put dulcy in production mode and enable backups

[chef.git] / cookbooks / piwik / templates / default / apache.erb

diff --git a/cookbooks/piwik/templates/default/apache.erb b/cookbooks/piwik/templates/default/apache.erb
index 5229358806911995ca10959103b53719f5098962..226a3211e9888a142e964f02897439405ae387d6 100644 (file)
--- a/cookbooks/piwik/templates/default/apache.erb
+++ b/cookbooks/piwik/templates/default/apache.erb
@@ -8,7 +8,10 @@
        CustomLog /var/log/apache2/piwik.openstreetmap.org-access.log combined
        ErrorLog /var/log/apache2/piwik.openstreetmap.org-error.log
 
+       Options -Indexes
+
        DocumentRoot /srv/piwik.openstreetmap.org
+       RedirectPermanent /index.php https://piwik.openstreetmap.org/index.php
 </VirtualHost>
 
 <VirtualHost *:443>
@@ -16,13 +19,15 @@
        ServerAdmin webmaster@openstreetmap.org
 
        SSLEngine on
-       SSLProtocol all -SSLv2
-       SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
-       SSLCertificateFile /etc/ssl/certs/openstreetmap.pem
-       SSLCertificateKeyFile /etc/ssl/private/openstreetmap.key
 
        CustomLog /var/log/apache2/piwik.openstreetmap.org-access.log combined
        ErrorLog /var/log/apache2/piwik.openstreetmap.org-error.log
 
+       Options -Indexes
+
        DocumentRoot /srv/piwik.openstreetmap.org
 </VirtualHost>
+
+<Directory /srv/piwik.openstreetmap.org>
+       Require all granted
+</Directory>