##
## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
##

<%
  vhost_listen = [ (bind != '') ? "#{bind}" : "*",  (bind6 != '') ? "#{bind6}" : "*"].uniq
  vhost_listen_443 = [ (bind != '') ? "#{bind}:443" : "*:443",  (bind6 != '') ? "[#{bind6}]:443" : "*:443"].uniq
%>

<%=
lines = []
vhost_listen.each do |bind|
   lines << "Use common-debian-service-https-redirect \"#{bind}\" \"#{syncproxy_name}\""
end
lines.join("\n")

%>
<Virtualhost <%= vhost_listen_443.join(' ') %> >
   ServerName <%= syncproxy_name %>
   DocumentRoot /srv/www/syncproxy.debian.org/htdocs

   Use common-debian-service-ssl <%= syncproxy_name %>
   Use common-ssl-HSTS
   Use http-pkp-<%= syncproxy_name %>

   <Directory /srv/www/syncproxy.debian.org/htdocs>
      Require all granted
   </Directory>

   CustomLog /var/log/apache2/syncproxy.debian.org-access.log privacy
   ErrorLog /var/log/apache2/syncproxy.debian.org-error.log

<%=
lines = []
%w{debian debian-debug debian-ports debian-security}.each do |archive|
  varname = 'has_srv_mirrors_' + archive.gsub(/[\/-]/,'_')
  if has_variable?(varname) and (eval(varname))
    lines << "  Alias /#{archive}/project/trace/ /srv/mirrors/#{archive}/project/trace/"
    lines << "  <Directory /srv/mirrors/#{archive}/project/trace/>"
    lines << "    Require all granted"
    lines << "    Options +Indexes"
    lines << "  </Directory>"
  end
end

lines.join("\n")
%>

</VirtualHost>

# vim: set ts=3 sw=3 et: