# DO NOT EDIT - This file is being maintained by Chef

<VirtualHost *:80>
   ServerName <%= @site %>
   ServerAdmin webmaster@openstreetmap.org

   CustomLog /var/log/apache2/<%= @site %>-access.log combined_extended
   ErrorLog /var/log/apache2/<%= @site %>-error.log

   RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
   Redirect permanent / https://<%= @site %>/
</VirtualHost>

<VirtualHost *:443>
   ServerName <%= @site %>
   ServerAdmin webmaster@openstreetmap.org

   CustomLog /var/log/apache2/<%= @site %>-access.log combined_extended
   ErrorLog /var/log/apache2/<%= @site %>-error.log

   SSLEngine on
   SSLProxyEngine on
   SSLCertificateFile /etc/ssl/certs/<%= @site %>.pem
   SSLCertificateKeyFile /etc/ssl/private/<%= @site %>.key

   ProxyPass / http://127.0.0.1:<%= @port %>/

   <Location />
      AuthType basic
      AuthName <%= @site %>
      AuthBasicProvider file
      AuthUserFile "<%= @passwd %>"
      Require valid-user
   </Location>
</VirtualHost>