X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/5680fb8cfeab3486ae5bfe1283ffc6cf13ac57a2..b7c12630cb9de017d76fe60ff296534d6d061399:/cookbooks/chef/templates/default/apache.erb

diff --git a/cookbooks/chef/templates/default/apache.erb b/cookbooks/chef/templates/default/apache.erb
index f6c1806b1..917759a7c 100644
--- a/cookbooks/chef/templates/default/apache.erb
+++ b/cookbooks/chef/templates/default/apache.erb
@@ -5,9 +5,10 @@
 	ServerAlias chef.osm.org
 	ServerAdmin webmaster@openstreetmap.org
 
-	CustomLog /var/log/apache2/chef.openstreetmap.org-access.log combined
+	CustomLog /var/log/apache2/chef.openstreetmap.org-access.log combined_extended
 	ErrorLog /var/log/apache2/chef.openstreetmap.org-error.log
 
+	RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
 	Redirect permanent / https://chef.openstreetmap.org/
 </VirtualHost>
 
@@ -15,11 +16,15 @@
 	ServerName chef.openstreetmap.org
 	ServerAdmin webmaster@openstreetmap.org
 
-	CustomLog /var/log/apache2/chef.openstreetmap.org-access.log combined
+	CustomLog /var/log/apache2/chef.openstreetmap.org-access.log combined_extended
 	ErrorLog /var/log/apache2/chef.openstreetmap.org-error.log
 
 	SSLEngine on
 	SSLProxyEngine on
+	SSLCertificateFile /etc/ssl/certs/chef.openstreetmap.org.pem
+	SSLCertificateKeyFile /etc/ssl/private/chef.openstreetmap.org.key
 
+	ProxyPassMatch ^/.*\.git/ !
 	ProxyPass / https://<%= node[:fqdn] %>:4443/
+	ProxyPreserveHost on
 </VirtualHost>