# Managed by puppet

################################################################################
# HTTP section


#
# No HTTP is available on this VHost - redirecting to HTTPS
#
<VirtualHost *:80>
  ServerName hotel.stwalkerster.co.uk

  ServerAdmin webmaster@hotel.stwalkerster.co.uk

  DocumentRoot /var/www/stwalkerster/hotel.stwalkerster.co.uk
  <Directory /var/www/stwalkerster/hotel.stwalkerster.co.uk>
    Options none
    AllowOverride none
    Require all denied
  </Directory>
  ErrorLog /var/log/apache2/hotel.stwalkerster.co.uk_error.log
  LogLevel warn
  CustomLog /var/log/apache2/hotel.stwalkerster.co.uk_access.log combined
  ServerSignature Off
  
  Redirect permanent / https://hotel.stwalkerster.co.uk/
  
  
  # disable php
  php_value engine off
  
</VirtualHost>


################################################################################
# HTTPS section

<VirtualHost *:443>
  ServerName hotel.stwalkerster.co.uk

  ServerAdmin webmaster@hotel.stwalkerster.co.uk

  DocumentRoot /var/www/stwalkerster/hotel.stwalkerster.co.uk
  <Directory /var/www/stwalkerster/hotel.stwalkerster.co.uk>
    Options 
    AllowOverride 
    Require all granted
    
  </Directory>
  ErrorLog /var/log/apache2/hotel.stwalkerster.co.uk_error.log
  LogLevel warn
  CustomLog /var/log/apache2/hotel.stwalkerster.co.uk_access.log combined
  ServerSignature Off

  SSLEngine on

  
  # Let's Encrypt
  SSLCertificateFile      /etc/letsencrypt/live/hotel.stwalkerster.co.uk/cert.pem
  SSLCertificateChainFile /etc/letsencrypt/live/hotel.stwalkerster.co.uk/chain.pem
  SSLCertificateKeyFile   /etc/letsencrypt/live/hotel.stwalkerster.co.uk/privkey.pem
  
  
  # strict transport security
  
  Header always set Strict-Transport-Security "max-age=15768000;"
  
  
  # includefile
  
  
  # specials
  SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1

  # PHP FPM
  <Proxy "fcgi://localhost:30001/" enablereuse=on retry=5 max=1 ttl=60>
    ProxySet timeout=30
  </Proxy>

  # Errors
  Alias /_errors/ /var/www/application-docroot/_errors/
  ErrorDocument 503 /_errors/503.html

  <FilesMatch "\.php$">
    SetHandler "proxy:fcgi://localhost:30001"
  </FilesMatch>

  <Location "/_fpm_status">
    AuthName "_fpm_status"
    AuthLDAPURL ldap://directory.srv.stwalkerster.net/dc=helpmebot,dc=org,dc=uk?uid
    AuthType Basic
    AuthBasicProvider ldap
    AuthLDAPGroupAttribute memberuid
    AuthLDAPGroupAttributeIsDN off
    Require ldap-group cn=networkoperations,ou=Groups,dc=helpmebot,dc=org,dc=uk

    SetHandler "proxy:fcgi://localhost:30001"
  </Location>

  
  
  # disable php
  php_value engine off
  
</VirtualHost>