X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/4f6e8225fdfcd054fdb09f61b8be1e3e2684197c..a2b86e1616a830f61beea7cb21fef79974c52875:/cookbooks/nominatim/templates/default/apache.erb?ds=sidebyside diff --git a/cookbooks/nominatim/templates/default/apache.erb b/cookbooks/nominatim/templates/default/apache.erb index 8e12362d1..d14a5c8ed 100644 --- a/cookbooks/nominatim/templates/default/apache.erb +++ b/cookbooks/nominatim/templates/default/apache.erb @@ -2,19 +2,21 @@ <% [80, 443].each do |port| -%> > - ServerName nominatim.openstreetmap.org - ServerAdmin webmaster@openstreetmap.org + ServerName <%= node[:fqdn] %> + ServerAlias nominatim.openstreetmap.org ServerAlias nominatim.osm.org ServerAlias nominatim.openstreetmap.org ServerAlias nominatim.openstreetmap.net ServerAlias nominatim.openstreetmaps.org ServerAlias nominatim.openmaps.org + ServerAdmin webmaster@openstreetmap.org <% if port == 443 -%> # # Enable SSL # SSLEngine on + SSLProxyEngine on <% end -%> CustomLog /var/log/apache2/nominatim.openstreetmap.org-access.log combined @@ -23,40 +25,24 @@ DocumentRoot <%= @directory %>/website /website/"> DirectoryIndex search.php - Options MultiViews FollowSymLinks - AddType text/html .php - AddType application/xml .phpx - AddType application/json .phpj -<% if node[:lsb][:release].to_f >= 14.04 -%> - ProxyPassMatch ^/(.*\.php(/.*)?)$ unix:/var/run/php5-fpm-www.sock|fcgi://localhost<%= @directory %>/website/ - ProxyPassMatch ^/(.*\.phpx(/.*)?)$ unix:/var/run/php5-fpm-www.sock|fcgi://localhost<%= @directory %>/website/ - ProxyPassMatch ^/(.*\.phpj(/.*)?)$ unix:/var/run/php5-fpm-www.sock|fcgi://localhost<%= @directory %>/website/ -<% else -%> - AddHandler fcgi:/var/run/php5-fpm-www.sock .php - AddHandler fcgi:/var/run/php5-fpm-www.sock .phpx - AddHandler fcgi:/var/run/php5-fpm-www.sock .phpj -<% end -%> + Options FollowSymLinks + Require all granted + ProxyPassMatch ^/([^/]*\.php(/.*)?)$ fcgi://127.0.0.1:<%= @pools[:www][:port ]%><%= @directory %>/website/$1 + <% @pools.each do |name,details| -%> Alias /pool-<%= name %>/ "<%= @directory %>/website/" - > -<% if node[:lsb][:release].to_f >= 14.04 -%> - ProxyPassMatch ^/(.*\.php(/.*)?)$ unix:/var/run/php5-fpm-<%= name %>.sock|fcgi://localhost<%= @directory %>/website/ - ProxyPassMatch ^/(.*\.phpx(/.*)?)$ unix:/var/run/php5-fpm-<%= name %>.sock|fcgi://localhost<%= @directory %>/website/ - ProxyPassMatch ^/(.*\.phpj(/.*)?)$ unix:/var/run/php5-fpm-<%= name %>.sock|fcgi://localhost<%= @directory %>/website/ -<% else -%> - AddHandler fcgi:/var/run/php5-fpm-<%= name %>.sock .php - AddHandler fcgi:/var/run/php5-fpm-<%= name %>.sock .phpx - AddHandler fcgi:/var/run/php5-fpm-<%= name %>.sock .phpj -<% end -%> - + <% node[:nominatim][:redirects].each do |url,host| -%> + ProxyPassMatch ^/pool-<%= name %>/(<%= url %>\.php(/.*)?) http<% if port == 443 -%>s<% end -%>://<%= host %>/pool-<%= name %>/$1 + <% end -%> + ProxyPassMatch ^/pool-<%= name %>/(.*\.php(/.*)?) fcgi://127.0.0.1:<%= details[:port ]%><%= @directory %>/website/$1 <% end -%> - Redirect 420 /pool-block/ - ErrorDocument 420 /509.html + Redirect 429 /pool-block/ + ErrorDocument 429 /509.html - ErrorDocument 420 /509.html + ErrorDocument 429 /509.html Redirect 403 /pool-ban/ @@ -71,7 +57,7 @@ # regular requests and autoblocks RewriteMap bulklist txt:<%= @directory %>/settings/ip_blocks.map - RewriteRule ^/([sdr].*) /pool-${bulklist:%{REMOTE_ADDR}|www}/$1 [PT] + RewriteRule ^/(search|reverse|details|lookup)(\.php)?(/.*)? /pool-${bulklist:%{REMOTE_ADDR}|www}/$1.php$3 [PT]