# DO NOT EDIT - This file is being maintained by Chef

<VirtualHost *:80>
  ServerName <%= @name %>
<% @aliases.each do |alias_name| -%>
  ServerAlias <%= alias_name %>
<% end -%>
  ServerAdmin webmaster@openstreetmap.org

  CustomLog /var/log/apache2/<%= @name %>-access.log combined
  ErrorLog /var/log/apache2/<%= @name %>-error.log

  RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
  RedirectPermanent / https://<%= @name %>/
</VirtualHost>
<% unless @aliases.empty? -%>

<VirtualHost *:443>
  ServerName <%= @aliases.first %>
<% @aliases.drop(1).each do |alias_name| -%>
  ServerAlias <%= alias_name %>
<% end -%>
  ServerAdmin webmaster@openstreetmap.org

  SSLEngine on
  SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem
  SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key

  CustomLog /var/log/apache2/<%= @name %>-access.log combined
  ErrorLog /var/log/apache2/<%= @name %>-error.log

  RedirectPermanent / https://<%= @name %>/
</VirtualHost>
<% end -%>

<VirtualHost *:443>
  ServerName <%= @name %>
  ServerAdmin webmaster@openstreetmap.org

  SSLEngine on
  SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem
  SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key

  CustomLog /var/log/apache2/<%= @name %>-access.log combined
  ErrorLog /var/log/apache2/<%= @name %>-error.log

  DocumentRoot <%= @directory %>/html

  Options -Indexes

  ProxyFCGISetEnvIf "true" PHP_ADMIN_VALUE "open_basedir=<%= @directory %>/html/:/usr/share/php/:/tmp/\ndisable_functions=exec,shell_exec,system,passthru,popen,proc_open"
</VirtualHost>

<Directory <%= @directory %>/html>
  Require all granted
</Directory>