modules/roles/files/jenkins/jenkins.debian.org

   1 Use common-debian-service-https-redirect * jenkins.debian.org
   2
   3 <VirtualHost *:443>
   4         ServerName jenkins.debian.org
   5         ServerAdmin debian-admin@lists.debian.org
   6
   7         Use common-debian-service-ssl jenkins.debian.org
   8         Use common-ssl-HSTS
   9
  10         SSLCACertificateFile /var/lib/dsa/sso/ca.crt
  11         SSLCARevocationCheck chain
  12         SSLCARevocationFile /var/lib/dsa/sso/ca.crl
  13         SSLVerifyClient optional
  14
  15         SSLOptions +StdEnvVars
  16
  17         <IfModule mod_userdir.c>
  18                 UserDir disabled
  19         </IfModule>
  20         ErrorLog /var/log/apache2/jenkins.debian.org-error.log
  21         CustomLog /var/log/apache2/jenkins.debian.org-access.log privacy
  22         ServerSignature On
  23         <IfModule mod_proxy.c>
  24                 RequestHeader unset X-Forwarded-User
  25                 RequestHeader set X-Forwarded-User "%{SSL_CLIENT_S_DN_CN}e" env=SSL_CLIENT_S_DN_CN
  26                 <Proxy *>
  27                         Order deny,allow
  28                         Allow from all
  29                 </Proxy>
  30                 AllowEncodedSlashes NoDecode
  31                 ProxyPass / http://127.0.0.1:8080/ retry=15 nocanon
  32                 ProxyPassReverse / http://127.0.0.1:8080/
  33                 ProxyPassReverse / http://jenkins.debian.org/
  34                 ProxyRequests     Off
  35                 ProxyPreserveHost on
  36                 RequestHeader set X-Forwarded-Proto "https"
  37                 RequestHeader set X-Forwarded-Port "443"
  38         </IfModule>
  39 </VirtualHost>
  40