modules/roles/files/debconf_wafer/wafertest.debconf.org

   1 AddType application/font-woff2 .woff2
   2
   3 Use common-debian-service-https-redirect * wafertest.debconf.org
   4
   5 WSGIDaemonProcess wafertest \
   6   processes=3 threads=2 \
   7   user=www-data group=debconf-web maximum-requests=750 umask=0007 display-name=wsgi-wafertest.debconf.org \
   8   python-path=/srv/debconf-web/wafertest.debconf.org/dc18.dc.o/:/srv/debconf-web/wafertest.debconf.org/dc18.dc.o/ve/lib/python3.5/site-packages/
   9
  10 <VirtualHost *:443>
  11   ServerAdmin admin@debconf.org
  12   ServerName wafertest.debconf.org
  13
  14   ErrorLog  /var/log/apache2/wafertest.debconf.org-error.log
  15   CustomLog /var/log/apache2/wafertest.debconf.org-access.log combined
  16
  17   Use common-debian-service-ssl wafertest.debconf.org
  18   Use common-ssl-HSTS
  19
  20   Header always set Referrer-Policy "same-origin"
  21   Header always set X-Content-Type-Options nosniff
  22   Header always set X-XSS-Protection "1; mode=block"
  23 #  Header always set Access-Control-Allow-Origin: "*"
  24
  25   # Debian SSO
  26   SSLCACertificateFile /var/lib/dsa/sso/ca.crt
  27   SSLCARevocationCheck chain
  28   SSLCARevocationFile /var/lib/dsa/sso/ca.crl
  29
  30   WSGIProcessGroup wafertest
  31   WSGIScriptAlias / /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/wsgi.py
  32   WSGIPassAuthorization On
  33
  34   <Directory /srv/debconf-web/wafertest.debconf.org/dc18.dc.o>
  35     <Files wsgi.py>
  36       Require all granted
  37     </Files>
  38   </Directory>
  39
  40   Alias /static/ /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/localstatic/
  41   Alias /favicon.ico /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/localstatic/img/favicon/favicon.ico
  42   <Directory /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/localstatic/>
  43     Require all granted
  44
  45     # A little hacky, but it means we won't accidentally catch non-hashed filenames
  46     <FilesMatch ".*\.[0-9a-f]{12}\.[a-z0-9]{2,5}$">
  47       ExpiresActive on
  48       ExpiresDefault "access plus 1 year"
  49     </FilesMatch>
  50   </Directory>
  51
  52   Alias /media/ /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/media/
  53   <Directory /srv/debconf-web/wafertest.debconf.org/dc18.dc.o/media/>
  54     Require all granted
  55   </Directory>
  56
  57   <Location /accounts/debian-login>
  58     SSLOptions +StdEnvVars
  59     # Allow access if one does not have a valid certificate
  60     SSLVerifyClient optional
  61   </Location>
  62 </VirtualHost>
  63
  64 # vim: set ft=apache: