source: trunk/packages/sipb-xen-www/files/etc/apache2/sites-available/ssl @ 871

Last change on this file since 871 was 869, checked in by quentin, 16 years ago

Support /overlord as an alternate admin path

File size: 2.2 KB
RevLine 
[509]1<VirtualHost *:443>
[526]2        ServerAdmin xvm@mit.edu
3        ServerName xvm.mit.edu:443
[509]4       
5        DocumentRoot /var/www/sipb-xen-www
6        <Directory /var/www/sipb-xen-www>
7                Options Indexes FollowSymLinks MultiViews ExecCGI
8                AllowOverride None
9                Order allow,deny
10                allow from all
11        </Directory>
12        <Location />
13                Require valid-user
14                AuthType SSLCert
15                AuthSSLCertVar SSL_CLIENT_S_DN_Email
16                AuthSSLCertStripSuffix "@MIT.EDU"
17        </Location>
18
19        RewriteEngine On
[604]20        RewriteRule ^/favicon.ico - [L]
[509]21        RewriteRule ^/static(.*) - [L]
[869]22        RewriteRule ^/overlord/static(.*) /static/$1 [L]
[867]23        RewriteRule ^/admin/static(.*) /static/$1 [L]
[509]24        RewriteRule ^/trac.fcgi(.*) - [L]
25        RewriteRule ^/trac/chrome/common(.*) /usr/share/trac/htdocs$1 [L]
26        RewriteRule ^/trac(.*) /var/www/trac/trac.fcgi$1 [L]
27        RewriteRule ^/var(.*) - [L]
28        RewriteRule ^/wiki(.*) - [L]
[604]29        RewriteRule ^/kill.cgi - [L]
[848]30        RewriteRule ^/~ - [L]
[580]31        RewriteRule ^/(.*) /var/www/sipb-xen-www/main.fcgi/$1 [L]
[509]32
33        RewriteLog /var/log/apache2/rewrite.log
34        RewriteLogLevel 0
35
36        ErrorLog /var/log/apache2/error.log
37
38        # Possible values include: debug, info, notice, warn, error, crit,
39        # alert, emerg.
40        LogLevel warn
41
42        CustomLog /var/log/apache2/ssl_access.log combined
43        ServerSignature On
44
45        SSLEngine on
46
47        SSLCertificateFile ssl/server.crt
48        SSLCertificateKeyFile ssl/server.key
49       
50        SSLCACertificateFile ssl/mitCAclient.pem
[604]51        SSLVerifyClient require
[509]52        SSLVerifyDepth 10
53
54        SSLOptions +StdEnvVars
55       
56        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
57
58
[526]59        Redirect /wiki https://xvm.mit.edu/trac/wiki   
[509]60</VirtualHost>
61
62<VirtualHost *:446>
[526]63        ServerAdmin xvm@mit.edu
64        ServerName xvm.mit.edu:446
[509]65       
66        DocumentRoot /var/www/sipb-xen-www
67        <Directory />
68                Options Indexes FollowSymLinks MultiViews ExecCGI
69                AllowOverride None
70                Order allow,deny
71                allow from all
72        </Directory>
73
74        ErrorLog /var/log/apache2/error.log
75
76        # Possible values include: debug, info, notice, warn, error, crit,
77        # alert, emerg.
78        LogLevel warn
79
80        CustomLog /var/log/apache2/ssl_nocert_access.log combined
81        ServerSignature On
82
83        SSLEngine on
84
85        SSLCertificateFile ssl/server.crt
86        SSLCertificateKeyFile ssl/server.key
87       
88        SSLVerifyClient none
89
90        SSLOptions +StdEnvVars
91       
92        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0       
93</VirtualHost>
Note: See TracBrowser for help on using the repository browser.