imagery: force only GET requests to mapserver

[chef.git] / cookbooks / piwik / templates / default / apache.erb

diff --git a/cookbooks/piwik/templates/default/apache.erb b/cookbooks/piwik/templates/default/apache.erb
index 8744c8e892ffffdf4dc2e24b79de8f6cbf2afb1f..226a3211e9888a142e964f02897439405ae387d6 100644 (file)
--- a/cookbooks/piwik/templates/default/apache.erb
+++ b/cookbooks/piwik/templates/default/apache.erb
@@ -8,7 +8,10 @@
        CustomLog /var/log/apache2/piwik.openstreetmap.org-access.log combined
        ErrorLog /var/log/apache2/piwik.openstreetmap.org-error.log
 
+       Options -Indexes
+
        DocumentRoot /srv/piwik.openstreetmap.org
+       RedirectPermanent /index.php https://piwik.openstreetmap.org/index.php
 </VirtualHost>
 
 <VirtualHost *:443>
@@ -16,14 +19,15 @@
        ServerAdmin webmaster@openstreetmap.org
 
        SSLEngine on
-       SSLProtocol all -SSLv2
-       SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
-       SSLCertificateFile /etc/ssl/certs/openstreetmap.pem
-       SSLCertificateKeyFile /etc/ssl/private/openstreetmap.key
 
        CustomLog /var/log/apache2/piwik.openstreetmap.org-access.log combined
        ErrorLog /var/log/apache2/piwik.openstreetmap.org-error.log
 
-       DocumentRoot /srv/piwik.openstreetmap.org
        Options -Indexes
+
+       DocumentRoot /srv/piwik.openstreetmap.org
 </VirtualHost>
+
+<Directory /srv/piwik.openstreetmap.org>
+       Require all granted
+</Directory>