a-plus/doc/apache2/aplus-apache2.conf at master · lainets/a-plus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
<VirtualHost *:80>
	ServerAdmin webmaster@__HOSTNAME__

	RewriteEngine on
	RewriteCond %{SERVER_PORT} ^80$
	RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [L,R]

	ErrorLog ${APACHE_LOG_DIR}/error.log
	CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>


<IfModule mod_ssl.c>
<VirtualHost *:443>
	ServerAdmin webmaster@__HOSTNAME__
	ServerName __HOSTNAME__
	UseCanonicalName On

	LogLevel warn
	ErrorLog ${APACHE_LOG_DIR}/ssl_error.log
	CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined

	SSLEngine on
	SSLCertificateFile       /etc/ssl/certs/ssl-cert-snakeoil.pem
	SSLCertificateKeyFile    /etc/ssl/private/ssl-cert-snakeoil.key
	#SSLCertificateChainFile /etc/ssl/private/CAchain.pem

	# Static files served by Apache.
	Alias /static/ /srv/aplus/a-plus/static/
	Alias /favicon.ico /srv/aplus/a-plus/static/favicons/favicon.ico
	AliasMatch ^/media/public/(.*)$ /srv/aplus/a-plus/media/public/$1
	<Directory /srv/aplus/a-plus/static/>
		Options FollowSymLinks
		Require all granted
	</Directory>
	<Directory /srv/aplus/a-plus/media/public/>
		Options FollowSymLinks
		Require all granted
	</Directory>

	# Mapping to Python WSGI server.
	<Location />
		DirectoryIndex disabled
		Options -Indexes
		Options FollowSymLinks
		SetHandler uwsgi-handler
		uWSGISocket /run/aplus/web-uwsgi.socket
		uWSGIMaxVars 256
	</Location>
	<Location /api/>
		DirectoryIndex disabled
		Options -Indexes
		Options FollowSymLinks
		SetHandler uwsgi-handler
		uWSGISocket /run/aplus/api-uwsgi.socket
		uWSGIForceScriptName /
		uWSGIMaxVars 256
	</Location>
	<Location /static/>
		SetHandler None
	</Location>
	<Location /favicon.ico>
		SetHandler None
	</Location>
	<Location /media/public/>
		SetHandler None
	</Location>

	# Mapping and authentication for Shibboleth middleware.
	<IfModule mod_shib>
		<Location /Shibboleth.sso>
			SetHandler shib
		</Location>
		<Location /shibboleth>
			AuthType shibboleth
			Require valid-user
			ShibRequireSession On
		</Location>
		<Location /accounts/login>
			AuthType shibboleth
			Require shibboleth
		</Location>
	</IfModule>

</VirtualHost>
</IfModule>