]> git.openstreetmap.org Git - chef.git/blob - cookbooks/git/templates/default/apache.erb
blog: remove opengeodata.org ssl cleanup
[chef.git] / cookbooks / git / templates / default / apache.erb
1 # DO NOT EDIT - This file is being maintained by Chef
2
3 <VirtualHost *:80>
4         ServerName <%= @name %>
5 <% @aliases.each do |alias_name| -%>
6         ServerAlias <%= alias_name %>
7 <% end -%>
8         ServerAdmin webmaster@openstreetmap.org
9
10         CustomLog /var/log/apache2/<%= @name %>-access.log combined
11         ErrorLog /var/log/apache2/<%= @name %>-error.log
12
13         RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
14         RedirectPermanent / https://<%= @name %>/
15 </VirtualHost>
16
17 <% unless @aliases.empty? -%>
18 <VirtualHost *:443>
19         ServerName <%= @aliases.first %>
20 <% @aliases.slice(1..-1).each do |alias_name| -%>
21         ServerAlias <%= alias_name %>
22 <% end -%>
23         ServerAdmin webmaster@openstreetmap.org
24
25         SSLEngine on
26         SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem
27         SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key
28
29         CustomLog /var/log/apache2/<%= @name %>-access.log combined
30         ErrorLog /var/log/apache2/<%= @name %>-error.log
31
32         RedirectPermanent / https://<%= @name %>/
33 </VirtualHost>
34
35 <% end -%>
36 <VirtualHost *:443>
37         ServerName <%= @name %>
38         ServerAdmin webmaster@openstreetmap.org
39
40         SSLEngine on
41         SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem
42         SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key
43
44         CustomLog /var/log/apache2/<%= @name %>-access.log combined
45         ErrorLog /var/log/apache2/<%= @name %>-error.log
46
47         SetEnv GIT_PROJECT_ROOT /var/lib/git
48         SetEnv GIT_HTTP_EXPORT_ALL
49         SetEnv GIT_HTTP_MAX_REQUEST_BUFFER 100M
50
51         SetEnvIf Git-Protocol ".*" GIT_PROTOCOL=$0
52
53         # KeepaliveTimeout longer than git config uploadpack.keepalive 5 second default
54         KeepAliveTimeout 20
55
56         RewriteEngine on
57         RewriteRule ^/cgimap\.git.* https://github.com/zerebubuth/openstreetmap-cgimap [QSD,L,R=permanent]
58         RewriteRule ^/planetdump\.git.* https://github.com/openstreetmap/planetdump [QSD,L,R=permanent]
59         RewriteRule ^/gpx-import\.git.* https://github.com/openstreetmap/gpx-import [QSD,L,R=permanent]
60         RewriteRule ^/potlatch2\.git.* https://github.com/openstreetmap/potlatch2 [QSD,L,R=permanent]
61
62         ScriptAlias /public /usr/lib/git-core/git-http-backend/public
63         ScriptAlias /private /usr/lib/git-core/git-http-backend/private
64         Alias /gitweb /usr/share/gitweb
65         Alias /git /var/cache/git
66         ScriptAlias / /usr/lib/cgi-bin/gitweb.cgi/
67
68         <Location />
69                   Require all granted
70         </Location>
71 <% unless @private_allowed.empty? -%>
72
73         <Location /private>
74                   Require ip <%= @private_allowed.sort.join(" ") %>
75         </Location>
76 <% end -%>
77
78         <Location /private/chef.git>
79                   Require all denied
80         </Location>
81 </VirtualHost>
82
83 <Directory /usr/lib/git-core>
84         Options ExecCGI
85 </Directory>