Chris@1570: 
Chris@1570: # A test Apache config. Lacks SSL, lacks a desirable extra layer of
Chris@1570: # authentication for admin interface paths. Do not deploy this.
Chris@1570: 
Chris@1593: # Note this has been updated for Apache 2.4, which introduced a number
Chris@1593: # of (welcome) changes to access control directives.
Chris@1593: 
Chris@1570: PerlLoadModule Apache::Authn::SoundSoftware
Chris@1570: 
Chris@1570: <VirtualHost *:80>
Chris@1570:         ServerName code.soundsoftware.ac.uk
Chris@1570:         ServerAdmin chris.cannam@soundsoftware.ac.uk
Chris@1570: 
Chris@1570:         DocumentRoot /var/www/code/public
Chris@1570:         PassengerRestartDir restart_files
Chris@1570:         PassengerHighPerformance on
Chris@1570:         PassengerMaxRequests 50000
Chris@1570:         PassengerStatThrottleRate 5
Chris@1570: 	PassengerStartTimeout 60
Chris@1571: 	PassengerFriendlyErrorPages on
Chris@1570:         RailsSpawnMethod smart
Chris@1570:         ExpiresDefault "access plus 1 minute"
Chris@1570: 
Chris@1590: #        <Location /sys>
Chris@1590: #		AuthType Basic
Chris@1590: #		AuthUserFile "/etc/apache2/auth/user.htpasswd"
Chris@1590: #		AuthName "code.soundsoftware.ac.uk"
Chris@1590: #		Require user user
Chris@1590: #	</Location>
Chris@1590: 
Chris@1590: #	<Location /admin>
Chris@1590: #		AuthType Digest
Chris@1590: #		AuthUserFile "/etc/apache2/auth/admin.htdigest"
Chris@1590: #		AuthName "code.soundsoftware.ac.uk admin interface"
Chris@1590: #		Require user admin
Chris@1590: #	</Location>
Chris@1590: 
Chris@1570:         <DirectoryMatch "^/.*/\.svn/">
Chris@1593:                 Require all denied
Chris@1570:         </DirectoryMatch>
Chris@1570: 
Chris@1570:         <DirectoryMatch "^/.*/\.hg/">
Chris@1593:                 Require all denied
Chris@1570:         </DirectoryMatch>
Chris@1570: 
Chris@1570:         <DirectoryMatch "^/.*/\.git/">
Chris@1593:                 Require all denied
Chris@1570:         </DirectoryMatch>
Chris@1570: 
Chris@1570:         <Directory /var/www/code/public>
Chris@1570:                 Options -MultiViews
Chris@1570: 	</Directory>
Chris@1570: 
Chris@1570:         <Directory /var/www/code/public/themes/soundsoftware/stylesheets/fonts>
Chris@1570: 		# Avoid other sites embedding our fonts
Chris@1570: 		RewriteEngine on
Chris@1570: 		RewriteCond %{HTTP_REFERER} !^$
Chris@1570: 		RewriteCond %{HTTP_REFERER} !^http(s)?://code.soundsoftware.ac.uk/.*$ [NC]
Chris@1570: 		RewriteRule \.(ttf|woff|eot|otf|svg|zip|gz|html|txt)$ - [F]
Chris@1570: 	</Directory>
Chris@1570: 
Chris@1570: 	ScriptAlias /hg "/var/hg/index.cgi"
Chris@1570: 
Chris@1570: 	<Location /hg>
Chris@1570:                	AuthName "Mercurial"
Chris@1570:                 AuthType Basic
Chris@1570:                 Require valid-user
Chris@1570: 		PerlAccessHandler Apache::Authn::SoundSoftware::access_handler
Chris@1570:       		PerlAuthenHandler Apache::Authn::SoundSoftware::authen_handler
Chris@1601: 		PerlSetVar HTTPS "off"
Chris@1570: 		SoundSoftwareDSN "dbi:Pg:database=code;host=localhost"
Chris@1570:     		SoundSoftwareDbUser "code"
Chris@1593:      		SoundSoftwareDbPass "INSERT_DATABASE_PASSWORD_HERE"
Chris@1570: 		SoundSoftwareRepoPrefix "/var/hg/"
Chris@1576:                 #!!! "on" in production please!:
Chris@1576:                 SoundSoftwareSslRequired "off"
Chris@1570: 		Options +ExecCGI
Chris@1570: 		AddHandler cgi-script .cgi
Chris@1570: 		ExpiresDefault now
Chris@1570:         </Location>
Chris@1570: 
Chris@1570: 	Alias /git "/var/files/git-mirror"	
Chris@1570: 
Chris@1570: 	<Directory "/var/files/git-mirror">
Chris@1570: 		Options -Indexes +FollowSymLinks
Chris@1593:                 Require all granted
Chris@1570: 	</Directory>
Chris@1570: 	<Directory ~ "/var/files/git-mirror/.*\.workdir">
Chris@1593:                 Require all denied
Chris@1570: 	</Directory>
Chris@1570: 	<Directory ~ "/var/files/git-mirror/__.*">
Chris@1593:                 Require all denied
Chris@1570: 	</Directory>
Chris@1570: 
Chris@1570: 	ErrorLog /var/log/apache2/code-error.log
Chris@1570: 	CustomLog /var/log/apache2/code-access.log vhost_combined
Chris@1570: 
Chris@1570:         LogLevel warn
Chris@1570:         ServerSignature Off
Chris@1570:         
Chris@1570: </VirtualHost>
Chris@1570: