Snapshot: do requests for /file/<hash> directly from the filesystem

diff --git a/modules/roles/manifests/snapshot_web.pp b/modules/roles/manifests/snapshot_web.pp
index 083f6e0..37e1711 100644 (file)
--- a/modules/roles/manifests/snapshot_web.pp
+++ b/modules/roles/manifests/snapshot_web.pp
@@ -1,5 +1,6 @@
 class roles::snapshot_web {
        include apache2
+       include apache2::headers
        include apache2::rewrite
 
        # snapshot abusers

diff --git a/modules/roles/templates/snapshot/snapshot.debian.org.conf.erb b/modules/roles/templates/snapshot/snapshot.debian.org.conf.erb
index 2b4e9b8..9a9b190 100644 (file)
--- a/modules/roles/templates/snapshot/snapshot.debian.org.conf.erb
+++ b/modules/roles/templates/snapshot/snapshot.debian.org.conf.erb
@@ -37,6 +37,14 @@ WSGIDaemonProcess snapshot.debian.org user=nobody group=nogroup home=/ processes
     </Files>
   </Directory>
 
+  AliasMatch "^/file/([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{36})$" "/srv/snapshot.debian.org/farm/$1/$2/$1$2$3"
+  <Directory /srv/snapshot.debian.org/farm>
+    Require all granted
+    #ExpiresActive on
+    #ExpiresDefault "access plus 1 year"
+    Header set Cache-Control "max-age=31536000, public"
+  </Directory>
+
   WSGIScriptAlias / /srv/snapshot.debian.org/bin/snapshot.wsgi
   WSGIProcessGroup snapshot.debian.org