699cc747b301b7041fc70ee1ad2b40c54056e483
[mirror/dsa-puppet.git] / modules / roles / templates / apache-security-tracker.debian.org.conf.erb
1 Use common-debian-service-https-redirect * security-tracker.debian.org
2
3 <VirtualHost *:443>
4         ServerAdmin team@security.debian.org
5         ServerName security-tracker.debian.org
6
7         Use common-debian-service-ssl security-tracker.debian.org
8         Use common-ssl-HSTS
9         Use http-pkp-security-tracker.debian.org
10
11         <IfModule mod_userdir.c>
12                 UserDir disabled
13         </IfModule>
14
15         LogLevel warn
16         ErrorLog /var/log/apache2/security-tracker.debian.org-error.log
17         CustomLog /var/log/apache2/security-tracker.debian.org-access.log privacyssl
18         ServerSignature On
19
20         RewriteEngine on
21         RewriteRule ^/tracker(?:/|$)                    -                               [L]
22         # The next rule matches favicon.ico, robots.txt etc.
23         RewriteRule ^/[^./]+[.][a-z]{3}$                -                               [L]
24         RewriteRule ^/((?:TEMP|CVE)[^/]+)$              /tracker/$1                     [R]
25         RewriteRule ^/((?:old|un)?stable|testing)$      /tracker/status/release/$1      [R]
26         RewriteRule ^/((?:old)?stable-backports)$       /tracker/status/release/$1      [R]
27         RewriteRule ^/([a-z0-9.+-]+)$                   /tracker/$1                     [R]
28         RewriteRule ^/+$                                /tracker/                       [R]
29
30         DocumentRoot /srv/security-tracker.debian.org/htdocs/security-tracker
31         <Directory /srv/security-tracker.debian.org/htdocs/security-tracker>
32                 AllowOverride none
33                 Options +Indexes
34                 Require all granted
35         </Directory>
36
37         <DirectoryMatch "\.svn" >
38                 Require all denied
39         </DirectoryMatch>
40
41         <Location /tracker/data/json>
42                 SetOutputFilter DEFLATE
43         </Location>
44
45         ProxyRequests off
46         ProxyPass /tracker http://localhost:25648/tracker retry=1
47         ProxyPassReverse /tracker http://localhost:25648/tracker
48
49         ExpiresActive On
50         ExpiresDefault "access plus 1 hour"
51 </VirtualHost>
52 # vim: set filetype=apache: