Further restrict access to cgi-bin on http://popcon.d.o
[mirror/dsa-puppet.git] / modules / roles / files / popcon / popcon.debian.org.conf
1 <VirtualHost *:80>
2         ServerName popcon.debian.org
3         ServerAlias popcon2.debian.org
4         ServerAdmin popcon-developers@lists.alioth.debian.org
5
6         ErrorLog /var/log/apache2/popcon.debian.org-error.log
7         CustomLog /var/log/apache2/popcon.debian.org-access.log privacy
8
9         ScriptAlias /cgi-bin /srv/popcon.debian.org/cgi-bin/
10         <Directory /srv/popcon.debian.org/cgi-bin>
11                 <Files "popcon.cgi">
12                         Require all granted
13                 </Files>
14         </Directory>
15
16         RewriteEngine on
17         RewriteCond "%{HTTP_USER_AGENT}" !popcon-upload
18         RewriteRule ^(.*) https://popcon.debian.org$1 [R,L]
19 </VirtualHost>
20
21 <VirtualHost *:443>
22         ServerName popcon.debian.org
23         ServerAlias popcon2.debian.org
24         ServerAdmin popcon-developers@lists.alioth.debian.org
25
26         Use common-debian-service-ssl popcon.debian.org
27         Use common-ssl-HSTS
28         Use http-pkp-popcon.debian.org
29
30         ErrorLog /var/log/apache2/popcon.debian.org-error.log
31         CustomLog /var/log/apache2/popcon.debian.org-access.log privacyssl
32
33         DocumentRoot /srv/popcon.debian.org/www
34         <Directory /srv/popcon.debian.org/www>
35                 Require all granted
36         </Directory>
37
38         AddDefaultCharset utf-8
39         ScriptAlias /cgi-bin /srv/popcon.debian.org/cgi-bin/
40         <Directory /srv/popcon.debian.org/cgi-bin>
41                 Require all granted
42         </Directory>
43
44         RewriteEngine on
45         RewriteRule ^/src:([-a-z+.0-9]+)$ https://qa.debian.org/developer.php?popcon=$1 [R,L]
46 </VirtualHost>
47
48 # vim:set syn=apache: