forked from suse-edge/Factory
58 lines
2.0 KiB
Plaintext
58 lines
2.0 KiB
Plaintext
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||
|
|
# not use this file except in compliance with the License. You may obtain
|
||
|
|
# a copy of the License at
|
||
|
|
#
|
||
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
#
|
||
|
|
# Unless required by applicable law or agreed to in writing, software
|
||
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||
|
|
# License for the specific language governing permissions and limitations
|
||
|
|
# under the License.
|
||
|
|
|
||
|
|
|
||
|
|
{% if env.LISTEN_ALL_INTERFACES | lower == "true" %}
|
||
|
|
Listen {{ env.IRONIC_INSPECTOR_LISTEN_PORT }}
|
||
|
|
<VirtualHost *:{{ env.IRONIC_INSPECTOR_LISTEN_PORT }}>
|
||
|
|
{% else %}
|
||
|
|
Listen {{ env.IRONIC_URL_HOST }}:{{ env.IRONIC_INSPECTOR_LISTEN_PORT }}
|
||
|
|
<VirtualHost {{ env.IRONIC_URL_HOST }}:{{ env.IRONIC_INSPECTOR_LISTEN_PORT }}>
|
||
|
|
{% endif %}
|
||
|
|
{% if env.IRONIC_INSPECTOR_PRIVATE_PORT == "unix" %}
|
||
|
|
ProxyPass "/" "unix:/shared/inspector.sock|http://127.0.0.1/"
|
||
|
|
ProxyPassReverse "/" "unix:/shared/inspector.sock|http://127.0.0.1/"
|
||
|
|
{% else %}
|
||
|
|
ProxyPass "/" "http://127.0.0.1:{{ env.IRONIC_INSPECTOR_PRIVATE_PORT }}/"
|
||
|
|
ProxyPassReverse "/" "http://127.0.0.1:{{ env.IRONIC_INSPECTOR_PRIVATE_PORT }}/"
|
||
|
|
{% endif %}
|
||
|
|
|
||
|
|
SetEnv APACHE_RUN_USER ironic-suse
|
||
|
|
SetEnv APACHE_RUN_GROUP ironic-suse
|
||
|
|
|
||
|
|
ErrorLog /dev/stdout
|
||
|
|
LogLevel debug
|
||
|
|
CustomLog /dev/stdout combined
|
||
|
|
|
||
|
|
SSLEngine On
|
||
|
|
SSLProtocol {{ env.IRONIC_SSL_PROTOCOL }}
|
||
|
|
SSLCertificateFile {{ env.IRONIC_INSPECTOR_CERT_FILE }}
|
||
|
|
SSLCertificateKeyFile {{ env.IRONIC_INSPECTOR_KEY_FILE }}
|
||
|
|
|
||
|
|
{% if "INSPECTOR_HTPASSWD" in env and env.INSPECTOR_HTPASSWD | length %}
|
||
|
|
<Location / >
|
||
|
|
AuthType Basic
|
||
|
|
AuthName "Restricted area"
|
||
|
|
AuthUserFile "/etc/ironic-inspector/htpasswd"
|
||
|
|
Require valid-user
|
||
|
|
</Location>
|
||
|
|
|
||
|
|
<Location ~ "^/(v1/?)?$" >
|
||
|
|
Require all granted
|
||
|
|
</Location>
|
||
|
|
|
||
|
|
<Location /v1/continue >
|
||
|
|
Require all granted
|
||
|
|
</Location>
|
||
|
|
{% endif %}
|
||
|
|
</VirtualHost>
|