1fbd156697
We have decided to decommision the ask.openstack.org server as it is running EOL Xenial, and its manually purchased certiface is about to expire. Although it has been deprecated for some time, we feel like it has been around long-enough as a resource that it is best if we replace it with a place-holder. The links included here are the same as the currently shown header explaining the site is read-only. There's nowhere particularly relevant to redirect the site, so we add a static file here, and some minimal Ansible to put it in the right place in a generic way in-case we want to do the same for another service. Change-Id: I8a31f8fcf9b3064c0ae58e463a6014dc14b518a7
41 lines
1.3 KiB
Plaintext
41 lines
1.3 KiB
Plaintext
<VirtualHost *:80>
|
|
ServerName ask.openstack.org
|
|
RewriteEngine On
|
|
RewriteRule ^/(.*) https://ask.openstack.org/$1 [last,redirect=permanent]
|
|
LogLevel warn
|
|
ErrorLog /var/log/apache2/ask.openstack.org_error.log
|
|
CustomLog /var/log/apache2/ask.openstack.org_access.log combined
|
|
ServerSignature Off
|
|
</VirtualHost>
|
|
|
|
<IfModule mod_ssl.c>
|
|
<VirtualHost *:443>
|
|
|
|
ServerName ask.openstack.org
|
|
|
|
DocumentRoot /var/www/ask.openstack.org
|
|
|
|
SSLCertificateFile /etc/letsencrypt-certs/ask.openstack.org/ask.openstack.org.cer
|
|
SSLCertificateKeyFile /etc/letsencrypt-certs/ask.openstack.org/ask.openstack.org.key
|
|
SSLCertificateChainFile /etc/letsencrypt-certs/ask.openstack.org/ca.cer
|
|
SSLProtocol All -SSLv2 -SSLv3
|
|
# Note: this list should ensure ciphers that provide forward secrecy
|
|
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP
|
|
SSLHonorCipherOrder on
|
|
|
|
Use UserAgentFilter
|
|
|
|
<Directory /var/www/ask.openstack.org/>
|
|
Options Indexes FollowSymLinks MultiViews
|
|
AllowOverrideList Redirect RedirectMatch
|
|
Require all granted
|
|
</Directory>
|
|
|
|
LogLevel warn
|
|
ErrorLog /var/log/apache2/ask.openstack.org_error.log
|
|
CustomLog /var/log/apache2/ask.openstack.org_access.log combined
|
|
ServerSignature Off
|
|
|
|
</VirtualHost>
|
|
</IfModule>
|