X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/66d16bfc802d59c8561946e352d628a83019fb18..8ccf941a82940d016e9c68bdf0c29e190953c7f7:/cookbooks/forum/templates/default/apache.erb
diff --git a/cookbooks/forum/templates/default/apache.erb b/cookbooks/forum/templates/default/apache.erb
index 4b3c844c8..82942001b 100644
--- a/cookbooks/forum/templates/default/apache.erb
+++ b/cookbooks/forum/templates/default/apache.erb
@@ -8,6 +8,21 @@
CustomLog /var/log/apache2/forum.openstreetmap.org-access.log combined
ErrorLog /var/log/apache2/forum.openstreetmap.org-error.log
+ RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
+ RedirectPermanent / https://forum.openstreetmap.org/
+
+
+
+ ServerAlias forum.osm.org
+ ServerAdmin webmaster@openstreetmap.org
+
+ SSLEngine on
+ SSLCertificateFile /etc/ssl/certs/forum.openstreetmap.org.pem
+ SSLCertificateKeyFile /etc/ssl/private/forum.openstreetmap.org.key
+
+ CustomLog /var/log/apache2/forum.openstreetmap.org-access.log combined
+ ErrorLog /var/log/apache2/forum.openstreetmap.org-error.log
+
RedirectPermanent / https://forum.openstreetmap.org/
@@ -16,27 +31,29 @@
ServerAdmin webmaster@openstreetmap.org
SSLEngine on
+ SSLCertificateFile /etc/ssl/certs/forum.openstreetmap.org.pem
+ SSLCertificateKeyFile /etc/ssl/private/forum.openstreetmap.org.key
CustomLog /var/log/apache2/forum.openstreetmap.org-access.log combined
ErrorLog /var/log/apache2/forum.openstreetmap.org-error.log
DocumentRoot /srv/forum.openstreetmap.org/html
- php_admin_value open_basedir /srv/forum.openstreetmap.org/html/:/usr/share/php/:/tmp/
- php_admin_value disable_functions "exec,shell_exec,system,passthru,popen,proc_open"
- php_value upload_max_filesize 70M
- php_value post_max_size 100M
+ ProxyFCGISetEnvIf "true" PHP_ADMIN_VALUE "open_basedir=/srv/forum.openstreetmap.org/html/:/usr/share/php/:/tmp/\ndisable_functions=exec,shell_exec,system,passthru,popen,proc_open"
+ ProxyFCGISetEnvIf "true" PHP_VALUE "upload_max_filesize=70M\npost_max_size=100M"
- RewriteEngine on
- RewriteRule ^config\.php$ - [F,L]
+ RewriteEngine on
+ RewriteRule ^config\.php$ - [F,L]
- Options -Indexes
+ Options -Indexes
- Require all granted
+ Require all granted
- php_admin_flag engine off
+
+ SetHandler None
+