# puppet maintained
<Macro common-dsa-vhost-https-redirect $name>
	<VirtualHost <%= vhost_listen %> >
		ServerName $name
		ServerAdmin debian-admin@lists.debian.org

		CustomLog /var/log/apache2/$name-access.log privacy
		ErrorLog /var/log/apache2/$name-error.log

		Redirect permanent / https://$name/
	</VirtualHost>
</Macro>

<Macro prepare-static-vhost $name>
<Macro static-vhost-base-$name>
	ServerAdmin debian-admin@lists.debian.org

	<IfModule mod_userdir.c>
		UserDir disabled
	</IfModule>
	ServerSignature On

	DocumentRoot /srv/static.debian.org/mirrors/$name/cur
	<Directory /srv/static.debian.org/mirrors/$name/cur>
		AllowOverride FileInfo Indexes Options=Multiviews
		Options Indexes SymLinksIfOwnerMatch
		Require all granted
	</Directory>

	Header set Surrogate-Key <%= hostname %>

	AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css

	Use vstatic-vhost-extra-$name
</Macro>

<Macro static-vhost-plain-$name>
	<VirtualHost <%= vhost_listen %>>
		ServerName $name

		ErrorLog /var/log/apache2/$name-error.log
		CustomLog /var/log/apache2/$name-access.log privacy

		Use static-vhost-base-$name
	</VirtualHost>
</Macro>

<Macro static-vhost-onion-$name $onion>
	<VirtualHost <%= vhost_listen %>>
		ServerName $onion

		ErrorLog /var/log/apache2/$name-error.log
		CustomLog /var/log/apache2/$name-access.log privacy

		Use static-vhost-base-$name
	</VirtualHost>
</Macro>

<Macro static-vhost-ssl-$name>
	<VirtualHost <%= vhost_listen_443 %>>
		ServerName $name

		ErrorLog /var/log/apache2/$name-error.log
		CustomLog /var/log/apache2/$name-access.log privacyssl

		Use common-debian-service-ssl $name
		Use common-ssl-HSTS
		Use http-pkp-$name

		Use static-vhost-base-$name
	</VirtualHost>
</Macro>
</Macro>

# vim:ft=apache: