# puppet maintained

######################
# deb.debian.org
<% if scope.function_has_static_component(['deb.debian.org']) -%>
<Macro vhost-deb.debian.org-extra>
	Redirect /debian/           http://cdn-fastly.deb.debian.org/debian/
	Redirect /debian-debug/     http://cdn-fastly.deb.debian.org/debian-debug/
	Redirect /debian-ports/     http://cdn-fastly.deb.debian.org/debian-ports/
	Redirect /debian-security/  http://cdn-fastly.deb.debian.org/debian-security/
</Macro>
<% end -%>

<Macro vhost-network-test.debian.org-extra>
	ServerAlias network-test-backend.debian.org
</Macro>

<%=

def vhost(lines, sn, type=nil)
  if scope.function_has_static_component([sn])
    t = 'common-static-vhost'
    if type then t += "-#{type}"; end

    onion = scope.function_onion_global_service_hostname([sn])
    onion = "unavailable-onion.invalid" if onion.nil?

    lines << "Use #{t} #{sn} #{onion}"
  end
end

lines = []
vhost(lines, "mozilla.debian.net")
vhost(lines, "backports.debian.org", "ssl")
vhost(lines, "incoming.debian.org")
vhost(lines, "incoming.ports.debian.org")
vhost(lines, "debdeltas.debian.net")
vhost(lines, "news.debian.net"         , "ssl")
vhost(lines, "debaday.debian.net"      , "ssl")
vhost(lines, "timeline.debian.net"     , "ssl")
vhost(lines, "network-test.debian.org" , "with-extra")
vhost(lines, "blends.debian.org"       , "ssl")
vhost(lines, "wnpp-by-tags.debian.net" , "ssl")
vhost(lines, "security-team.debian.org", "ssl")
vhost(lines, "d-i.debian.org"      , "ssl")
vhost(lines, "appstream.debian.org", "ssl")
vhost(lines, "dsa.debian.org"      , "ssl")
vhost(lines, "rtc.debian.org"      , "ssl")

vhost(lines, "10years.debconf.org" , "ssl")
vhost(lines, "debconf0.debconf.org", "ssl")
vhost(lines, "debconf1.debconf.org", "ssl")
vhost(lines, "debconf2.debconf.org", "ssl")
vhost(lines, "debconf3.debconf.org", "ssl")
vhost(lines, "debconf4.debconf.org", "ssl")
vhost(lines, "debconf5.debconf.org", "ssl")
vhost(lines, "debconf6.debconf.org", "ssl")
vhost(lines, "debconf7.debconf.org", "ssl")
vhost(lines, "es.debconf.org"      , "ssl")
vhost(lines, "fr.debconf.org"      , "ssl")
vhost(lines, "miniconf10.debconf.org" , "ssl")

vhost(lines, "deb.debian.org", "with-extra")

lines.join("\n")
-%>

######################
# metadata.ftp-master.debian.org
<% if scope.function_has_static_component(['metadata.ftp-master.debian.org']) -%>
<VirtualHost <%= vhost_listen %> >
	ServerName metadata.ftp-master.debian.org
	ServerAdmin debian-admin@lists.debian.org

	ErrorLog /var/log/apache2/metadata.ftp-master.debian.org-error.log
	CustomLog /var/log/apache2/metadata.ftp-master.debian.org-access.log privacy

	Use common-static-base metadata.ftp-master.debian.org
	AddDefaultCharset utf-8
	<LocationMatch "/changelogs/(main|contrib|non-free)">
		ForceType text/plain
	</LocationMatch>
</VirtualHost>
<% end -%>

######################
# bits.debian.org
<% if scope.function_has_static_component(['bits.debian.org']) -%>
<Macro static-bits.debian.org-base>
	ServerName bits.debian.org
	ServerAdmin debian-admin@lists.debian.org

	ErrorLog /var/log/apache2/bits.debian.org-error.log
	<IfModule mod_geoip.c>
		CustomLog /var/log/apache2/bits.debian.org-public-access.log privacy+geo
	</IfModule>

	Use common-static-base bits.debian.org
</Macro>

<Virtualhost <%= vhost_listen %> >
	RewriteEngine on

	RewriteEngine On
	RewriteCond %{REQUEST_URI} !^/feeds/
	RewriteRule ^/(.*)$ https://bits.debian.org/$1 [R,L]
	#RewriteRule ^/(.*)$ https://bits.debian.org/$1 [R=301,L]

	Use static-bits.debian.org-base
	CustomLog /var/log/apache2/bits.debian.org-access.log privacy
</VirtualHost>

<Virtualhost <%= vhost_listen_443 %> >
	Use static-bits.debian.org-base
	CustomLog /var/log/apache2/bits.debian.org-access.log privacyssl

	Use common-debian-service-ssl bits.debian.org
	Use common-ssl-HSTS
</VirtualHost>
<% end -%>

######################
# release.debian.org
<% if scope.function_has_static_component(['release.debian.org']) -%>
Use common-dsa-vhost-https-redirect release.debian.org
<VirtualHost <%= vhost_listen_443 %> >
	ServerName release.debian.org
	ServerAdmin debian-admin@debian.org

	ErrorLog /var/log/apache2/release.debian.org-error.log
	CustomLog /var/log/apache2/release.debian.org-access.log privacy

	Use common-debian-service-ssl release.debian.org
	Use common-ssl-HSTS

	Use common-static-base release.debian.org

	RewriteEngine	on
	RewriteRule		^/migration/$			/migration/testing.pl
	RewriteRule		^/migration/search/(.+)/$	/migration/testing.pl?package=$1
	RewriteCond		%{QUERY_STRING} package=((.)(.*))
	RewriteRule		^/migration/testing.pl		/migration/cache/%2/%1.html [PT,L]
	RewriteRule		^/migration/testing.pl		/migration/cache/_index.html

	Alias /proposed-updates/ /srv/static.debian.org/mirrors/release.debian.org-pu/cur/
	<Directory /srv/static.debian.org/mirrors/release.debian.org-pu/cur>
		Require all granted
		Options Indexes SymLinksIfOwnerMatch MultiViews
		IndexOptions FancyIndexing NameWidth=*

		AddEncoding gzip .gz
		FilterDeclare gzip CONTENT_SET
		FilterProvider gzip inflate "%{req:Accept-Encoding} !~ /gzip/"
		FilterChain gzip
		<Files *.debdiff.gz>
			ForceType text/plain
		</Files>
	</Directory>
</VirtualHost>
<% end -%>

# www.backports.org
###################
# www.backports.org is the historical place for the backports
# website and archive.  It is now a CNAME to backports.debian.org:
# redirect http requests.
<VirtualHost <%= vhost_listen %> >
	ServerName www.backports.org
	ServerAlias lists.backports.org
	ServerAdmin debian-admin@debian.org
	RedirectPermanent / http://backports.debian.org/
</VirtualHost>

######################
# www.ports.debian.org
<% if scope.function_has_static_component(['www.ports.debian.org']) -%>

Use common-dsa-vhost-https-redirect www.ports.debian.org

<Macro vhost-inner-www.ports.debian.org>
	ServerAdmin debian-admin@lists.debian.org

	ErrorLog /var/log/apache2/www.ports.debian.org-error.log
	CustomLog /var/log/apache2/www.ports.debian.org-access.log privacy


	<IfModule mod_userdir.c>
		UserDir disabled
	</IfModule>
	ServerSignature On

	DocumentRoot /srv/static.debian.org/mirrors/www.ports.debian.org/cur
	<Directory /srv/static.debian.org/mirrors/www.ports.debian.org/cur>
		AllowOverride FileInfo Indexes Options=Multiviews
		Options Multiviews Indexes FollowSymLinks Includes
		IndexOptions FancyIndexing NameWidth=*
		Require all granted
	</Directory>

	AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css
	AddOutputFilter INCLUDES .xhtml
</Macro>

<Virtualhost <%= vhost_listen_443 %> >
	ServerName www.ports.debian.org
	ServerAlias www.ports-backend.debian.org
	Use common-debian-service-ssl www.ports.debian.org
	Use common-ssl-HSTS
	Use vhost-inner-www.ports.debian.org
</VirtualHost>
<% if scope.function_onion_global_service_hostname(['www.ports.debian.org']) -%>
<Virtualhost <%= vhost_listen %> >
	ServerName <%= scope.function_onion_global_service_hostname(['www.ports.debian.org']) %>
	Use vhost-inner-www.ports.debian.org
</VirtualHost>
<% end -%>
<% end -%>

<VirtualHost <%= vhost_listen %> >
	ServerName www.debian-ports.org
	ServerAlias debian-ports.org
	ServerAdmin debian-admin@debian.org
	RedirectPermanent / https://www.ports.debian.org/
</VirtualHost>

<VirtualHost <%= vhost_listen %> >
	ServerName ports.debian.org
	ServerAlias ports.debian.net
	ServerAdmin debian-admin@debian.org
	RedirectPermanent / https://www.ports.debian.org/
</VirtualHost>

<VirtualHost <%= vhost_listen %> >
	ServerName incoming.debian-ports.org
	ServerAdmin debian-admin@debian.org
	RedirectPermanent / http://incoming.ports.debian.org/
</VirtualHost>

<VirtualHost <%= vhost_listen %> >
	ServerName ftp.debian-ports.org
	ServerAdmin debian-admin@debian.org
	RedirectPermanent /archive http://www.ports.debian.org
	RedirectPermanent /debian http://ftp.ports.debian.org/debian-ports
	RedirectPermanent /debian-cd http://ftp.ports.debian.org/debian-ports-cd
	RedirectPermanent / http://ftp.ports.debian.org/
</VirtualHost>

# video.debian.net
###################
<VirtualHost <%= vhost_listen %> >
	ServerName video.debian.net
	ServerAdmin debian-admin@debian.org

	Redirect / http://meetings-archive.debian.net/pub/debian-meetings/
</VirtualHost>

# historical sites
##################
# now only redirects remain
<VirtualHost <%= vhost_listen %> >
	ServerName women.debian.org
	ServerAdmin debian-admin@debian.org

	RedirectPermanent / http://www.debian.org/women/

	RedirectPermanent /about/ http://www.debian.org/women/about
	RedirectPermanent /contact/ http://www.debian.org/women/contact
	RedirectPermanent /faqs/ http://www.debian.org/women/faq
	RedirectPermanent /home/ http://www.debian.org/women/
	RedirectPermanent /images/dw.png http://www.debian.org/women/dw.png
	RedirectPermanent /involvement/ http://www.debian.org/women/participate
	RedirectPermanent /mentoring/ http://www.debian.org/women/mentoring
	RedirectPermanent /press/ http://wiki.debian.org/DebianWomen/Press
	RedirectPermanent /profiles/ http://www.debian.org/women/profiles/
</VirtualHost>

<VirtualHost <%= vhost_listen %> >
	ServerName volatile.debian.org
	ServerAlias volatile-master.debian.org
	ServerAdmin debian-admin@debian.org
	RedirectPermanent / http://www.debian.org/volatile/
</VirtualHost>

<VirtualHost <%= vhost_listen %> >
	ServerName ftp-master.metadata.debian.org
	ServerAdmin debian-admin@debian.org
	RedirectPermanent / http://metadata.ftp-master.debian.org/
</VirtualHost>

# vim:ft=apache: