;
;TLS macro for vhost blocks
;
$%define TLS {$%{config/use_tls:?
    SSLEngine On

    # Disable the known insecure SSLv3 protocol
    SSLProtocol all -SSLv3

    SSLCertificateFile $%{config/ssl_cert_file}
    $%{config/ssl_ca_cert_file:^*SSLCACertificateFile }
    SSLCertificateKeyFile $%{config/ssl_cert_key_file}
}}
;
; Start of conf file stencil
;
# WARNING: THIS FILE GENERATED FROM SMF DATA.
#     DO NOT EDIT THIS FILE.  EDITS WILL BE LOST.
#

ServerRoot "/usr/apache2/2.4"

LoadModule authn_file_module libexec/mod_authn_file.so
LoadModule authn_core_module libexec/mod_authn_core.so
LoadModule authz_host_module libexec/mod_authz_host.so
LoadModule authz_groupfile_module libexec/mod_authz_groupfile.so
LoadModule authz_user_module libexec/mod_authz_user.so
LoadModule authz_core_module libexec/mod_authz_core.so
LoadModule access_compat_module libexec/mod_access_compat.so
LoadModule auth_basic_module libexec/mod_auth_basic.so
LoadModule reqtimeout_module libexec/mod_reqtimeout.so
LoadModule filter_module libexec/mod_filter.so
LoadModule log_config_module libexec/mod_log_config.so
LoadModule env_module libexec/mod_env.so
LoadModule headers_module libexec/mod_headers.so
LoadModule version_module libexec/mod_version.so
LoadModule slotmem_shm_module libexec/mod_slotmem_shm.so
<IfDefine prefork>
    LoadModule mpm_prefork_module libexec/mod_mpm_prefork.so
</IfDefine>
<IfDefine worker>
    LoadModule mpm_worker_module libexec/mod_mpm_worker.so
</IfDefine>
<IfDefine !prefork>
    <IfDefine !worker>
        LoadModule mpm_event_module libexec/mod_mpm_event.so
    </IfDefine>
</IfDefine>
LoadModule unixd_module libexec/mod_unixd.so
LoadModule status_module libexec/mod_status.so
LoadModule alias_module libexec/mod_alias.so
LoadModule wsgi_module libexec/mod_wsgi-2.7.so
$%{config/use_tls:?
LoadModule ssl_module libexec\/mod_ssl.so
}

<IfModule unixd_module>
    User cinder
    Group cinder
</IfModule>

PidFile /var/lib/cinder/cinder.httpd.pid

ServerName $%{config/servername}
Listen $%{config/port}

<Directory />
    AllowOverride none
    Require all denied
</Directory>

ErrorLogFormat "%{cu}t %M"
ErrorLog "$%{config/error_log}"
LogLevel warn

<IfModule log_config_module>
    LogFormat "%h %u %t \\"%r\\" %p %>s %b \\"%{Referer}i\\" \\"%{User-Agent}i\\"" combined
</IfModule>

CustomLog $%{config/access_log} combined

<Directory /usr/lib/cinder>
    Options Indexes FollowSymLinks MultiViews
    AllowOverride None
    Require all granted
</Directory>

WSGISocketPrefix /var/run/cinder_wsgi_

<VirtualHost *:$%{config/port}>
$%[TLS]
    WSGIDaemonProcess cinder-api processes=2 threads=1 user=cinder group=cinder display-name=%\{GROUP\}
    WSGIScriptAlias / /usr/lib/cinder/cinder-wsgi
    WSGIProcessGroup cinder-api
    WSGIApplicationGroup %\{GLOBAL\}
    WSGIPassAuthorization On
</VirtualHost>