ansible/roles/copr/frontend/files/httpd/coprs_ssl.conf
Patrick Uiterwijk d2ec98c7a2 Move COPR to its new home
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-22 01:39:18 +00:00

63 lines
2.1 KiB
Text

<VirtualHost *:443>
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
# Use secure TLSv1.1 and TLSv1.2 ciphers
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
Header always add Strict-Transport-Security "max-age=15768000; preload"
SSLCertificateFile /etc/pki/tls/certs/copr.fedorainfracloud.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/copr.fedorainfracloud.org.key
SSLCertificateChainFile /etc/pki/tls/certs/copr.fedorainfracloud.org.intermediate.crt
ServerName copr.fedorainfracloud.org
WSGIPassAuthorization On
WSGIScriptAlias / /usr/share/copr/coprs_frontend/application
WSGIProcessGroup 127.0.0.1
<Location /api>
WSGIProcessGroup api
</Location>
<Location /backend>
WSGIProcessGroup backend
</Location>
<Location /stats_rcv>
WSGIProcessGroup stats
</Location>
<Location /tmp>
WSGIProcessGroup tmp
</Location>
#ErrorLog logs/error_coprs
#CustomLog logs/access_coprs common
<Directory /usr/share/copr>
WSGIApplicationGroup %{GLOBAL}
Require all granted
</Directory>
RewriteEngine on
RewriteRule ^/coprs/sgallagh/cockpit-preview/repo/(.*)/.*\.repo$ /coprs/g/cockpit/cockpit-preview/repo/$1/ [R=301]
RewriteRule ^/coprs/sgallagh/cockpit-preview/(.*)$ /coprs/g/cockpit/cockpit-preview/$1 [R=301]
</VirtualHost>
<VirtualHost *:443>
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
# Use secure TLSv1.1 and TLSv1.2 ciphers
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
Header always add Strict-Transport-Security "max-age=15768000; preload"
SSLCertificateFile /etc/pki/tls/certs/copr-fe.fedoraproject.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/copr-fe.fedoraproject.org.key
SSLCertificateChainFile /etc/pki/tls/certs/DigiCertCA.crt
ServerName copr-fe.cloud.fedoraproject.org
ServerAlias copr.fedoraproject.org
Redirect 302 / https://copr.fedorainfracloud.org/
</VirtualHost>