psf-salt/salt/moin/configs/wiki.python.org.conf at 4428512117424622e35c52cdf3ef63b5b68e57e2 · python/psf-salt · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
<VirtualHost _default_:9000>
    ServerName moin.psf.io
    ServerAlias wiki.python.org
    ServerAlias wiki.jython.org
    ServerAlias moin.nyc1.psf.io

    ServerAdmin webmaster@python.org
    DocumentRoot /data/www/wiki

    # SSL settings
    SSLEngine on
    SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
    SSLProtocol +TLSv1.2
    SSLCertificateKeyFile /etc/ssl/private/moin.psf.io.pem
    SSLCertificateFile /etc/ssl/private/moin.psf.io.pem
    #SSLCertificateKeyFile /etc/lego/certificates/wiki.python.org.key
    #SSLCertificateFile /etc/lego/certificates/wiki.python.org.crt
    #SSLCertificateChainFile /etc/lego/certificates/wiki.python.org.issuer.crt

    LogFormat "%h %l %u %t \"%r\" %>s %O %D \"%{Referer}i\" \"%{User-Agent}i\"" psf_moin

    CustomLog /var/log/apache2/wiki.access.log psf_moin
    ErrorLog /var/log/apache2/wiki.error.log
    #LogLevel info
    LogLevel error

    <Directory /srv/moin>
        Require all granted
    </Directory>
    <Directory /data>
        Require all granted
    </Directory>

    RemoteIPHeader X-Forwarded-For
    RemoteIPInternalProxy 127.0.0.1
    RemoteIPInternalProxy {{ pillar["psf_internal_network"] }}

    Alias /wiki/python /data/moin/europython
    Alias /wiki/europython /data/moin/europython
    Alias /wiki /srv/moin/venv/lib/python2.7/site-packages/MoinMoin/web/static/htdocs
    Alias /common /srv/moin/venv/lib/python2.7/site-packages/MoinMoin/web/static/htdocs/common

    WSGIDaemonProcess moin processes=8 request-timeout=60 maximum-requests=100 restart-interval=600 graceful-timeout=45 display-name=wsgi-moin user=moin group=moin python-path=/srv/moin/venv/lib/python2.7/site-packages
    WSGIProcessGroup moin

    SetEnvIf User-Agent SeznamBot bad_ua

    <Location />
        # Spammers
        # deny from xxx.xxx.xxx.xxx
        deny from env=bad_ua
    </Location>

    <Location /server-status>
        SetHandler server-status
        Require local
    </Location>

    WSGIScriptAlias /moin /srv/moin/moin.wsgi
    <Location /moin>
        # Spammers
        # deny from xxx.xxx.xxx.xxx
        deny from env=bad_ua
    </Location>

    WSGIScriptAlias /psf /srv/moin/moin.wsgi
    <Location /psf>
        # Spammers
        # deny from xxx.xxx.xxx.xxx
        deny from env=bad_ua
    </Location>

    WSGIScriptAlias /jython /srv/moin/moin.wsgi
    <Location /jython>
        # Spammers
        # deny from xxx.xxx.xxx.xxx
        deny from env=bad_ua
    </Location>

</VirtualHost>