X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=apache%2Fmyslice.conf;h=8ee84d0fba9b75b2ed6baa7864ee5ff5d7812e5e;hb=c22a2a779edb285797b4b0a7b6297181f2165c05;hp=9e8a155165f58a46501823cfba4438ea22238f1f;hpb=8bfd19e0841658b5e221e903d5596aca72470721;p=myslice.git
diff --git a/apache/myslice.conf b/apache/myslice.conf
index 9e8a1551..8ee84d0f 100644
--- a/apache/myslice.conf
+++ b/apache/myslice.conf
@@ -1,5 +1,39 @@
+# xxx it might be smarter to install wsgi.py in some other location
+# so we don't have to hard-wire these paths here
+# xxx it might also be helpful to set up a specific log channel for this
+# e.g. in /var/log/myslice.log
- WSGIScriptAlias / /usr/share/unfold/apache/myslice.wsgi
+ WSGIDaemonProcess myslice processes=2 threads=25
+ WSGIProcessGroup myslice
+ CustomLog ${APACHE_LOG_DIR}/myslice-access.log common
+ ErrorLog ${APACHE_LOG_DIR}/myslice-error.log
+ WSGIScriptAlias / /usr/lib/python2.7/dist-packages/myslice/wsgi.py
+
+
+ Order deny,allow
+ Allow from all
+
+
+ Alias /static/ /usr/share/unfold/static/
+
+ Order deny,allow
+ Allow from all
+
+
+
+# This port (not necessarily well picked) is configured
+# with client-certificate required
+# corresponding trusted roots (e.g. ple.gid and plc.gid) should be
+# configured in /etc/unfold/trusted_roots
+# check Jordan's email and pointer to trac, although we do not want
+# this to be optional on that port
+
+
+ WSGIDaemonProcess myslice-ssl processes=2 threads=25
+ WSGIProcessGroup myslice-ssl
+ CustomLog ${APACHE_LOG_DIR}/myslice-ssl-access.log common
+ ErrorLog ${APACHE_LOG_DIR}/myslice-ssl-error.log
+ WSGIScriptAlias / /usr/lib/python2.7/dist-packages/myslice/wsgi.py
Order deny,allow
@@ -11,4 +45,16 @@
Order deny,allow
Allow from all
+
+ SSLEngine on
+ SSLVerifyClient require
+ SSLVerifyDepth 5
+# make this a symlink to /etc/sfa/trusted_roots if that makes sense in your env.
+ SSLCACertificatePath /etc/unfold/trusted_roots
+# see init-ssl.sh for how to create self-signed stuff in here
+ SSLCertificateFile /etc/unfold/myslice.cert
+ SSLCertificateKeyFile /etc/unfold/myslice.key
+
+# SSLOptions +StdEnvVars +ExportCertData
+ SSLOptions +StdEnvVars