%
from invirt.config import structs as cfg
hostname = cfg.web.hostname
errmail = cfg.web.errormail
tracuri = cfg.trac.uri
%>
ServerAdmin ${errmail}
ServerName ${hostname}:443
DocumentRoot /var/www/sipb-xen-www
Options Indexes FollowSymLinks MultiViews ExecCGI
AllowOverride None
Order allow,deny
allow from all
Require valid-user
AuthType SSLCert
AuthSSLCertVar SSL_CLIENT_S_DN_Email
AuthSSLCertStripSuffix "@MIT.EDU"
RewriteEngine On
RewriteRule ^/favicon.ico - [L]
RewriteRule ^/static(.*) - [L]
RewriteRule ^/overlord/static(.*) /static/$1 [L]
RewriteRule ^/admin/static(.*) /static/$1 [L]
RewriteRule ^/trac.fcgi(.*) - [L]
RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
RewriteRule ^/var(.*) - [L]
RewriteRule ^/wiki(.*) - [L]
RewriteRule ^/kill.cgi - [L]
RewriteRule ^/~ - [L]
RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/$1 [L]
RewriteLog /var/log/apache2/rewrite.log
RewriteLogLevel 0
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/ssl_access.log combined
ServerSignature On
SSLEngine on
SSLCertificateFile ssl/server.crt
SSLCertificateKeyFile ssl/server.key
SSLCACertificateFile ssl/mitCAclient.pem
SSLVerifyClient require
SSLVerifyDepth 10
SSLOptions +StdEnvVars
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
Redirect /wiki ${tracuri}
ServerAdmin ${errmail}
ServerName ${hostname}:446
DocumentRoot /var/www/sipb-xen-www
Options Indexes FollowSymLinks MultiViews ExecCGI
AllowOverride None
Order allow,deny
allow from all
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/ssl_nocert_access.log combined
ServerSignature On
SSLEngine on
SSLCertificateFile ssl/server.crt
SSLCertificateKeyFile ssl/server.key
SSLVerifyClient none
SSLOptions +StdEnvVars
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0