X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Ftemplates%2Fstatic-mirroring%2Fstatic-vhost.conf.erb;h=9a3e83c1925c72a8ac88fdcce9cee31c2fd7e94f;hb=540895787469f8ce8e80c4976702dd02102b8de1;hp=53e588a300b32011d162034cd36e7a48a4376ce7;hpb=d31cce2ed31d4e107c5418fed8d3d3b49a6bceb6;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/templates/static-mirroring/static-vhost.conf.erb b/modules/roles/templates/static-mirroring/static-vhost.conf.erb
index 53e588a30..9a3e83c19 100644
--- a/modules/roles/templates/static-mirroring/static-vhost.conf.erb
+++ b/modules/roles/templates/static-mirroring/static-vhost.conf.erb
@@ -1,6 +1,20 @@
 # puppet maintained
+<Macro common-dsa-vhost-https-redirect $name>
+	<VirtualHost <%= @vhost_listen %> >
+		ServerName $name
+		ServerAdmin debian-admin@lists.debian.org
+
+		CustomLog /var/log/apache2/$name-access.log privacy
+		ErrorLog /var/log/apache2/$name-error.log
+
+		Redirect permanent / https://$name/
+	</VirtualHost>
+</Macro>
+
+<Macro prepare-static-vhost $name>
+<Macro static-vhost-base-$name>
+	ServerAdmin debian-admin@lists.debian.org
 
-<Macro common-static-base $name>
 	<IfModule mod_userdir.c>
 		UserDir disabled
 	</IfModule>
@@ -8,48 +22,54 @@
 
 	DocumentRoot /srv/static.debian.org/mirrors/$name/cur
 	<Directory /srv/static.debian.org/mirrors/$name/cur>
-		AllowOverride FileInfo
-		Options Multiviews Indexes FollowSymLinks
-		IndexOptions FancyIndexing NameWidth=*
-		Order allow,deny
-		Allow from all
+		AllowOverride FileInfo Indexes Options=Multiviews
+		Options Indexes SymLinksIfOwnerMatch
+		Require all granted
 	</Directory>
 
+	Header set Surrogate-Key <%= @hostname %>
+
 	AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css
-</Macro>
 
+	Use vstatic-vhost-extra-$name
+</Macro>
 
-<Macro common-static-vhost-with-extra $name $extra>
-	<Virtualhost <%= vhost_listen %> >
+<Macro static-vhost-plain-$name>
+	<VirtualHost <%= @vhost_listen %>>
 		ServerName $name
-		ServerAdmin debian-admin@lists.debian.org
 
 		ErrorLog /var/log/apache2/$name-error.log
 		CustomLog /var/log/apache2/$name-access.log privacy
 
-		Use common-static-base $name
-		$extra
+		Use static-vhost-base-$name
 	</VirtualHost>
 </Macro>
 
-<Macro common-static-vhost-publiclog $name>
-	<Virtualhost <%= vhost_listen %> >
-		ServerName $name
-		ServerAdmin debian-admin@lists.debian.org
+<Macro static-vhost-onion-$name $onion>
+	<VirtualHost <%= @vhost_listen %>>
+		ServerName $onion
 
 		ErrorLog /var/log/apache2/$name-error.log
 		CustomLog /var/log/apache2/$name-access.log privacy
-		<IfModule mod_geoip.c>
-			CustomLog /var/log/apache2/$name-public-access.log privacy+geo
-		</IfModule>
 
-		Use common-static-base $name
+		Use static-vhost-base-$name
 	</VirtualHost>
 </Macro>
 
-<Macro common-static-vhost $name>
-	Use common-static-vhost-with-extra $name "# nada"
-</Macro>
+<Macro static-vhost-ssl-$name>
+	<VirtualHost <%= @vhost_listen_443 %>>
+		ServerName $name
 
+		ErrorLog /var/log/apache2/$name-error.log
+		CustomLog /var/log/apache2/$name-access.log privacyssl
+
+		Use common-debian-service-ssl $name
+		Use common-ssl-HSTS
+		Use http-pkp-$name
+
+		Use static-vhost-base-$name
+	</VirtualHost>
+</Macro>
+</Macro>
 
 # vim:ft=apache: