components/openstack/horizon/files/openstack-dashboard-tls.conf
changeset 3998 5bd484384122
parent 2152 1cea7a430dd7
child 4049 150852e281c4
equal deleted inserted replaced
3997:0ca3f3d6c919 3998:5bd484384122
     1 <IfDefine 64bit>
     1 LoadModule ssl_module	libexec/mod_ssl.so
     2     LoadModule wsgi_module libexec/64/mod_wsgi-2.6.so
     2 LoadModule wsgi_module	libexec/mod_wsgi-2.6.so
     3 </IfDefine>
       
     4 <IfDefine !64bit>
       
     5     LoadModule wsgi_module libexec/mod_wsgi-2.6.so
       
     6 </IfDefine>
       
     7 
     3 
     8 #
     4 #
     9 # Enable Solaris Cryptographic Framework
     5 # Enable Solaris Cryptographic Framework
       
     6 # (recommended for SPARC T1/T2/T3 based systems only)
    10 #
     7 #
    11 SSLCryptoDevice pkcs11
     8 #SSLCryptoDevice pkcs11
    12 
     9 
    13 <VirtualHost *:80>
    10 <VirtualHost *:80>
    14     RedirectPermanent /horizon https://openstack.example.com/horizon
    11     RedirectPermanent /horizon https://openstack.example.com/horizon
    15 </VirtualHost>
    12 </VirtualHost>
    16 
    13 
    19 <VirtualHost *:443>
    16 <VirtualHost *:443>
    20     ServerName openstack.example.com
    17     ServerName openstack.example.com
    21 
    18 
    22     SSLEngine On
    19     SSLEngine On
    23 
    20 
    24     # Disable the known insecure SSLv2 & SSLv3 protocols
    21     # Disable the known insecure SSLv3 protocol
    25     SSLProtocol all -SSLv2 -SSLv3
    22     SSLProtocol all -SSLv3
    26 
    23 
    27     #
    24     #
    28     # For an overview on SSL with Apache see:
    25     # For an overview on SSL with Apache see:
    29     #    http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html
    26     #    http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
    30     # For examples on how to configure certificates and keys see:
    27     # For examples on how to configure certificates and keys see:
    31     #    http://www.akadia.com/services/ssh_test_certificate.html
    28     #    http://www.akadia.com/services/ssh_test_certificate.html
    32     #
    29     #
    33     SSLCertificateFile /path/to/Server_PEM-encoded_X.509_Certificate_file
    30     SSLCertificateFile /path/to/Server_PEM-encoded_X.509_Certificate_file
    34     SSLCACertificateFile /path/to/Concatenated_PEM-encoded_CA_Certificates
    31     SSLCACertificateFile /path/to/Concatenated_PEM-encoded_CA_Certificates
    37     WSGIScriptAlias /horizon \
    34     WSGIScriptAlias /horizon \
    38         /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi/django.wsgi
    35         /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi/django.wsgi
    39     WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \
    36     WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \
    40         threads=10
    37         threads=10
    41 
    38 
    42     Alias /static /var/lib/openstack_dashboard/static/
    39     Alias /static /usr/lib/python2.6/vendor-packages/openstack_dashboard/static/
       
    40 
       
    41     <Directory />
       
    42         Options FollowSymLinks
       
    43         AllowOverride None
       
    44     </Directory>
       
    45 
       
    46     <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/static>
       
    47         Options Indexes FollowSymLinks MultiViews
       
    48         AllowOverride None
       
    49         Require all granted
       
    50     </Directory>
    43 
    51 
    44     <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi>
    52     <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi>
    45         Order allow,deny
    53         Options Indexes FollowSymLinks MultiViews
    46         Allow from all
    54         AllowOverride None
       
    55         Require all granted
    47     </Directory>
    56     </Directory>
    48 
    57 
    49     <Directory /var/lib/openstack_dashboard/static>
    58     ErrorLog "|/usr/bin/rotatelogs -n 3 \
    50         Order allow,deny
    59         /var/lib/openstack_dashboard/horizon_error.log 50M"
    51         Allow from all
    60     LogLevel warn
    52     </Directory>
    61     CustomLog "|/usr/bin/rotatelogs -n 3 \
       
    62         /var/lib/openstack_dashboard/horizon_access.log 50M" combined
    53 </VirtualHost>
    63 </VirtualHost>