Merge branch 'master' of ssh://git.onelab.eu/git/myslice
[unfold.git] / apache / unfold.conf
1 <VirtualHost *:80>
2         WSGIDaemonProcess unfold processes=2 threads=25
3         WSGIProcessGroup  unfold
4         CustomLog ${APACHE_LOG_DIR}/unfold-access.log common
5         ErrorLog ${APACHE_LOG_DIR}/unfold-error.log
6         WSGIScriptAlias / /usr/share/unfold/apache/unfold.wsgi
7         <Directory /usr/share/unfold/apache/>
8         <Files unfold.wsgi>
9         Order deny,allow
10         Allow from all
11         </Files>
12         </Directory>
13         Alias /static/ /usr/share/unfold/static/
14         <Directory /usr/share/unfold/static>
15         Order deny,allow
16         Allow from all
17         </Directory>
18 </VirtualHost>
19
20 # This port (not necessarily well picked) is configured 
21 # with client-certificate required
22 # corresponding trusted roots (e.g. ple.gid and plc.gid) should be 
23 # configured in /etc/unfold/trusted_roots
24 # check Jordan's email and pointer to trac, although we do not want 
25 # this to be optional on that port
26
27 <VirtualHost *:443>
28         WSGIDaemonProcess unfold-ssl processes=2 threads=25
29         WSGIProcessGroup  unfold-ssl
30         CustomLog ${APACHE_LOG_DIR}/myslice-ssl-access.log common
31         ErrorLog ${APACHE_LOG_DIR}/myslice-ssl-error.log
32         WSGIScriptAlias / /usr/share/unfold/apache/unfold.wsgi
33         <Directory /usr/share/unfold/apache/>
34         <Files unfold.wsgi>
35         Order deny,allow
36         Allow from all
37         </Files>
38         </Directory>
39         Alias /static/ /usr/share/unfold/static/
40         <Directory /usr/share/unfold/static>
41         Order deny,allow
42         Allow from all
43         </Directory>
44
45         SSLEngine on
46         SSLVerifyClient require
47         SSLVerifyDepth 5
48 # make this a symlink to /etc/sfa/trusted_roots if that makes sense in your env.
49         SSLCACertificatePath /etc/unfold/trusted_roots
50 # see init-ssl.sh for how to create self-signed stuff in here
51         SSLCertificateFile    /etc/unfold/myslice.cert
52         SSLCertificateKeyFile /etc/unfold/myslice.key
53
54 #       SSLOptions +StdEnvVars +ExportCertData
55         SSLOptions +StdEnvVars
56 </VirtualHost>