X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/18d192a0b455a06baa03b76f87f4e97cad6c1a3f..e9ed182596608c4f53dd79e6e63e7534289f4df3:/cookbooks/munin/templates/default/apache.erb

diff --git a/cookbooks/munin/templates/default/apache.erb b/cookbooks/munin/templates/default/apache.erb
index aaf8b5c90..15c5009e6 100644
--- a/cookbooks/munin/templates/default/apache.erb
+++ b/cookbooks/munin/templates/default/apache.erb
@@ -8,14 +8,26 @@
 	CustomLog /var/log/apache2/munin.openstreetmap.org-access.log combined
 	ErrorLog /var/log/apache2/munin.openstreetmap.org-error.log
 
-	DocumentRoot /var/cache/munin/www
+	SetEnv RRDCACHED_ADDRESS /var/run/rrdcached.sock
+
+	DocumentRoot /srv/munin.openstreetmap.org
+	Alias /static/favicon.ico /srv/munin.openstreetmap.org/favicon.ico
+	Alias /static/ /etc/munin/static/
 	ScriptAlias /munin-cgi/ /usr/lib/munin/cgi/
 
+	# Remove Proxy request header to mitigate https://httpoxy.org/
+	RequestHeader unset Proxy early
+
 	RewriteEngine on
+	RewriteCond %{REQUEST_URI} !^/static/
 	RewriteRule ^(/.*\.html)?$ /munin-cgi/munin-cgi-html/$1 [PT]
 </VirtualHost>
 
-<Directory /var/cache/munin/www>
+<Directory /srv/munin.openstreetmap.org>
+	Require all granted
+</Directory>
+
+<Directory /etc/munin/static>
 	Require all granted
 </Directory>