X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/dc8d08bb901b3a13f9f5d5de8827eefeb8489220..cefa230b9f63d0aa01d44e362288966c51d67da5:/cookbooks/nominatim/templates/default/apache.erb?ds=inline diff --git a/cookbooks/nominatim/templates/default/apache.erb b/cookbooks/nominatim/templates/default/apache.erb index 010b27ad8..4c16dcf4f 100644 --- a/cookbooks/nominatim/templates/default/apache.erb +++ b/cookbooks/nominatim/templates/default/apache.erb @@ -1,13 +1,22 @@ # DO NOT EDIT - This file is being maintained by Chef - - ServerName nominatim.openstreetmap.org - ServerAdmin webmaster@openstreetmap.org +<% [80, 443].each do |port| -%> +> + ServerName <%= node[:fqdn] %> + ServerAlias nominatim.openstreetmap.org ServerAlias nominatim.osm.org ServerAlias nominatim.openstreetmap.org ServerAlias nominatim.openstreetmap.net ServerAlias nominatim.openstreetmaps.org ServerAlias nominatim.openmaps.org + ServerAdmin webmaster@openstreetmap.org + +<% if port == 443 -%> + # + # Enable SSL + # + SSLEngine on +<% end -%> CustomLog /var/log/apache2/nominatim.openstreetmap.org-access.log combined ErrorLog /var/log/apache2/nominatim.openstreetmap.org-error.log @@ -15,29 +24,44 @@ DocumentRoot <%= @directory %>/website /website/"> DirectoryIndex search.php - Options MultiViews FollowSymLinks - AddType text/html .php - AddType application/xml .phpx - AddType application/json .phpj - AddHandler fcgi:/var/run/php5-fpm-www.sock .php - AddHandler fcgi:/var/run/php5-fpm-www.sock .phpx - AddHandler fcgi:/var/run/php5-fpm-www.sock .phpj + Options FollowSymLinks +<% if node[:lsb][:release].to_f >= 14.04 -%> + Require all granted +<% end -%> +<% if node[:lsb][:release].to_f >= 14.04 -%> + ProxyPassMatch /((?!pool-.*).*\.php(/.*)?)$ fcgi://127.0.0.1:<%= @pools[:www][:port ]%><%= @directory %>/website/$1 +<% else -%> + + SetHandler fcgi:/var/run/php5-fpm-www.sock + +<% end -%> + <% @pools.each do |name,details| -%> Alias /pool-<%= name %>/ "<%= @directory %>/website/" - > - AddHandler fcgi:/var/run/php5-fpm-<%= name %>.sock .php - AddHandler fcgi:/var/run/php5-fpm-<%= name %>.sock .phpx - AddHandler fcgi:/var/run/php5-fpm-<%= name %>.sock .phpj - +<% if node[:lsb][:release].to_f >= 14.04 -%> + ProxyPassMatch /pool-<%= name %>/(.*\.php(/.*)?) fcgi://127.0.0.1:<%= details[:port ]%><%= @directory %>/website/$1 +<% else -%> + /(.*\.php(/.*)?)$> + SetHandler fcgi:/var/run/php5-fpm-<%= name %>.sock + +<% end -%> <% end -%> +<% if node[:lsb][:release].to_f >= 14.04 -%> + Redirect 429 /pool-block/ + ErrorDocument 429 /509.html + + ErrorDocument 429 /509.html + +<% else -%> Redirect 420 /pool-block/ ErrorDocument 420 /509.html ErrorDocument 420 /509.html +<% end -%> Redirect 403 /pool-ban/ ErrorDocument 403 /403.html @@ -51,6 +75,8 @@ # regular requests and autoblocks RewriteMap bulklist txt:<%= @directory %>/settings/ip_blocks.map - RewriteRule ^/([sdr].*) /pool-${bulklist:%{REMOTE_ADDR}|www}/$1 [PT] + RewriteRule ^/(search|reverse|details)(\.php)?(/.*)? /pool-${bulklist:%{REMOTE_ADDR}|www}/$1.php$3 [PT] + +<% end -%>