1 AddType application/font-woff2 .woff2
3 Use common-debian-service-https-redirect * debconf18.debconf.org
5 WSGIDaemonProcess debconf18 \
6 processes=3 threads=2 \
7 user=www-data group=debconf-web maximum-requests=750 umask=0007 display-name=wsgi-debconf18.debconf.org \
8 python-path=/srv/debconf-web/debconf18.debconf.org/dc18.dc.o/:/srv/debconf-web/debconf18.debconf.org/dc18.dc.o/ve/lib/python3.5/site-packages/
11 ServerAdmin admin@debconf.org
12 ServerName debconf18.debconf.org
14 ErrorLog /var/log/apache2/debconf18.debconf.org-error.log
15 CustomLog /var/log/apache2/debconf18.debconf.org-access.log combined
17 Use common-debian-service-ssl debconf18.debconf.org
20 Header always set Referrer-Policy "same-origin"
21 Header always set X-Content-Type-Options nosniff
22 Header always set X-XSS-Protection "1; mode=block"
23 # Header always set Access-Control-Allow-Origin: "*"
26 SSLCACertificateFile /var/lib/dsa/sso/ca.crt
27 SSLCARevocationCheck chain
28 SSLCARevocationFile /var/lib/dsa/sso/ca.crl
30 WSGIProcessGroup debconf18
31 WSGIScriptAlias / /srv/debconf-web/debconf18.debconf.org/dc18.dc.o/wsgi.py
32 <Directory /srv/debconf-web/debconf18.debconf.org/dc18.dc.o>
38 Alias /static/ /srv/debconf-web/debconf18.debconf.org/dc18.dc.o/localstatic/
39 Alias /favicon.ico /srv/debconf-web/debconf18.debconf.org/dc18.dc.o/localstatic/img/favicon/favicon.ico
40 <Directory /srv/debconf-web/debconf18.debconf.org/dc18.dc.o/localstatic/>
43 # A little hacky, but it means we won't accidentally catch non-hashed filenames
44 <FilesMatch ".*\.[0-9a-f]{12}\.[a-z0-9]{2,5}$">
46 ExpiresDefault "access plus 1 year"
50 Alias /media/ /srv/debconf-web/debconf18.debconf.org/dc18.dc.o/media/
51 <Directory /srv/debconf-web/debconf18.debconf.org/dc18.dc.o/media/>
55 <Location /accounts/debian-login>
56 SSLOptions +StdEnvVars
57 # Allow access if one does not have a valid certificate
58 SSLVerifyClient optional