mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-30 05:20:49 +08:00
67 lines
1.8 KiB
Plaintext
67 lines
1.8 KiB
Plaintext
Alias /repo/ /srv/cache/lookaside/
|
|
|
|
# default SSL configuration...
|
|
Listen 443
|
|
|
|
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
|
|
SSLSessionCacheTimeout 300
|
|
|
|
Mutex default
|
|
|
|
SSLRandomSeed startup file:/dev/urandom 256
|
|
SSLRandomSeed connect builtin
|
|
SSLCryptoDevice builtin
|
|
|
|
<VirtualHost _default_:80>
|
|
ServerName pkgs.{{ env_suffix }}fedoraproject.org
|
|
#Redirect "/" "https://src{{ env_suffix }}.fedoraproject.org/"
|
|
# This is temporary for fixing Kojid because of firewall rules
|
|
Alias /repo/ /srv/cache/lookaside/
|
|
</VirtualHost>
|
|
|
|
<VirtualHost _default_:443>
|
|
# This alias must come before the /repo/ one to avoid being overridden.
|
|
ScriptAlias /repo/pkgs/upload.cgi /srv/web/upload.cgi
|
|
|
|
Alias /repo/ /srv/cache/lookaside/
|
|
ServerName pkgs{{ env_suffix }}.fedoraproject.org
|
|
ServerAdmin webmaster@fedoraproject.org
|
|
|
|
SSLEngine on
|
|
|
|
SSLCertificateFile conf/pkgs.fedoraproject.org_key_and_cert.pem
|
|
SSLCertificateKeyFile conf/pkgs.fedoraproject.org_key_and_cert.pem
|
|
SSLCACertificateFile conf/cacert.pem
|
|
SSLCARevocationFile /etc/pki/tls/crl.pem
|
|
|
|
SSLProtocol {{ ssl_protocols }}
|
|
SSLCipherSuite {{ ssl_ciphers }}
|
|
|
|
Redirect "/" "https://src{{ env_suffix }}.fedoraproject.org/"
|
|
</VirtualHost>
|
|
|
|
# Allow upload via src
|
|
<VirtualHost _default_:80>
|
|
# This alias must come before the /repo/ one to avoid being overridden.
|
|
ScriptAlias /repo/pkgs/upload.cgi /srv/web/upload.cgi
|
|
|
|
Alias /repo/ /srv/cache/lookaside/
|
|
ServerName src{{ env_suffix }}.fedoraproject.org
|
|
ServerAdmin webmaster@fedoraproject.org
|
|
|
|
ErrorLog logs/ssl_error_log
|
|
|
|
<Location /repo/pkgs/upload.cgi>
|
|
Options +ExecCGI
|
|
|
|
AuthType GSSAPI
|
|
GssapiSSLonly Off
|
|
AuthName "GSSAPI Single Sign On Login"
|
|
GssapiCredStore keytab:/etc/httpd.keytab
|
|
|
|
Require valid-user
|
|
</Location>
|
|
|
|
</VirtualHost>
|
|
|