push sibelius archive rsync via puppet, make it ssl
[mirror/dsa-puppet.git] / modules / roles / files / debtags / debtags.debian.org
1 Use common-debian-service-https-redirect * debtags.debian.org
2 <VirtualHost *:80>
3   ServerName debtags.debian.net
4   ServerAdmin debian-admin@lists.debian.org
5
6   CustomLog /var/log/apache2/debtags.debian.org-access.log privacy
7   ErrorLog /var/log/apache2/debtags.debian.org-error.log
8
9   Redirect permanent / https://debtags.debian.org/
10 </VirtualHost>
11
12
13 WSGIDaemonProcess debtags.debian.org user=nobody group=debtags home=/ processes=2 threads=5 maximum-requests=5000 inactivity-timeout=1800 umask=0077 display-name=wsgi-debtags.debian.org
14
15 <VirtualHost *:443>
16         ServerName debtags.debian.org
17         ServerAdmin debian-admin@lists.debian.org
18
19         Use common-debian-service-ssl debtags.debian.org
20         Use common-ssl-HSTS
21
22         SSLCACertificateFile /var/lib/dsa/sso/ca.crt
23         SSLCARevocationCheck chain
24         SSLCARevocationFile /var/lib/dsa/sso/ca.crl
25         SSLVerifyClient optional
26
27         SSLOptions +StdEnvVars
28
29         <IfModule mod_userdir.c>
30                 UserDir disabled
31         </IfModule>
32         ErrorLog /var/log/apache2/debtags.debian.org-error.log
33         CustomLog /var/log/apache2/debtags.debian.org-access.log privacy
34         ServerSignature On
35
36
37         <Directory /srv/debtags.debian.org/htdocs>
38                 Require all granted
39         </Directory>
40         Alias /static/ /srv/debtags.debian.org/htdocs/
41
42         <Directory /srv/debtags.debian.org/debtagsd/debtagsd>
43                 <Files wsgi.py>
44                         Require all granted
45                 </Files>
46         </Directory>
47
48         WSGIScriptAlias / /srv/debtags.debian.org/debtagsd/debtagsd/wsgi.py
49         WSGIProcessGroup debtags.debian.org
50         WSGIPassAuthorization On
51 </VirtualHost>
52