]> git.openstreetmap.org Git - chef.git/blob - cookbooks/munin/templates/default/apache.erb
Remove Strict-Transport-Security proxy passed header
[chef.git] / cookbooks / munin / templates / default / apache.erb
1 # DO NOT EDIT - This file is being maintained by Chef
2
3 <VirtualHost *:443>
4         ServerName munin.openstreetmap.org
5         ServerAlias munin.osm.org
6         ServerAdmin webmaster@openstreetmap.org
7
8         CustomLog /var/log/apache2/munin.openstreetmap.org-access.log combined
9         ErrorLog /var/log/apache2/munin.openstreetmap.org-error.log
10
11         SSLEngine on
12         SSLCertificateFile /etc/ssl/certs/munin.openstreetmap.org.pem
13         SSLCertificateKeyFile /etc/ssl/private/munin.openstreetmap.org.key
14
15         SetEnv RRDCACHED_ADDRESS /var/run/rrdcached.sock
16
17         DocumentRoot /srv/munin.openstreetmap.org
18         Alias /static/favicon.ico /srv/munin.openstreetmap.org/favicon.ico
19         Alias /static/ /etc/munin/static/
20         ScriptAlias /munin-cgi/ /usr/lib/munin/cgi/
21
22         # Remove Proxy request header to mitigate https://httpoxy.org/
23         RequestHeader unset Proxy early
24
25         RewriteEngine on
26         RewriteCond %{REQUEST_URI} !^/static/
27         RewriteCond %{REQUEST_URI} !^/dumps/
28         RewriteRule ^(/.*\.html)?$ /munin-cgi/munin-cgi-html/$1 [PT]
29 </VirtualHost>
30
31 <VirtualHost *:80>
32         ServerName munin.openstreetmap.org
33         ServerAlias munin.osm.org
34         ServerAdmin webmaster@openstreetmap.org
35
36         CustomLog /var/log/apache2/munin.openstreetmap.org-access.log combined
37         ErrorLog /var/log/apache2/munin.openstreetmap.org-error.log
38
39         RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
40         RedirectPermanent / https://munin.openstreetmap.org/
41 </VirtualHost>
42
43 <Directory /srv/munin.openstreetmap.org>
44         Require all granted
45 </Directory>
46
47 <Directory /srv/munin.openstreetmap.org/dumps>
48         Options +Indexes
49 </Directory>
50
51 <Directory /etc/munin/static>
52         Require all granted
53 </Directory>
54
55 <Directory /usr/lib/munin/cgi>
56         Options +ExecCGI
57         SetHandler fcgid-script
58         Require all granted
59 </Directory>