summaryrefslogtreecommitdiff
path: root/puppet/modules/site_apache/templates/vhosts.d/api.conf.erb
blob: 05d5f69de42b9cb7dc39613d215653d3d085159c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
<VirtualHost *:80>
  ServerName <%= api_domain %>
  RewriteEngine On
  RewriteRule ^.*$ https://<%= api_domain -%>%{REQUEST_URI} [R=permanent,L]
</VirtualHost>

<VirtualHost *:443>
  ServerName <%= api_domain %>

  SSLEngine on
  SSLProtocol -all +SSLv3 +TLSv1
  SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH
  SSLHonorCipherOrder on

  SSLCACertificatePath /etc/ssl/certs
  SSLCertificateChainFile /etc/ssl/certs/leap_api.pem
  SSLCertificateKeyFile /etc/x509/keys/leap_api.key
  SSLCertificateFile /etc/x509/certs/leap_api.crt

  RequestHeader set X_FORWARDED_PROTO 'https'

  DocumentRoot /srv/leap-webapp/public
  Alias /1 /srv/leap-webapp/public

  # Check for maintenance file and redirect all requests
  RewriteEngine On
  RewriteCond %{DOCUMENT_ROOT}/system/maintenance.html -f
  RewriteCond %{SCRIPT_FILENAME} !maintenance.html
  RewriteCond %{REQUEST_URI} !/images/maintenance.jpg
  RewriteRule ^.*$ %{DOCUMENT_ROOT}/system/maintenance.html [L]

  # http://www.modrails.com/documentation/Users%20guide%20Apache.html#_passengerallowencodedslashes_lt_on_off_gt
  AllowEncodedSlashes on
  PassengerAllowEncodedSlashes on
  PassengerFriendlyErrorPages off
  SetEnv TMPDIR /var/tmp
</VirtualHost>