# Managed by puppet
################################################################################
# HTTP section
#
# No HTTP is available on this VHost - redirecting to HTTPS
#
<VirtualHost *:80>
ServerName hotel.stwalkerster.co.uk
ServerAdmin webmaster@hotel.stwalkerster.co.uk
DocumentRoot /var/www/stwalkerster/hotel.stwalkerster.co.uk
<Directory /var/www/stwalkerster/hotel.stwalkerster.co.uk>
Options none
AllowOverride none
Require all denied
</Directory>
ErrorLog /var/log/apache2/hotel.stwalkerster.co.uk_error.log
LogLevel warn
CustomLog /var/log/apache2/hotel.stwalkerster.co.uk_access.log combined
ServerSignature Off
Redirect permanent / https://hotel.stwalkerster.co.uk/
# disable php
php_value engine off
</VirtualHost>
################################################################################
# HTTPS section
<VirtualHost *:443>
ServerName hotel.stwalkerster.co.uk
ServerAdmin webmaster@hotel.stwalkerster.co.uk
DocumentRoot /var/www/stwalkerster/hotel.stwalkerster.co.uk
<Directory /var/www/stwalkerster/hotel.stwalkerster.co.uk>
Options
AllowOverride
Require all granted
</Directory>
ErrorLog /var/log/apache2/hotel.stwalkerster.co.uk_error.log
LogLevel warn
CustomLog /var/log/apache2/hotel.stwalkerster.co.uk_access.log combined
ServerSignature Off
SSLEngine on
# Let's Encrypt
SSLCertificateFile /etc/letsencrypt/live/hotel.stwalkerster.co.uk/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/hotel.stwalkerster.co.uk/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/hotel.stwalkerster.co.uk/privkey.pem
# strict transport security
Header always set Strict-Transport-Security "max-age=15768000;"
# includefile
# specials
SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1
# PHP FPM
<Proxy "fcgi://localhost:30001/" enablereuse=on retry=5 max=1 ttl=60>
ProxySet timeout=30
</Proxy>
# Errors
Alias /_errors/ /var/www/application-docroot/_errors/
ErrorDocument 503 /_errors/503.html
<FilesMatch "\.php$">
SetHandler "proxy:fcgi://localhost:30001"
</FilesMatch>
<Location "/_fpm_status">
AuthName "_fpm_status"
AuthLDAPURL ldap://directory.srv.stwalkerster.net/dc=helpmebot,dc=org,dc=uk?uid
AuthType Basic
AuthBasicProvider ldap
AuthLDAPGroupAttribute memberuid
AuthLDAPGroupAttributeIsDN off
Require ldap-group cn=networkoperations,ou=Groups,dc=helpmebot,dc=org,dc=uk
SetHandler "proxy:fcgi://localhost:30001"
</Location>
# disable php
php_value engine off
</VirtualHost>