ServerName zuul.opendev.org ServerAdmin webmaster@openstack.org ErrorLog ${APACHE_LOG_DIR}/zuul-error.log LogLevel warn CustomLog ${APACHE_LOG_DIR}/zuul-access.log combined-cache Redirect / https://zuul.opendev.org/ ServerName zuul.opendev.org ServerAdmin webmaster@openstack.org AllowEncodedSlashes On ErrorLog ${APACHE_LOG_DIR}/zuul-ssl-error.log LogLevel warn CustomLog ${APACHE_LOG_DIR}/zuul-ssl-access.log combined-cache SSLEngine on SSLProtocol All -SSLv2 -SSLv3 # Note: this list should ensure ciphers that provide forward secrecy SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP SSLHonorCipherOrder on SSLCertificateFile /etc/letsencrypt-certs/zuul.opendev.org/zuul.opendev.org.cer SSLCertificateKeyFile /etc/letsencrypt-certs/zuul.opendev.org/zuul.opendev.org.key SSLCertificateChainFile /etc/letsencrypt-certs/zuul.opendev.org/ca.cer BrowserMatch "MSIE [2-6]" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 # MSIE 7 and newer should be able to use keepalive BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown RewriteEngine on RewriteRule ^/api/tenant/(.*)/console-stream ws://127.0.0.1:9000/api/tenant/$1/console-stream [P,L] RewriteRule ^/(.*)$ http://127.0.0.1:9000/$1 [P,L] AddOutputFilterByType DEFLATE application/json text/css text/javascript application/javascript # Enable SHM backend for socache CacheSocache shmcb # Anything bigger should fall through to disk CacheSocacheMaxSize 102400 # This is required to match on rewrites correctly CacheQuickHandler off # Disk cache settings CacheRoot /var/cache/apache2/mod_cache_disk CacheMaxFileSize 10000000 CacheEnable socache CacheEnable disk CacheEnable socache CacheEnable disk