Merge pull request #177 from jburgess777/jburgess-raise-tilecache-limits

[chef.git] / cookbooks / osqa / templates / default / apache.erb

diff --git a/cookbooks/osqa/templates/default/apache.erb b/cookbooks/osqa/templates/default/apache.erb
index ad98501626d0fa0654df814ed5af0d59f65b88f8..71ae69b7bd176b73c8719ec5d2c68fcfd541a31e 100644 (file)
--- a/cookbooks/osqa/templates/default/apache.erb
+++ b/cookbooks/osqa/templates/default/apache.erb
@@ -9,6 +9,7 @@ WSGIDaemonProcess <%= @name %> user=<%= @user %> group=<%= @group %> processes=4
         CustomLog /var/log/apache2/<%= @name %>-access.log combined
         ErrorLog /var/log/apache2/<%= @name %>-error.log
 
         CustomLog /var/log/apache2/<%= @name %>-access.log combined
         ErrorLog /var/log/apache2/<%= @name %>-error.log
 

+        RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/

         RedirectPermanent / https://<%= @name %>/
 </VirtualHost>
 
         RedirectPermanent / https://<%= @name %>/
 </VirtualHost>
 


@@ -16,16 +17,26 @@ WSGIDaemonProcess <%= @name %> user=<%= @user %> group=<%= @group %> processes=4
         ServerName <%= @name %>
         ServerAdmin webmaster@openstreetmap.org
 
         ServerName <%= @name %>
         ServerAdmin webmaster@openstreetmap.org
 

+        SSLEngine on
+        SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem
+        SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key
+

         CustomLog /var/log/apache2/<%= @name %>-access.log combined
         ErrorLog /var/log/apache2/<%= @name %>-error.log
 
         CustomLog /var/log/apache2/<%= @name %>-access.log combined
         ErrorLog /var/log/apache2/<%= @name %>-error.log
 

-        DocumentRoot <%= @directory %>
-        Alias /m/ <%= @directory %>/forum/skins/
-        Alias /upfiles/ <%= @directory %>/forum/upfiles/
+        DocumentRoot <%= @directory %>/osqa
+        Alias /m/ <%= @directory %>/osqa/forum/skins/
+        Alias /upfiles/ <%= @directory %>/upfiles/

         Alias /admin_media/ /usr/share/pyshared/django/contrib/admin/media/
         Alias /admin_media/ /usr/share/pyshared/django/contrib/admin/media/

-        WSGIScriptAlias / <%= @directory %>/osqa.wsgi
+        WSGIScriptAlias / <%= @directory %>/osqa/osqa.wsgi

 
         WSGIProcessGroup <%= @name %>
 
         WSGIProcessGroup <%= @name %>

-
-        SSLEngine on

 </VirtualHost>
 </VirtualHost>

+
+<Directory <%= @directory %>/osqa>
+       Require all granted
+</Directory>
+
+<Directory <%= @directory %>/upfiles>
+       Require all granted
+</Directory>