summaryrefslogtreecommitdiff
path: root/files/apache/android-review.linaro.org.conf
blob: 340ea3dc0e59cdfee569e7761768035e68043a7e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
<VirtualHost *:80>
	ServerName android-review.linaro.org
	{% if ssl_cert is defined %}

	RedirectMatch permanent "^/(?!\.well-known/acme-challenge)(.*)" "https://{{hostname}}/$1"

	{% else %}

	DocumentRoot    /srv/gerrit

	CustomLog /var/log/apache2/android-review.linaro.org-access.log combined
	ErrorLog /var/log/apache2/android-review.linaro.org-error.log

	ExpiresActive   On
	ExpiresDefault  "access plus 0 seconds"

	ExpiresByType   text/css        "access plus 1 week"
	ExpiresByType   text/javascript "access plus 1 week"
	ExpiresByType   image/png       "access plus 1 month"
	ExpiresByType   image/jpg       "access plus 1 month"
	ExpiresByType   image/jpeg      "access plus 1 month"
	ExpiresByType   image/x-icon    "access plus 1 month"

	Header append Cache-Control "no-transform"

	<FilesMatch "\.(html|htm)$">
        	Header add Cache-Control "must-revalidate"
	</FilesMatch>

	<FilesMatch "\.(js|css)$">
        	Header add Cache-Control "max-age=604800"
	        <ifModule mod_deflate.c>
        	        SetOutputFilter DEFLATE
	        </ifModule>
	</FilesMatch>

	RequestHeader set X-Forwarded-Scheme http

	ProxyRequests Off
	ProxyVia Off
	ProxyPreserveHost On
	<Proxy *>
		Order deny,allow
		Allow from all
	</Proxy>

	AllowEncodedSlashes On
	ProxyPass	/	http://127.0.0.1:8080/ nocanon
	{% endif %}

    RewriteEngine On
    Include /etc/apache2/linaro/block-refs.conf
    Include /etc/apache2/linaro/letsencrypt.conf
</VirtualHost>

{% if ssl_cert is defined %}
<VirtualHost *:443>
	ServerName android-review.linaro.org

        Include /etc/apache2/linaro/settings-ssl.conf
	SSLCertificateFile {{ssl_cert}}
	SSLCertificateKeyFile {{ssl_key}}
	{% if ssl_ca is defined -%}
	SSLCACertificateFile {{ssl_ca}}
	{%- endif %}

	DocumentRoot /srv/gerrit

	CustomLog /var/log/apache2/android-review.linaro.org-access.log combined
	ErrorLog /var/log/apache2/android-review.linaro.org-error.log

	ExpiresActive   On
	ExpiresDefault  "access plus 0 seconds"

	ExpiresByType   text/css        "access plus 1 week"
	ExpiresByType   text/javascript "access plus 1 week"
	ExpiresByType   image/png       "access plus 1 month"
	ExpiresByType   image/jpg       "access plus 1 month"
	ExpiresByType   image/jpeg      "access plus 1 month"
	ExpiresByType   image/x-icon    "access plus 1 month"

	Header append Cache-Control "no-transform"

	<FilesMatch "\.(html|htm)$">
        	Header add Cache-Control "must-revalidate"
	</FilesMatch>

	<FilesMatch "\.(js|css)$">
        	Header add Cache-Control "max-age=604800"
	        <ifModule mod_deflate.c>
        	        SetOutputFilter DEFLATE
	        </ifModule>
	</FilesMatch>

	RequestHeader set X-Forwarded-Scheme http

	ProxyRequests Off
	ProxyVia Off
	ProxyPreserveHost On
	<Proxy *>
		Order deny,allow
		Allow from all
	</Proxy>

	AllowEncodedSlashes On
	ProxyPass	/	http://127.0.0.1:8080/ nocanon

    RewriteEngine On
    Include /etc/apache2/linaro/block-refs.conf
</VirtualHost>
{% endif %}