modules/roles/files/dbmaster/apache-db.debian.org.conf

   1 ##
   2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
   3 ##
   4
   5 <Macro db.d.o-common>
   6   ServerAdmin debian-admin@lists.debian.org
   7   ServerName db.debian.org
   8
   9   Alias /debian-admin/ /srv/db.debian.org/ftp-archive/archive/
  10
  11   <Directory /srv/db.debian.org/ftp-archive/archive>
  12     DirectoryIndex index.html
  13     Require all granted
  14     Options +Indexes
  15   </Directory>
  16   <DirectoryMatch /srv/db.debian.org/ftp-archive/archive/pool/.*-restricted>
  17     Require all denied
  18     Use dsa-apt-restricted-acl
  19     Options +Indexes
  20   </DirectoryMatch>
  21
  22   Header always set Content-Security-Policy: "default-src 'self'; img-src 'self' data:"
  23 </Macro>
  24
  25
  26 <VirtualHost *:80>
  27   Use db.d.o-common
  28
  29   RewriteEngine On
  30   RewriteCond %{REQUEST_FILENAME} !/debian-admin/
  31   RewriteRule /(.*) https://db.debian.org/$1 [L,R=302]
  32 </VirtualHost>
  33
  34
  35
  36 <VirtualHost *:443>
  37   Use db.d.o-common
  38
  39   DocumentRoot /var/www/userdir-ldap
  40
  41   CustomLog /var/log/apache2/access.log combined
  42   ErrorLog /var/log/apache2/error.log
  43   LogLevel warn
  44
  45   Use common-debian-service-ssl db.debian.org
  46   Use common-ssl-HSTS
  47   Use http-pkp-db.debian.org
  48
  49   DirectoryIndex index.html search.cgi
  50
  51   <Directory /var/www/userdir-ldap>
  52     Options +ExecCGI
  53     AllowOverride All
  54     AddHandler cgi-script .cgi
  55   </Directory>
  56
  57   # git stuff
  58   #################
  59   <Directory /srv/db.debian.org/git>
  60     DirectoryIndex index.html
  61     Require all granted
  62   </Directory>
  63
  64   Alias /git-classic/ /srv/db.debian.org/git/
  65
  66   SetEnv GIT_PROJECT_ROOT /srv/db.debian.org/git
  67   AliasMatch ^/git/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$          /srv/db.debian.org/git/$1
  68   AliasMatch ^/git/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/db.debian.org/git/$1
  69   ScriptAlias /git/ /usr/lib/git-core/git-http-backend/
  70   <Directory /usr/lib/git-core>
  71     Require all granted
  72   </Directory>
  73
  74
  75   # The rewrite is just there so we get a directory index.
  76   RewriteEngine on
  77   RewriteRule ^/git$ /git/ [R]
  78   RewriteRule ^/git/$ /git-classic/ [PT]
  79
  80   #################
  81   Alias /bzr /srv/db.debian.org/bzr/
  82   <Directory /srv/db.debian.org/bzr>
  83     DirectoryIndex index.html
  84   </Directory>
  85 </VirtualHost>
  86
  87 # vim:ft=apache: