|
1 ; |
|
2 ;TLS macro for vhost blocks |
|
3 ; |
|
4 $%define TLS {$%{config/use_tls:? |
|
5 SSLEngine On |
|
6 |
|
7 # Disable the known insecure SSLv3 protocol |
|
8 SSLProtocol all -SSLv3 |
|
9 |
|
10 SSLCertificateFile $%{config/ssl_cert_file} |
|
11 $%{config/ssl_ca_cert_file:^*SSLCACertificateFile } |
|
12 SSLCertificateKeyFile $%{config/ssl_cert_key_file} |
|
13 }} |
|
14 ; |
|
15 ; Start of conf file stencil |
|
16 ; |
|
17 # WARNING: THIS FILE GENERATED FROM SMF DATA. |
|
18 # DO NOT EDIT THIS FILE. EDITS WILL BE LOST. |
|
19 # |
|
20 |
|
21 ServerRoot "/usr/apache2/2.4" |
|
22 |
|
23 LoadModule authn_file_module libexec/mod_authn_file.so |
|
24 LoadModule authn_core_module libexec/mod_authn_core.so |
|
25 LoadModule authz_host_module libexec/mod_authz_host.so |
|
26 LoadModule authz_groupfile_module libexec/mod_authz_groupfile.so |
|
27 LoadModule authz_user_module libexec/mod_authz_user.so |
|
28 LoadModule authz_core_module libexec/mod_authz_core.so |
|
29 LoadModule access_compat_module libexec/mod_access_compat.so |
|
30 LoadModule auth_basic_module libexec/mod_auth_basic.so |
|
31 LoadModule reqtimeout_module libexec/mod_reqtimeout.so |
|
32 LoadModule filter_module libexec/mod_filter.so |
|
33 LoadModule log_config_module libexec/mod_log_config.so |
|
34 LoadModule env_module libexec/mod_env.so |
|
35 LoadModule headers_module libexec/mod_headers.so |
|
36 LoadModule version_module libexec/mod_version.so |
|
37 LoadModule slotmem_shm_module libexec/mod_slotmem_shm.so |
|
38 <IfDefine prefork> |
|
39 LoadModule mpm_prefork_module libexec/mod_mpm_prefork.so |
|
40 </IfDefine> |
|
41 <IfDefine worker> |
|
42 LoadModule mpm_worker_module libexec/mod_mpm_worker.so |
|
43 </IfDefine> |
|
44 <IfDefine !prefork> |
|
45 <IfDefine !worker> |
|
46 LoadModule mpm_event_module libexec/mod_mpm_event.so |
|
47 </IfDefine> |
|
48 </IfDefine> |
|
49 LoadModule unixd_module libexec/mod_unixd.so |
|
50 LoadModule status_module libexec/mod_status.so |
|
51 LoadModule alias_module libexec/mod_alias.so |
|
52 LoadModule wsgi_module libexec/mod_wsgi-2.7.so |
|
53 $%{config/use_tls:? |
|
54 LoadModule ssl_module libexec\/mod_ssl.so |
|
55 } |
|
56 |
|
57 <IfModule unixd_module> |
|
58 User cinder |
|
59 Group cinder |
|
60 </IfModule> |
|
61 |
|
62 PidFile /var/lib/cinder/cinder.httpd.pid |
|
63 |
|
64 ServerName $%{config/servername} |
|
65 Listen $%{config/port} |
|
66 |
|
67 <Directory /> |
|
68 AllowOverride none |
|
69 Require all denied |
|
70 </Directory> |
|
71 |
|
72 ErrorLogFormat "%{cu}t %M" |
|
73 ErrorLog "$%{config/error_log}" |
|
74 LogLevel warn |
|
75 |
|
76 <IfModule log_config_module> |
|
77 LogFormat "%h %u %t \\"%r\\" %p %>s %b \\"%{Referer}i\\" \\"%{User-Agent}i\\"" combined |
|
78 </IfModule> |
|
79 |
|
80 CustomLog $%{config/access_log} combined |
|
81 |
|
82 <Directory /usr/lib/cinder> |
|
83 Options Indexes FollowSymLinks MultiViews |
|
84 AllowOverride None |
|
85 Require all granted |
|
86 </Directory> |
|
87 |
|
88 WSGISocketPrefix /var/run/cinder_wsgi_ |
|
89 |
|
90 <VirtualHost *:$%{config/port}> |
|
91 $%[TLS] |
|
92 WSGIDaemonProcess cinder-api processes=2 threads=1 user=cinder group=cinder display-name=%\{GROUP\} |
|
93 WSGIScriptAlias / /usr/lib/cinder/cinder-wsgi |
|
94 WSGIProcessGroup cinder-api |
|
95 WSGIApplicationGroup %\{GLOBAL\} |
|
96 WSGIPassAuthorization On |
|
97 </VirtualHost> |