components/openstack/horizon/files/openstack-dashboard-tls.conf
branchs11-update
changeset 4072 db0cec748ec0
parent 3409 53d60770c45d
child 4625 18adb92d4193
--- a/components/openstack/horizon/files/openstack-dashboard-tls.conf	Tue Apr 07 15:49:29 2015 -0700
+++ b/components/openstack/horizon/files/openstack-dashboard-tls.conf	Tue Apr 07 13:31:20 2015 -0700
@@ -1,14 +1,11 @@
-<IfDefine 64bit>
-    LoadModule wsgi_module libexec/64/mod_wsgi-2.6.so
-</IfDefine>
-<IfDefine !64bit>
-    LoadModule wsgi_module libexec/mod_wsgi-2.6.so
-</IfDefine>
+LoadModule ssl_module	libexec/mod_ssl.so
+LoadModule wsgi_module	libexec/mod_wsgi-2.6.so
 
 #
 # Enable Solaris Cryptographic Framework
+# (recommended for SPARC T1/T2/T3 based systems only)
 #
-SSLCryptoDevice pkcs11
+#SSLCryptoDevice pkcs11
 
 <VirtualHost *:80>
     RedirectPermanent /horizon https://openstack.example.com/horizon
@@ -21,12 +18,12 @@
 
     SSLEngine On
 
-    # Disable the known insecure SSLv2 & SSLv3 protocols
-    SSLProtocol all -SSLv2 -SSLv3
+    # Disable the known insecure SSLv3 protocol
+    SSLProtocol all -SSLv3
 
     #
     # For an overview on SSL with Apache see:
-    #    http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html
+    #    http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
     # For examples on how to configure certificates and keys see:
     #    http://www.akadia.com/services/ssh_test_certificate.html
     #
@@ -39,15 +36,28 @@
     WSGIDaemonProcess horizon user=webservd group=webservd processes=3 \
         threads=10
 
-    Alias /static /var/lib/openstack_dashboard/static/
+    Alias /static /usr/lib/python2.6/vendor-packages/openstack_dashboard/static/
+
+    <Directory />
+        Options FollowSymLinks
+        AllowOverride None
+    </Directory>
+
+    <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/static>
+        Options Indexes FollowSymLinks MultiViews
+        AllowOverride None
+        Require all granted
+    </Directory>
 
     <Directory /usr/lib/python2.6/vendor-packages/openstack_dashboard/wsgi>
-        Order allow,deny
-        Allow from all
+        Options Indexes FollowSymLinks MultiViews
+        AllowOverride None
+        Require all granted
     </Directory>
 
-    <Directory /var/lib/openstack_dashboard/static>
-        Order allow,deny
-        Allow from all
-    </Directory>
+    ErrorLog "|/usr/bin/rotatelogs -n 3 \
+        /var/lib/openstack_dashboard/horizon_error.log 50M"
+    LogLevel warn
+    CustomLog "|/usr/bin/rotatelogs -n 3 \
+        /var/lib/openstack_dashboard/horizon_access.log 50M" combined
 </VirtualHost>