# ************************************
# Vhost template in module puppetlabs-apache
# Managed by Puppet
# ************************************

<VirtualHost *:443>
  ServerName wellcapsuleext.niwa.co.nz

  ## Vhost docroot
  DocumentRoot "/usr/share/pulp/wsgi"
  ProxyPass /katello/api/repositories/ https://wellkatello.niwa.local/katello/api/repositories/
  <Location /katello/api/repositories/>
    ProxyPassReverse https://wellkatello.niwa.local/
  </Location>
  SSLProxyEngine On
  ## Alias declarations for resources outside the DocumentRoot
  Alias /pulp/static "/var/lib/pulp/static"

  ## Directories, there should at least be a declaration for /usr/share/pulp/wsgi

  <Files "webservices.wsgi">
    Require all granted
  </Files>

  <Directory "/usr/share/pulp/wsgi">
    AllowOverride None
    Require all granted
  </Directory>

  <Location "/pulp/static">
    Require all granted
  </Location>

  ## Logging
  ErrorLog "/var/log/httpd/pulp-https_error_ssl.log"
  ServerSignature Off
  CustomLog "/var/log/httpd/pulp-https_access_ssl.log" combined 

  ## Server aliases
  ServerAlias wellcapsuleext

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      "/etc/pki/katello/certs/katello-apache.crt"
  SSLCertificateKeyFile   "/etc/pki/katello/private/katello-apache.key"
  SSLCACertificatePath    "/etc/pki/tls/certs"
  SSLCACertificateFile    "/etc/pki/katello/certs/katello-default-ca.crt"
  SSLProtocol              all -SSLv2
  SSLVerifyClient         optional
  SSLVerifyDepth          3
  SSLOptions +StdEnvVars +ExportCertData
  WSGIApplicationGroup pulp
  WSGIDaemonProcess pulp user=apache group=apache processes=3 display-name=%{GROUP}
  WSGIImportScript /usr/share/pulp/wsgi/webservices.wsgi application-group=pulp process-group=pulp
  WSGIProcessGroup pulp
  WSGIScriptAlias /pulp/api "/usr/share/pulp/wsgi/webservices.wsgi"
  WSGIPassAuthorization On

  ## Custom fragment
  # allow older yum clients to connect, see bz 647828
SSLInsecureRenegotiation On

KeepAlive On
MaxKeepAliveRequests 10000

SSLUsername SSL_CLIENT_S_DN_CN


  AddDefaultCharset UTF-8
</VirtualHost>