_port %>/
  ProxyPreserveHost On  # preserve Host header in HTTP request
</VirtualHost>