diff options
Diffstat (limited to 'templates/01_openbook.conf')
| -rw-r--r-- | templates/01_openbook.conf | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/templates/01_openbook.conf b/templates/01_openbook.conf new file mode 100644 index 0000000..441f67a --- /dev/null +++ b/templates/01_openbook.conf @@ -0,0 +1,33 @@ +{% set hostname = ansible_nodename + '.' + fqdn %} +{% set ssl_ca = '' %} +{% set ssl_cert_hostname = 'SSLCertificateFile "/etc/ssl/certs/' + hostname + '.crt"' %} +{% set ssl_key_hostname = 'SSLCertificateKeyFile "/etc/ssl/private/' + hostname + '.key"' %} + +<VirtualHost *:80> + Header edit Location ^http://(.*)\$ https://\$1 + ServerName {{ hostname }} + ServerAdmin carlos.konstanski@verizonwireless.com + ProxyPreserveHost On + ProxyPass /Openbook http://127.0.0.1:8080/Openbook + ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook + RedirectMatch "^/$" "/Openbook" +</VirtualHost> + +<VirtualHost *:443> + Header edit Location ^http://(.*)\$ https://\$1 + ServerName {{ hostname }} + ServerAdmin carlos.konstanski@verizonwireless.com + SSLEngine on + {{ ssl_ca }} + {{ ssl_cert_hostname }} + {{ ssl_key_hostname }} + SSLOptions StrictRequire + SSLProtocol TLSv1 TLSv1.1 TLSv1.2 + SSLCipherSuite AES128+EECDH:AES128+EDH + SSLHonorCipherOrder on + SSLCompression off + ProxyPreserveHost On + ProxyPass /Openbook http://127.0.0.1:8080/Openbook + ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook + RedirectMatch "^/$" "/Openbook" +</VirtualHost> |