apache/unfold.conf

   1 <VirtualHost *:80>
   2         WSGIDaemonProcess unfold processes=2 threads=25
   3         WSGIProcessGroup  unfold
   4         CustomLog ${APACHE_LOG_DIR}/unfold-access.log common
   5         ErrorLog ${APACHE_LOG_DIR}/unfold-error.log
   6         WSGIScriptAlias / /usr/share/unfold/apache/unfold.wsgi
   7         <Directory /usr/share/unfold/apache/>
   8         <Files unfold.wsgi>
   9         Order deny,allow
  10         Allow from all
  11         </Files>
  12         </Directory>
  13         Alias /static/ /usr/share/unfold/static/
  14         <Directory /usr/share/unfold/static>
  15         Order deny,allow
  16         Allow from all
  17         </Directory>
  18 </VirtualHost>
  19
  20 # This port (not necessarily well picked) is configured
  21 # with client-certificate required
  22 # corresponding trusted roots (e.g. ple.gid and plc.gid) should be
  23 # configured in /etc/unfold/trusted_roots
  24 # check Jordan's email and pointer to trac, although we do not want
  25 # this to be optional on that port
  26
  27 <VirtualHost *:443>
  28         WSGIDaemonProcess unfold-ssl processes=2 threads=25
  29         WSGIProcessGroup  unfold-ssl
  30         CustomLog ${APACHE_LOG_DIR}/myslice-ssl-access.log common
  31         ErrorLog ${APACHE_LOG_DIR}/myslice-ssl-error.log
  32         WSGIScriptAlias / /usr/share/unfold/apache/unfold.wsgi
  33         <Directory /usr/share/unfold/apache/>
  34         <Files unfold.wsgi>
  35         Order deny,allow
  36         Allow from all
  37         </Files>
  38         </Directory>
  39         Alias /static/ /usr/share/unfold/static/
  40         <Directory /usr/share/unfold/static>
  41         Order deny,allow
  42         Allow from all
  43         </Directory>
  44
  45         SSLEngine on
  46         SSLVerifyClient require
  47         SSLVerifyDepth 5
  48 # make this a symlink to /etc/sfa/trusted_roots if that makes sense in your env.
  49         SSLCACertificatePath /etc/unfold/trusted_roots
  50 # see init-ssl.sh for how to create self-signed stuff in here
  51         SSLCertificateFile    /etc/unfold/myslice.cert
  52         SSLCertificateKeyFile /etc/unfold/myslice.key
  53
  54 #       SSLOptions +StdEnvVars +ExportCertData
  55         SSLOptions +StdEnvVars
  56 </VirtualHost>