7ea114082ebd6f626c311868af35c25e41c4364d
[mirror/dsa-puppet.git] / modules / roles / files / dbmaster / apache-db.debian.org.conf
1 ##
2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ##
4
5 <Macro db.d.o-common>
6   ServerAdmin debian-admin@lists.debian.org
7   ServerName db.debian.org
8
9   Alias /debian-admin/ /srv/db.debian.org/ftp-archive/archive/
10
11   <Directory /srv/db.debian.org/ftp-archive/archive>
12     DirectoryIndex index.html
13     Require all granted
14     Options +Indexes
15   </Directory>
16   <DirectoryMatch /srv/db.debian.org/ftp-archive/archive/pool/.*-restricted>
17     Require all denied
18     Use dsa-apt-restricted-acl
19     Options +Indexes
20   </DirectoryMatch>
21
22   Header always set Content-Security-Policy: "default-src 'self'; img-src 'self' data:"
23 </Macro>
24
25
26 <VirtualHost *:80>
27   Use db.d.o-common
28
29   RewriteEngine On
30   RewriteCond %{REQUEST_FILENAME} !/debian-admin/
31   RewriteRule /(.*) https://db.debian.org/$1 [L,R=302]
32 </VirtualHost>
33
34
35
36 <VirtualHost *:443>
37   Use db.d.o-common
38
39   DocumentRoot /var/www/userdir-ldap
40
41   CustomLog /var/log/apache2/access.log combined
42   ErrorLog /var/log/apache2/error.log
43   LogLevel warn
44
45   Use common-debian-service-ssl db.debian.org
46   Use common-ssl-HSTS
47   Use http-pkp-db.debian.org
48
49   DirectoryIndex index.html search.cgi
50
51   <Directory /var/www/userdir-ldap>
52     Options +ExecCGI
53     AllowOverride All
54     AddHandler cgi-script .cgi
55   </Directory>
56
57 </VirtualHost>
58
59 # vim:ft=apache: