# puppet maintained
<Macro common-dsa-vhost-https-redirect $name>
	<VirtualHost <%= vhost_listen %> >
		ServerName $name
		ServerAdmin debian-admin@lists.debian.org

		CustomLog /var/log/apache2/$name-access.log privacy
		ErrorLog /var/log/apache2/$name-error.log

		Redirect permanent / https://$name/
	</VirtualHost>
</Macro>

<Macro common-dsa-vhost-https-redirect-temp $name>
	<VirtualHost <%= vhost_listen %> >
		ServerName $name
		ServerAdmin debian-admin@lists.debian.org

		CustomLog /var/log/apache2/$name-access.log privacy
		ErrorLog /var/log/apache2/$name-error.log

		Redirect / https://$name/
	</VirtualHost>
</Macro>

<Macro common-static-base $name>
	<IfModule mod_userdir.c>
		UserDir disabled
	</IfModule>
	ServerSignature On

	DocumentRoot /srv/static.debian.org/mirrors/$name/cur
	<Directory /srv/static.debian.org/mirrors/$name/cur>
		AllowOverride FileInfo Indexes Options=Multiviews
		Options Indexes SymLinksIfOwnerMatch
		IndexOptions FancyIndexing NameWidth=*
		Require all granted
	</Directory>

	Header set Surrogate-Key <%= hostname %>

	AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css
</Macro>




<Macro common-static-vhost-with-extra $name $onion>
	<Virtualhost <%= vhost_listen %> >
		ServerName $name
		ServerAlias $onion
		ServerAdmin debian-admin@lists.debian.org

		ErrorLog /var/log/apache2/$name-error.log
		CustomLog /var/log/apache2/$name-access.log privacy

		Use common-static-base $name
		Use vhost-$name-extra
	</VirtualHost>
</Macro>

<Macro common-static-vhost $name $onion>
	<Macro vhost-$name-extra>
		# mod macro does not like empty macros, so here's some content:
		<Directory /non-existant>
		</Directory>
	</Macro>
	Use common-static-vhost-with-extra $name $onion
</Macro>


<Macro common-static-vhost-ssl-with-extra $name $onion>
	Use common-dsa-vhost-https-redirect $name

	<Virtualhost <%= vhost_listen_443 %> >
		ServerName $name
		ServerAdmin debian-admin@lists.debian.org

		ErrorLog /var/log/apache2/$name-error.log
		CustomLog /var/log/apache2/$name-access.log privacyssl

		Use common-debian-service-ssl $name
		Use common-ssl-HSTS

		Use common-static-base $name
		Use vhost-$name-extra
	</VirtualHost>

	<Virtualhost <%= vhost_listen %> >
		ServerName $onion
		ServerAdmin debian-admin@lists.debian.org

		ErrorLog /var/log/apache2/$name-error.log
		CustomLog /var/log/apache2/$name-access.log privacyssl

		Use common-static-base $name
		Use vhost-$name-extra
	</VirtualHost>
</Macro>

<Macro common-static-vhost-ssl $name $onion>
	<Macro vhost-$name-extra>
		# mod macro does not like empty macros, so here's some content:
		<Directory /non-existant>
		</Directory>
	</Macro>
	Use common-static-vhost-ssl-with-extra $name $onion
</Macro>

# vim:ft=apache: