2014-08-26 18:08:15 -05:00

48 lines
1.9 KiB
Plaintext

WSGIDaemonProcess keystone user=keystone group=nogroup processes=3 threads=10
<VirtualHost *:{{ service_port }}>
LogLevel {{ keystone_apache_log_level|default('info') }}
ErrorLog /var/log/keystone/keystone-apache-error.log
CustomLog /var/log/keystone/ssl_access.log combined
Options +FollowSymLinks
{% if keystone_ssl == true %}
SSLEngine on
SSLCertificateFile {{ keystone_ssl_cert|default('/etc/ssl/certs/apache.cert') }}
SSLCertificateKeyFile {{ keystone_ssl_key|default('/etc/ssl/private/apache.key') }}
SSLCACertificatePath {{ keystone_ssl_cert_path|default('/etc/ssl/certs') }}
SSLCARevocationPath {{ keystone_ssl_cert_path|default('/etc/ssl/certs') }}
SSLVerifyClient optional
SSLVerifyDepth 10
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLOptions +StdEnvVars +ExportCertData
{% endif %}
WSGIScriptAlias / /var/www/cgi-bin/keystone/main
WSGIProcessGroup keystone
</VirtualHost>
<VirtualHost *:{{ admin_port }}>
LogLevel {{ keystone_apache_log_level|default('info') }}
ErrorLog /var/log/keystone/keystone-apache-error.log
CustomLog /var/log/keystone/ssl_access.log combined
Options +FollowSymLinks
{% if keystone_ssl == true %}
SSLEngine on
SSLCertificateFile {{ keystone_ssl_cert|default('/etc/ssl/certs/apache.cert') }}
SSLCertificateKeyFile {{ keystone_ssl_key|default('/etc/ssl/private/apache.key') }}
SSLCACertificatePath {{ keystone_ssl_cert_path|default('/etc/ssl/certs') }}
SSLCARevocationPath {{ keystone_ssl_cert_path|default('/etc/ssl/certs') }}
SSLVerifyClient optional
SSLVerifyDepth 10
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLOptions +StdEnvVars +ExportCertData
{% endif %}
WSGIScriptAlias / /var/www/cgi-bin/keystone/admin
WSGIProcessGroup keystone
</VirtualHost>