openstack_dockers/horizon/openstack-dashboard.conf

37 lines
1.4 KiB
Plaintext
Raw Normal View History

2018-04-23 15:13:29 +02:00
<VirtualHost *:80>
RedirectMatch "^/$" "/horizon"
2018-08-10 14:04:40 +02:00
ServerName merlin.hpc.rug.nl
2018-04-23 15:13:29 +02:00
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</VirtualHost>
<VirtualHost *:443>
RedirectMatch "^/$" "/horizon"
2018-08-10 14:04:40 +02:00
ServerName merlin.hpc.rug.nl
2018-04-23 15:13:29 +02:00
SSLEngine On
2018-08-10 14:04:40 +02:00
SSLCertificateFile "/certs/merlin.hpc.rug.nl.crt"
SSLCertificateKeyFile "/certs/merlin.hpc.rug.nl.key"
2018-08-15 15:26:30 +02:00
SSLCACertificateFile "/certs/DigiCertCA.crt"
2018-04-23 15:13:29 +02:00
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
# HTTP Strict Transport Security (HSTS) enforces that all communications
# with a server go over SSL. This mitigates the threat from attacks such
# as SSL-Strip which replaces links on the wire, stripping away https prefixes
# and potentially allowing an attacker to view confidential information on the
# wire
Header add Strict-Transport-Security "max-age=15768000"
Alias /horizon/static /var/lib/openstack-dashboard/static/
Alias /static /var/lib/openstack-dashboard/static/
<Directory /var/lib/openstack-dashboard/static>
Require all granted
</Directory>
WSGIScriptAlias /horizon /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi process-group=horizon
WSGIDaemonProcess horizon user=www-data group=www-data processes=3 threads=10 display-name=%{GROUP}
WSGIProcessGroup horizon
</VirtualHost>