X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=apache%2Fmyslice.conf;h=c994af369aff4f4d6285decc82bb3bdb799dbf66;hb=8be9b358a544e1ea9e53ad40495fa42e9d5edf9a;hp=581b559c779c6a77b852a711f6aa7171f9d1c9a6;hpb=2404a7633cc73ab9efbd316d033507980b127b6f;p=myslice.git
diff --git a/apache/myslice.conf b/apache/myslice.conf
index 581b559c..c994af36 100644
--- a/apache/myslice.conf
+++ b/apache/myslice.conf
@@ -1,25 +1,50 @@
-## better use
-# https://docs.djangoproject.com/en/1.5/howto/deployment/wsgi/modwsgi/
-# instead
-#
-# XXX this is very rough, was just pasted from the (wrong) web page
-# and never tested, so feel free to rewrite completely if that sounds right
-#
-#Alias /robots.txt /usr/share/myslice/static/robots.txt
-Alias /favicon.ico /usr/share/unfold/static/favicon.ico
+# xxx it might be smarter to install wsgi.py in some other location
+# so we don't have to hard-wire these paths here
+
+ WSGIScriptAlias / /usr/lib/python2.7/dist-packages/myslice/wsgi.py
+
+
+ Order deny,allow
+ Allow from all
+
+
+ Alias /static/ /usr/share/unfold/static/
+
+ Order deny,allow
+ Allow from all
+
+
-#AliasMatch ^/([^/]*\.css) /usr/share/myslice/static/styles/$1
+# This port (not necessarily well picked) is configured
+# with client-certificate required
+# corresponding trusted roots (e.g. ple.gid and plc.gid) should be
+# configured in /etc/unfold/trusted_roots
+# check Jordan's email and pointer to trac, although we do not want
+# this to be optional on that port
-Alias /static/ /usr/share/unfold/static/
+
+ WSGIScriptAlias / /usr/lib/python2.7/dist-packages/myslice/wsgi.py
+
+
+ Order deny,allow
+ Allow from all
+
+
+ Alias /static/ /usr/share/unfold/static/
+
+ Order deny,allow
+ Allow from all
+
-
-Order deny,allow
-Allow from all
-
+ SSLEngine on
+ SSLVerifyClient require
+ SSLVerifyDepth 5
+# make this a symlink to /etc/sfa/trusted_roots if that makes sense in your env.
+ SSLCACertificatePath /etc/unfold/trusted_roots
+# see init-ssl.sh for how to create self-signed stuff in here
+ SSLCertificateFile /etc/unfold/myslice.cert
+ SSLCertificateKeyFile /etc/unfold/myslice.key
-WSGIScriptAlias / /usr/share/unfold/apache/myslice.wsgi
-
-
-Order allow,deny
-Allow from all
-
+# SSLOptions +StdEnvVars +ExportCertData
+ SSLOptions +StdEnvVars
+