;

;TLS macro for vhost blocks

;

$%define TLS {$%{config/use_tls:?

    SSLEngine On

    # Disable the known insecure SSLv3 protocol

    SSLProtocol all -SSLv3

    SSLCertificateFile $%{config/ssl_cert_file}

    $%{config/ssl_ca_cert_file:^*SSLCACertificateFile }

    SSLCertificateKeyFile $%{config/ssl_cert_key_file}

}}

;

; Start of conf file stencil

;

# WARNING: THIS FILE GENERATED FROM SMF DATA.

#     DO NOT EDIT THIS FILE.  EDITS WILL BE LOST.

#

ServerRoot "/usr/apache2/2.4"

# TODO (dfisher): Investigate minimization of loaded modules

LoadModule authn_file_module libexec/mod_authn_file.so

LoadModule authn_core_module libexec/mod_authn_core.so

LoadModule authz_host_module libexec/mod_authz_host.so

LoadModule authz_groupfile_module libexec/mod_authz_groupfile.so

LoadModule authz_user_module libexec/mod_authz_user.so

LoadModule authz_core_module libexec/mod_authz_core.so

LoadModule access_compat_module libexec/mod_access_compat.so

LoadModule auth_basic_module libexec/mod_auth_basic.so

LoadModule reqtimeout_module libexec/mod_reqtimeout.so

LoadModule filter_module libexec/mod_filter.so

LoadModule log_config_module libexec/mod_log_config.so

LoadModule env_module libexec/mod_env.so

LoadModule headers_module libexec/mod_headers.so

LoadModule version_module libexec/mod_version.so

LoadModule slotmem_shm_module libexec/mod_slotmem_shm.so

<IfDefine prefork>

    LoadModule mpm_prefork_module libexec/mod_mpm_prefork.so

</IfDefine>

<IfDefine worker>

    LoadModule mpm_worker_module libexec/mod_mpm_worker.so

</IfDefine>

<IfDefine !prefork>

    <IfDefine !worker>

        LoadModule mpm_event_module libexec/mod_mpm_event.so

    </IfDefine>

</IfDefine>

LoadModule unixd_module libexec/mod_unixd.so

LoadModule status_module libexec/mod_status.so

LoadModule alias_module libexec/mod_alias.so

LoadModule wsgi_module libexec/mod_wsgi-2.7.so

$%{config/use_tls:?

LoadModule ssl_module libexec\/mod_ssl.so

}

<IfModule unixd_module>

    User webservd

    Group webservd

</IfModule>

PidFile /var/lib/openstack_dashboard/openstack_dashboard.httpd.pid

ServerName $%{config/servername}

Listen $%{config/port}

<Directory />

    AllowOverride none

    Require all denied

</Directory>

ErrorLogFormat "%{cu}t %M"

ErrorLog "$%{config/error_log}"

LogLevel warn

<IfModule log_config_module>

    LogFormat "%h %u %t \\"%r\\" %p %>s %b \\"%{Referer}i\\" \\"%{User-Agent}i\\"" combined

</IfModule>

CustomLog $%{config/access_log} combined

<Directory /usr/lib/python2.7/vendor-packages/openstack_dashboard/static>

    Options Indexes FollowSymLinks MultiViews

    AllowOverride None

    Require all granted

</Directory>

<Directory /usr/lib/python2.7/vendor-packages/openstack_dashboard/wsgi>

    Options Indexes FollowSymLinks MultiViews

    AllowOverride None

    Require all granted

</Directory>

WSGISocketPrefix /var/run/openstack_dashboard_wsgi_

<VirtualHost *:$%{config/port}>

    Alias /horizon/static /usr/lib/python2.7/vendor-packages/openstack_dashboard/static/

$%[TLS]

    WSGIDaemonProcess horizon processes=3 threads=10 user=webservd group=webservd display-name=%\{GROUP\}

    WSGIScriptAlias /horizon /usr/lib/python2.7/vendor-packages/openstack_dashboard/wsgi/django.wsgi

    WSGIProcessGroup horizon

    WSGIApplicationGroup %\{GLOBAL\}

    WSGIPassAuthorization On

</VirtualHost>