Add certificate for opengeodata.org

[chef.git] / cookbooks / blog / templates / default / opengeodata.erb

diff --git a/cookbooks/blog/templates/default/opengeodata.erb b/cookbooks/blog/templates/default/opengeodata.erb
index 43dbf01bd4592a36bee98043d690601446c4a9dc..1150145a48959d8cd5a6654b9cb52e61290d6a14 100644 (file)
--- a/cookbooks/blog/templates/default/opengeodata.erb
+++ b/cookbooks/blog/templates/default/opengeodata.erb
@@ -3,7 +3,7 @@
 <VirtualHost *:80>
   ServerName opengeodata.org
   ServerAlias www.opengeodata.org
-  ServerAlias old.opengeodata.org
+  ServerAlias old.opengeodata.org # https://blog.openstreetmap.org/2010/02/25/old-opengeodata-posts-now-up-at-old-opengeodata-org/
 
   ServerAdmin webmaster@openstreetmap.org
 
@@ -11,7 +11,28 @@
   ErrorLog /var/log/apache2/<%= @name %>-error.log
 
   RewriteEngine on
-  RewriteRule ^(.*/)index\.html$ http://blog.openstreetmap.org/$1 [R,L]
+  RewriteRule ^(.*/)index\.html$ https://blog.openstreetmap.org/$1 [R=permanent,L]
 
-  RedirectPermanent / http://blog.openstreetmap.org/
+  RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
+  RedirectPermanent / https://blog.openstreetmap.org/
+</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName opengeodata.org
+  ServerAlias www.opengeodata.org
+  ServerAlias old.opengeodata.org # https://blog.openstreetmap.org/2010/02/25/old-opengeodata-posts-now-up-at-old-opengeodata-org/
+
+  ServerAdmin webmaster@openstreetmap.org
+
+  SSLEngine on
+  SSLCertificateFile /etc/ssl/certs/opengeodata.org.pem
+  SSLCertificateKeyFile /etc/ssl/private/opengeodata.org.key
+
+  CustomLog /var/log/apache2/<%= @name %>-access.log combined
+  ErrorLog /var/log/apache2/<%= @name %>-error.log
+
+  RewriteEngine on
+  RewriteRule ^(.*/)index\.html$ https://blog.openstreetmap.org/$1 [R=permanent,L]
+
+  RedirectPermanent / https://blog.openstreetmap.org/
 </VirtualHost>