87 lines
2.9 KiB
Plaintext
87 lines
2.9 KiB
Plaintext
<VirtualHost *:80>
|
|
ServerName www.<%= node['app']['domain'] %>
|
|
Redirect permanent / http://<%= node['app']['domain'] %>/
|
|
</VirtualHost>
|
|
|
|
<% if node['web']['do_ssl'] %>
|
|
<VirtualHost *:443>
|
|
ServerName www.<%= node['app']['domain'] %>
|
|
Redirect permanent / https://<%= node['app']['domain'] %>/
|
|
|
|
Include /etc/letsencrypt/options-ssl-apache.conf
|
|
SSLCertificateFile /etc/letsencrypt/live/<%= node['app']['domain'] %>/fullchain.pem
|
|
SSLCertificateKeyFile /etc/letsencrypt/live/<%= node['app']['domain'] %>/privkey.pem
|
|
</VirtualHost>
|
|
|
|
<VirtualHost *:443>
|
|
Include /etc/letsencrypt/options-ssl-apache.conf
|
|
SSLCertificateFile /etc/letsencrypt/live/<%= node['app']['domain'] %>/fullchain.pem
|
|
SSLCertificateKeyFile /etc/letsencrypt/live/<%= node['app']['domain'] %>/privkey.pem
|
|
|
|
<Location /server-status>
|
|
SetHandler server-status
|
|
Order Deny,Allow
|
|
Allow from all
|
|
</Location>
|
|
|
|
<Location /server-info>
|
|
SetHandler server-info
|
|
Order Deny,Allow
|
|
Allow from all
|
|
</Location>
|
|
<% else %>
|
|
<VirtualHost *:80>
|
|
<% end %>
|
|
ServerName <%= node['app']['domain'] %>
|
|
|
|
<IfModule mod_expires.c>
|
|
<FilesMatch "\.(jpe?g|png|gif|js|css)$">
|
|
ExpiresActive On
|
|
ExpiresDefault "access plus 1 week"
|
|
</FilesMatch>
|
|
</IfModule>
|
|
|
|
<% if node['web']['root'] %>
|
|
DocumentRoot <%= node['web']['root'] %>
|
|
<Directory <%= node['web']['root'] %>/>
|
|
Options Indexes FollowSymLinks MultiViews
|
|
AllowOverride None
|
|
Order allow,deny
|
|
allow from all
|
|
</Directory>
|
|
<% end -%>
|
|
|
|
<% if node['web']['static'] %>
|
|
<% node['web']['static'].each do |static| -%>
|
|
Alias <%= static['uri'] %> <%= node['working-dir'] %>/<%= static['path'] %>
|
|
|
|
<% end -%>
|
|
<% end -%>
|
|
|
|
<% if node['web']['wsgi'] %>
|
|
|
|
WSGIDaemonProcess <%= node['app']['name'] %> python-path=<%= node['python']['working-dir'] %> python-home=<%= node['python']['env_path'] %>
|
|
WSGIProcessGroup <%= node['app']['name'] %>
|
|
WSGIScriptAlias / <%= node['working-dir'] %>/<%= node['web']['wsgi']['wsgi_path'] %>
|
|
|
|
<Directory "<%= node['working-dir'] %>">
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<% end %>
|
|
|
|
<% if node['web']['socket.io'] %>
|
|
|
|
# socket.io conf
|
|
RewriteEngine On
|
|
RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
|
|
RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]
|
|
RewriteRule .* ws://<%= node['web']['socket.io']['host']%>:<%= node['web']['socket.io']['port']%>%{REQUEST_URI} [P]
|
|
RewriteCond %{REQUEST_URI} ^/socket.io/$1/websocket [NC]
|
|
RewriteRule socket.io/(.*) ws://<%= node['web']['socket.io']['host']%>:<%= node['web']['socket.io']['port']%>/socket.io/$1 [P,L]
|
|
ProxyPass /socket.io http://<%= node['web']['socket.io']['host']%>:<%= node['web']['socket.io']['port']%>/socket.io
|
|
ProxyPassReverse /socket.io http://<%= node['web']['socket.io']['host']%>:<%= node['web']['socket.io']['port']%>/socket.io
|
|
|
|
<% end %>
|
|
</VirtualHost>
|