diff --git a/roles/copr/frontend/files/httpd/coprs_ssl.conf b/roles/copr/frontend/files/httpd/coprs_ssl.conf index 6b6632a605..da6975dd67 100644 --- a/roles/copr/frontend/files/httpd/coprs_ssl.conf +++ b/roles/copr/frontend/files/httpd/coprs_ssl.conf @@ -12,6 +12,52 @@ ServerName copr-fe.cloud.fedoraproject.org:443 + # Redirect once the other url is confirmed working + #Redirect 301 / https://copr.fedorainfracloud.org/ + WSGIPassAuthorization On + WSGIScriptAlias / /usr/share/copr/coprs_frontend/application + WSGIProcessGroup 127.0.0.1 + + + WSGIProcessGroup api + + + WSGIProcessGroup backend + + + WSGIProcessGroup stats + + + WSGIProcessGroup tmp + + + #ErrorLog logs/error_coprs + #CustomLog logs/access_coprs common + + + WSGIApplicationGroup %{GLOBAL} + Require all granted + + + RewriteEngine on + RewriteRule ^/coprs/sgallagh/cockpit-preview/repo/(.*)/.*\.repo$ /coprs/g/cockpit/cockpit-preview/repo/$1/ [R=301] + RewriteRule ^/coprs/sgallagh/cockpit-preview/(.*)$ /coprs/g/cockpit/cockpit-preview/$1 [R=301] + + + + SSLEngine on + SSLProtocol all -SSLv2 -SSLv3 + # Use secure TLSv1.1 and TLSv1.2 ciphers + SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5 + SSLHonorCipherOrder on + Header always add Strict-Transport-Security "max-age=15768000; preload" + + SSLCertificateFile /etc/pki/tls/certs/copr.fedorainfracloud.org.crt + SSLCertificateKeyFile /etc/pki/tls/private/copr.fedorainfracloud.org.key + SSLCertificateChainFile /etc/pki/tls/certs/copr.fedorainfracloud.org.intermediate.crt + + ServerName copr.fedorainfracloud.org + WSGIPassAuthorization On WSGIScriptAlias / /usr/share/copr/coprs_frontend/application WSGIProcessGroup 127.0.0.1