X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/74d900a73345c80ef4205d1d4c0a3e1b674dad4d..7dea747820c21c7d45070bff703d58534aada3ba:/cookbooks/trac/templates/default/apache.erb diff --git a/cookbooks/trac/templates/default/apache.erb b/cookbooks/trac/templates/default/apache.erb index ad9429bb1..199be20d6 100644 --- a/cookbooks/trac/templates/default/apache.erb +++ b/cookbooks/trac/templates/default/apache.erb @@ -1,50 +1,52 @@ # DO NOT EDIT - This file is being maintained by Chef -WSGIDaemonProcess <%= @name %> user=<%= @user %> group=<%= @group %> maximum-requests=5000 threads=25 inactivity-timeout=180 - - ServerName <%= @name %> - ServerAdmin webmaster@openstreetmap.org + ServerName <%= @name %> +<% @aliases.each do |alias_name| -%> + ServerAlias <%= alias_name %> +<% end -%> + ServerAdmin webmaster@openstreetmap.org - CustomLog /var/log/apache2/<%= @name %>-access.log combined - ErrorLog /var/log/apache2/<%= @name %>-error.log + CustomLog /var/log/apache2/<%= @name %>-access.log combined + ErrorLog /var/log/apache2/<%= @name %>-error.log - RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/ - RedirectPermanent / https://<%= @name %>/ + RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/ + RedirectPermanent / https://<%= @name %>/ +<% unless @aliases.empty? -%> - ServerName <%= @name %> - ServerAdmin webmaster@openstreetmap.org + ServerName <%= @aliases.first %> +<% @aliases.drop(1).each do |alias_name| -%> + ServerAlias <%= alias_name %> +<% end -%> + ServerAdmin webmaster@openstreetmap.org - SSLEngine on - SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem - SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key + SSLEngine on + SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem + SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key - CustomLog /var/log/apache2/<%= @name %>-access.log combined - ErrorLog /var/log/apache2/<%= @name %>-error.log + CustomLog /var/log/apache2/<%= @name %>-access.log combined + ErrorLog /var/log/apache2/<%= @name %>-error.log - DocumentRoot <%= @directory %>/htdocs - Alias /robots.txt <%= @directory %>/htdocs/site/robots.txt - WSGIScriptAlias / <%= @directory %>/cgi-bin/trac.wsgi + RedirectPermanent / https://<%= @name %>/ + +<% end -%> - WSGIProcessGroup <%= @name %> + + ServerName <%= @name %> + ServerAdmin webmaster@openstreetmap.org - DefineExternalAuth osm pipe /usr/local/bin/trac-authenticate + SSLEngine on + SSLCertificateFile /etc/ssl/certs/<%= @name %>.pem + SSLCertificateKeyFile /etc/ssl/private/<%= @name %>.key - - AuthType Basic - AuthName "OpenStreetMap Trac" - AuthBasicProvider external - AuthExternal osm - Require valid-user - - + CustomLog /var/log/apache2/<%= @name %>-access.log combined + ErrorLog /var/log/apache2/<%= @name %>-error.log -/htdocs> - Require all granted - + RewriteEngine on + RewriteMap tickets txt:/srv/trac.openstreetmap.org/tickets.map + RewriteRule ^/ticket/(\d+)$ https://github.com/openstreetmap/trac-tickets/issues/${tickets:$1} -/cgi-bin> - Require all granted - + RedirectPermanent / https://github.com/openstreetmap/trac-tickets +