#
# WARNING: THIS CONFIGURATION WAS GENERATED BY KATELLO-CONFIGURE TOOL,
# CHANGES WILL LIKELY BE OVERWRITTEN.
#
NameVirtualHost *:443
ErrorLog /etc/httpd/logs/ssl_kt_error_log
TransferLog /etc/httpd/logs/ssl_kt_access_log
LogLevel info
ProxyRequests Off
SSLEngine On
SSLCertificateFile /etc/candlepin/certs/candlepin-ca.crt
SSLCertificateKeyFile /etc/candlepin/certs/candlepin-ca.key
SSLCaCertificateFile /etc/candlepin/certs/candlepin-ca.crt
ProxyPreserveHost Off
RequestHeader set X_FORWARDED_PROTO 'https'
# Performance related configurations
AddOutputFilterByType DEFLATE text/html text/css application/x-javascript application/javascript
KeepAlive On
Timeout 5400
ProxyTimeout 5400
BalancerMember http://127.0.0.1:5000/katello
BalancerMember http://127.0.0.1:5001/katello
BalancerMember http://127.0.0.1:5002/katello
BalancerMember http://127.0.0.1:5003/katello
BalancerMember http://127.0.0.1:5004/katello
Alias /katello/assets "/usr/share/katello/public/assets"
Alias /katello/images "/usr/share/katello/public/images"
Alias /katello/fonts "/usr/share/katello/public/fonts"
Alias /katello/javascripts "/usr/share/katello/public/javascripts"
ExpiresActive On
ExpiresDefault "access plus 1 year"
ProxyPass /katello/assets !
ProxyPass /katello/images !
ProxyPass /katello/fonts !
ProxyPass /katello/javascripts !
ProxyPass /katello balancer://thinservers
ProxyPassReverse /katello balancer://thinservers
ProxyPassReverse /katello/assets !
ProxyPassReverse /katello/images !
ProxyPassReverse /katello/fonts !
ProxyPassReverse /katello/javascripts !
RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
SSLVerifyClient optional
SSLRenegBufferSize 16777216
SSLVerifyDepth 2
# report to CLI and RHSM nicely when Katello is down
ErrorDocument 500 '{"displayMessage": "Internal error, contact administrator", "errors": ["Internal error, contact administrator"], "status": "500" }'
ErrorDocument 503 '{"displayMessage": "Service unavailable or restarting, try later", "errors": ["Service unavailable or restarting, try later"], "status": "503" }'
NameVirtualHost *:80
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule /katello(.*)$ https://%{HTTP_HOST}%{REQUEST_URI}