Add certificate for opengeodata.org

diff --git a/cookbooks/blog/recipes/default.rb b/cookbooks/blog/recipes/default.rb
index e9440d75c89311bcd7b39ae18bdd2f7bedefd306..83f022ee3b7c8fcd3a9aa1fe7fc4055378715ed0 100644 (file)
--- a/cookbooks/blog/recipes/default.rb
+++ b/cookbooks/blog/recipes/default.rb
@@ -91,6 +91,10 @@ git "/srv/blog.openstreetmap.org/static" do
   group "wordpress"
 end
 
+ssl_certificate "opengeodata.org" do
+  domains ["opengeodata.org", "www.opengeodata.org", "old.opengeodata.org"]
+  notifies :reload, "service[apache2]"
+end
 apache_site "opengeodata.org" do
   template "opengeodata.erb"
   directory "/srv/opengeodata.org"

diff --git a/cookbooks/blog/templates/default/opengeodata.erb b/cookbooks/blog/templates/default/opengeodata.erb
index 43dbf01bd4592a36bee98043d690601446c4a9dc..1150145a48959d8cd5a6654b9cb52e61290d6a14 100644 (file)
--- a/cookbooks/blog/templates/default/opengeodata.erb
+++ b/cookbooks/blog/templates/default/opengeodata.erb
@@ -3,7 +3,7 @@
 <VirtualHost *:80>
   ServerName opengeodata.org
   ServerAlias www.opengeodata.org
-  ServerAlias old.opengeodata.org
+  ServerAlias old.opengeodata.org # https://blog.openstreetmap.org/2010/02/25/old-opengeodata-posts-now-up-at-old-opengeodata-org/
 
   ServerAdmin webmaster@openstreetmap.org
 
@@ -11,7 +11,28 @@
   ErrorLog /var/log/apache2/<%= @name %>-error.log
 
   RewriteEngine on
-  RewriteRule ^(.*/)index\.html$ http://blog.openstreetmap.org/$1 [R,L]
+  RewriteRule ^(.*/)index\.html$ https://blog.openstreetmap.org/$1 [R=permanent,L]
 
-  RedirectPermanent / http://blog.openstreetmap.org/
+  RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
+  RedirectPermanent / https://blog.openstreetmap.org/
+</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName opengeodata.org
+  ServerAlias www.opengeodata.org
+  ServerAlias old.opengeodata.org # https://blog.openstreetmap.org/2010/02/25/old-opengeodata-posts-now-up-at-old-opengeodata-org/
+
+  ServerAdmin webmaster@openstreetmap.org
+
+  SSLEngine on
+  SSLCertificateFile /etc/ssl/certs/opengeodata.org.pem
+  SSLCertificateKeyFile /etc/ssl/private/opengeodata.org.key
+
+  CustomLog /var/log/apache2/<%= @name %>-access.log combined
+  ErrorLog /var/log/apache2/<%= @name %>-error.log
+
+  RewriteEngine on
+  RewriteRule ^(.*/)index\.html$ https://blog.openstreetmap.org/$1 [R=permanent,L]
+
+  RedirectPermanent / https://blog.openstreetmap.org/
 </VirtualHost>