]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/roles/files/buildd_master/apache.conf
30cf4861d7f028d73a608e6648341743e32a1820
[dsa-puppet.git] / modules / roles / files / buildd_master / apache.conf
1 <Macro BuilddACL>
2         Order allow,deny
3         # thinks it's a good idea to spider buildd.php - with several hits a second.
4         # -- weasel, Mon, 23 Nov 2009 23:19:48 +0100
5         Deny From 129.128.11.23
6         # ignores robots.txt "Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html)"
7         # -- weasel, Mon, 23 Nov 2009 23:25:13 +0100
8         Deny From 216.129.119.44
9         Allow From all
10 </Macro>
11
12 <VirtualHost *:80>
13         ServerAdmin admin@buildd.debian.org
14         DocumentRoot /srv/buildd.debian.org/web
15         ServerName buildd.debian.org
16         DirectoryIndex index.html index.php index.cgi
17         ErrorLog /var/log/apache2/buildd.debian.org-error.log
18         CustomLog /var/log/apache2/buildd.debian.org-access.log combined
19
20         Redirect permanent / https://buildd.debian.org/
21
22         <Location />
23                 Use BuilddACL
24         </Location>
25 </VirtualHost>
26
27 <VirtualHost *:443>
28         ServerAdmin admin@buildd.debian.org
29         DocumentRoot /srv/buildd.debian.org/web
30         ServerName buildd.debian.org
31         DirectoryIndex index.html index.php index.cgi
32         ErrorLog /var/log/apache2/buildd.debian.org-error.log
33         CustomLog /var/log/apache2/buildd.debian.org-access.log combined
34
35         SSLEngine on
36         SSLCertificateFile /etc/ssl/debian/certs/buildd.debian.org.crt
37         SSLCertificateKeyFile /etc/ssl/private/buildd.debian.org.key
38         SSLCertificateChainFile /etc/ssl/debian/certs/buildd.debian.org.crt-chain
39
40         <Directory /srv/buildd.debian.org/web>
41                 Use BuilddACL
42                 AddHandler cgi-script .cgi
43                 Options +ExecCGI +FollowSymLinks
44
45                 AddHandler fcgid-script .php
46                 FCGIWrapper /usr/bin/php5-cgi .php
47                 <Files *.php>
48                         Options ExecCGI
49                 </Files>
50         </Directory>
51         <Directory /srv/buildd.debian.org/git>
52                 Use BuilddACL
53                 AllowOverride none
54                 Options +FollowSymlinks +Indexes
55         </Directory>
56         <Directory /srv/buildd.debian.org/etc/packages-arch-specific/checkout/>
57                 Use BuilddACL
58                 AllowOverride none
59                 Options +FollowSymlinks +Indexes
60         </Directory>
61
62         Alias /git/ /srv/buildd.debian.org/git/
63         Alias /quinn-diff/ /srv/buildd.debian.org/etc/packages-arch-specific/checkout/
64         Alias /apt/ /srv/buildd.debian.org/ftp-archive/archive/
65
66         RewriteEngine on
67         RewriteRule ^/\.git$ - [L]
68         RewriteRule ^/stats$ - [L]
69
70         RewriteRule ^/fetch\.(cgi|php)(.*)$ /status/fetch.php$2 [L,R,NE]
71         RewriteRule ^/pkg\.cgi(.*)$ /status/package.php$1 [L,R,NE]
72         RewriteRule ^/bymaint\.php(.*)$ /status/package.php$1 [L,R,NE]
73         RewriteRule ^/build\.(php|cgi)(.*)$ /status/logs.php$2 [L,R,NE]
74         RewriteRule ^/[^/]+\.(cgi|php|html|txt|ico|css)$ - [L]
75
76         RewriteRule ^/([^/]+\@.+)$ /status/package.php?p=$1 [L,R,B,NE]
77         RewriteRule ^/([-+A-Za-z0-9.]+)$ /status/package.php?p=$1 [L,R,B,NE]
78
79         <Location />
80                 Use BuilddACL
81         </Location>
82 </VirtualHost>
83
84 # vim:set syn=apache:
85