puppet-zanata/templates/zanata.vhost.erb
stephane a924e7b172 Add apache configuration for zanata
This change allows us to shift away from the default setup of using Wildfly's
internal undertow webserver to using Apache as a frontend via
mod_proxy_ajp. The built-in https and ajp may be selectively enabled or
disabled.

Change-Id: I7152b43edb5e028fbad9631dd137536f90e33388
2015-04-07 13:04:24 -07:00

38 lines
1.3 KiB
Plaintext

<VirtualHost *:80>
ServerName <%= scope.lookupvar("zanata::apache::vhost_name") %>
ServerAdmin <%= scope.lookupvar("zanata::apache::serveradmin") %>
ErrorLog ${APACHE_LOG_DIR}/<%= scope.lookupvar("zanata::apache::vhost_name") %>-error.log
LogLevel warn
CustomLog ${APACHE_LOG_DIR}/<%= scope.lookupvar("zanata::apache::vhost_name") %>-access.log combined
Redirect / https://<%= scope.lookupvar("zanata::apache::vhost_name") %>/
</VirtualHost>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName <%= scope.lookupvar("zanata::apache::vhost_name") %>
ServerAdmin <%= scope.lookupvar("zanata::apache::serveradmin") %>
ErrorLog ${APACHE_LOG_DIR}/<%= scope.lookupvar("zanata::apache::vhost_name") %>-error.log
LogLevel warn
CustomLog ${APACHE_LOG_DIR}/<%= scope.lookupvar("zanata::apache::vhost_name") %>-access.log combined
SSLEngine on
SSLProtocol All -SSLv2 -SSLv3
SSLCertificateFile <%= scope.lookupvar("zanata::apache::ssl_cert_file") %>
SSLCertificateKeyFile <%= scope.lookupvar("zanata::apache::ssl_key_file") %>
<% if scope.lookupvar("zanata::apache::ssl_chain_file") != "" %>
SSLCertificateChainFile <%= scope.lookupvar("zanata::apache::ssl_chain_file") %>
<% end -%>
ProxyPass / ajp://127.0.0.1:8009/ retry=0
</VirtualHost>
</IfModule>