#
# WARNING: THIS CONFIGURATION WAS GENERATED BY KATELLO-CONFIGURE TOOL,
# CHANGES WILL LIKELY BE OVERWRITTEN.
#
# Apache configuration file for pulp web services and repositories
#
# Copyright © 2012 Red Hat, Inc.
#
# This software is licensed to you under the GNU General Public License,
# version 2 (GPLv2). There is NO WARRANTY for this software, express or
# implied, including the implied warranties of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE. You should have received a copy of GPLv2
# along with this software; if not, see
# http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
#
# Red Hat trademarks are not licensed under GPLv2. No permission is
# granted to use or replicate Red Hat trademarks that are incorporated
# in this software or its documentation.
# Pulp common -----------------------------------------------------------------
AddType application/x-pkcs7-crl .crl
AddType application/x-x509-ca-cert .crt
# Example ssl cert and key files to get you started.
# This MUST match /etc/pulp/pulp.conf [security] 'cacert'.
SSLCACertificateFile /etc/candlepin/certs/candlepin-ca.crt
# allow older yum clients to connect, see bz 647828
SSLInsecureRenegotiation on
# Pulp web services -----------------------------------------------------------
WSGIProcessGroup pulp
WSGIApplicationGroup pulp
WSGIDaemonProcess pulp user=apache group=apache processes=1 threads=8 display-name=%{GROUP}
# DEBUG - uncomment the next 2 lines to enable debugging
#WSGIRestrictStdin Off
#WSGIRestrictStdout Off
#WSGISocketPrefix /srv/pulp/
WSGISocketPrefix run/wsgi
WSGIScriptAlias /pulp/api /srv/pulp/webservices.wsgi
WSGIImportScript /srv/pulp/webservices.wsgi process-group=pulp application-group=pulp
WSGIPassAuthorization On
WSGIProcessGroup pulp
WSGIApplicationGroup pulp
SSLRenegBufferSize 2147483648
SSLRequireSSL
SSLVerifyDepth 3
SSLOptions +StdEnvVars +ExportCertData
SSLVerifyClient optional
# Pulp repositories -----------------------------------------------------------
Alias /pulp/repos /var/www/pub/repos
WSGIAccessScript /srv/pulp/repo_auth.wsgi
SSLRequireSSL
SSLVerifyClient optional_no_ca
SSLVerifyDepth 2
SSLOptions +StdEnvVars +ExportCertData +FakeBasicAuth
Alias /pulp/gpg /var/www/pub/gpg
Alias /pulp/ks /var/www/pub/ks
Options FollowSymLinks Indexes