X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/351d2fd5232c53acece585da47cc98b17758ece1..847ffefc0606eae909ccc4abe752fa1629085011:/cookbooks/planet/templates/default/apache.erb

diff --git a/cookbooks/planet/templates/default/apache.erb b/cookbooks/planet/templates/default/apache.erb
index ef2834fd8..8790c8032 100644
--- a/cookbooks/planet/templates/default/apache.erb
+++ b/cookbooks/planet/templates/default/apache.erb
@@ -1,10 +1,19 @@
 # DO NOT EDIT - This file is being maintained by Chef
-
-<VirtualHost *:80>
+<% [80, 443].each do |port| -%>
+   
+<VirtualHost *:<%= port %>>
         ServerName planet.openstreetmap.org
         ServerAlias planet.osm.org
         ServerAdmin webmaster@openstreetmap.org
 
+<% if port == 443 -%>
+        SSLEngine on
+        SSLCertificateFile /etc/ssl/certs/planet.openstreetmap.org.pem
+        SSLCertificateKeyFile /etc/ssl/private/planet.openstreetmap.org.key
+<% else -%>
+        RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
+<% end -%>
+
         CustomLog /var/log/apache2/planet.openstreetmap.org-access.log combined
         ErrorLog /var/log/apache2/planet.openstreetmap.org-error.log
 
@@ -25,8 +34,7 @@
         ProxyPass /replication/streaming http://127.0.0.1:8080
 
         <Location /replication/steaming>
-                Order deny,allow
-                Allow from all
+                Require all granted
         </Location>
 
         Redirect /pbf-experimental/	/pbf/
@@ -46,25 +54,13 @@
         RewriteCond	%{REMOTE_ADDR}  ^193\.1\.193\.64	[OR]
         RewriteCond     %{REMOTE_ADDR}  ^146\.169\.             [OR]
         RewriteCond     %{REMOTE_ADDR}  ^129\.31\.              [OR]
-	RewriteCond	%{REMOTE_ADDR}  ^193\.60\.              [OR]
-	RewriteCond     %{REMOTE_ADDR}  ^193\.61\.              [OR]
-	RewriteCond     %{REMOTE_ADDR}  ^193\.62\.              [OR]
-	RewriteCond     %{REMOTE_ADDR}  ^193\.63\.              [OR]
+        RewriteCond	%{REMOTE_ADDR}  ^193\.60\.              [OR]
+        RewriteCond     %{REMOTE_ADDR}  ^193\.61\.              [OR]
+        RewriteCond     %{REMOTE_ADDR}  ^193\.62\.              [OR]
+        RewriteCond     %{REMOTE_ADDR}  ^193\.63\.              [OR]
         RewriteCond	%{QUERY_STRING} nomirror
         RewriteRule	.*      - [L]
 
         RewriteRule     ^(/planet/planet\-latest\.osm\.bz2)$    ${latestplanet:$1}      [R,L]
 </VirtualHost>
-
-<VirtualHost *:443>
-        ServerName planet.openstreetmap.org
-        ServerAlias planet.osm.org
-        ServerAdmin webmaster@openstreetmap.org
-
-        SSLEngine on
-
-        CustomLog /var/log/apache2/planet.openstreetmap.org-access.log combined
-        ErrorLog /var/log/apache2/planet.openstreetmap.org-error.log
-
-        Redirect / http://planet.openstreetmap.org/
-</VirtualHost>
+<% end -%>