diff --git a/roles/pagure/frontend/templates/0_pagure.conf b/roles/pagure/frontend/templates/0_pagure.conf index 55c997c1ce..b8561bda0d 100644 --- a/roles/pagure/frontend/templates/0_pagure.conf +++ b/roles/pagure/frontend/templates/0_pagure.conf @@ -1,3 +1,11 @@ +WSGISocketPrefix run/wsgi +#WSGIRestrictStdout On +WSGIRestrictSignal Off +WSGIPythonOptimize 1 +WSGIPassAuthorization On +WSGIDaemonProcess pagure user=git group=git maximum-requests=1000 +display-name=pagure processes=4 threads=4 inactivity-timeout=300 + {% if env == 'pagure-staging' %} ServerName stg.pagure.io @@ -8,24 +16,6 @@ {% endif %} - - ServerName pagure.io:443 - - WSGIScriptAlias / /var/www/pagure.wsgi - - SSLEngine on - SSLProtocol all -SSLv2 -SSLv3 - # Use secure TLSv1.1 and TLSv1.2 ciphers - Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" - - SSLCertificateFile /etc/pki/tls/certs/pagure.io.cert - SSLCertificateChainFile /etc/pki/tls/certs/pagure.io.intermediate.cert - SSLCertificateKeyFile /etc/pki/tls/certs/pagure.io.key - - - -#TODO: move this to 443 when we have the ssl certs - {% if env == 'pagure-staging' %} ServerName docs.stg.pagure.org @@ -35,5 +25,85 @@ WSGIScriptAlias / /var/www/docs_pagure.wsgi + WSGIScriptAlias / /var/www/docs_pagure.wsgi + + Alias /static /usr/lib/python2.7/site-packages/pagure/static/ + + + WSGIProcessGroup pagure + + # Apache 2.4 + Require all granted + + + # Apache 2.2 + Order deny,allow + Allow from all + + + + + +{% if env == 'pagure-staging' %} + ServerName stg.pagure.io +{% else %} + ServerName pagure.io +{% endif %} + + WSGIScriptAlias / /var/www/pagure.wsgi + + SSLEngine on + SSLProtocol all -SSLv2 -SSLv3 + # Use secure TLSv1.1 and TLSv1.2 ciphers + Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" + + SSLCertificateFile /etc/pki/tls/certs/pagure.io.cert + SSLCertificateChainFile /etc/pki/tls/certs/pagure.io.intermediate.cert + SSLCertificateKeyFile /etc/pki/tls/certs/pagure.io.key + + Alias /static /usr/lib/python2.7/site-packages/pagure/static/ + Alias /releases /var/www/releases + + SetEnv GIT_PROJECT_ROOT /srv/git/repositories + + AliasMatch ^/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$ /srv/git/repositories/$1 + AliasMatch ^/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/git/repositories/$1 + ScriptAliasMatch \ + "(?x)^/(.*/(HEAD | \ + info/refs | \ + objects/info/[^/]+ | \ + git-(upload|receive)-pack))$" \ + /usr/libexec/git-core/git-http-backend/$1 + + + WSGIProcessGroup pagure + + # Apache 2.4 + Require all granted + + + # Apache 2.2 + Order deny,allow + Allow from all + + + + + WSGIProcessGroup pagure + + # Apache 2.4 + Require all granted + + + # Apache 2.2 + Order deny,allow + Allow from all + + + + + Options +Indexes + + diff --git a/roles/pagure/frontend/templates/pagure.conf b/roles/pagure/frontend/templates/pagure.conf deleted file mode 100644 index b5a4429e05..0000000000 --- a/roles/pagure/frontend/templates/pagure.conf +++ /dev/null @@ -1,53 +0,0 @@ -Alias /static /usr/lib/python2.7/site-packages/pagure/static/ -Alias /releases /var/www/releases - -SetEnv GIT_PROJECT_ROOT /srv/git/repositories - -AliasMatch ^/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$ /srv/git/repositories/$1 -AliasMatch ^/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/git/repositories/$1 -ScriptAliasMatch \ - "(?x)^/(.*/(HEAD | \ - info/refs | \ - objects/info/[^/]+ | \ - git-(upload|receive)-pack))$" \ - /usr/libexec/git-core/git-http-backend/$1 - - - -WSGIDaemonProcess pagure user=git group=git maximum-requests=1000 display-name=pagure processes=4 threads=4 inactivity-timeout=300 - -WSGISocketPrefix run/wsgi -#WSGIRestrictStdout On -WSGIRestrictSignal Off -WSGIPythonOptimize 1 -WSGIPassAuthorization On - - - WSGIProcessGroup pagure - - # Apache 2.4 - Require all granted - - - # Apache 2.2 - Order deny,allow - Allow from all - - - - - WSGIProcessGroup pagure - - # Apache 2.4 - Require all granted - - - # Apache 2.2 - Order deny,allow - Allow from all - - - - - Options +Indexes -