# ************************************
# Vhost template in module puppetlabs-apache
# Managed by Puppet
# ************************************

<VirtualHost *:443>
  ServerName pmaster.genslerwi.com

  ## Vhost docroot
  DocumentRoot /usr/share/foreman/public



  ## Directories, there should at least be a declaration for /usr/share/foreman/public

  <Directory /usr/share/foreman/public>
    Options SymLinksIfOwnerMatch
    AllowOverride None
    Order allow,deny
    Allow from all
  </Directory>

  ## Load additional static includes


  ## Logging
  ErrorLog /var/log/apache2/GWIS-PUPPET.gensler.ad_error_ssl.log
  ServerSignature Off
  CustomLog /var/log/apache2/GWIS-PUPPET.gensler.ad_access_ssl.log combined



  ## Server aliases
  ServerAlias foreman

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      /var/lib/puppet/ssl/certs/gwis-puppet.gensler.ad.pem
  SSLCertificateKeyFile   /var/lib/puppet/ssl/private_keys/gwis-puppet.gensler.ad.pem
  SSLCertificateChainFile /var/lib/puppet/ssl/certs/ca.pem
  SSLCACertificatePath    /etc/ssl/certs
  SSLCACertificateFile    /var/lib/puppet/ssl/certs/ca.pem
  SSLVerifyClient         optional
  SSLVerifyDepth          3
  SSLOptions +StdEnvVars

  ## Custom fragment
PassengerAppRoot /usr/share/foreman

AddDefaultCharset UTF-8
# Static public dir serving
<Directory /usr/share/foreman/public>

  <IfVersion < 2.4>
    Allow from all
  </IfVersion>
  <IfVersion >= 2.4>
    Require all granted
  </IfVersion>

</Directory>

<Directory /usr/share/foreman/public/assets>

  # Use standard http expire header for assets instead of ETag
  <IfModule mod_expires.c>
    Header unset ETag
    FileETag None
    ExpiresActive On
    ExpiresDefault "access plus 1 year"
  </IfModule>

  # Return compressed assets if they are precompiled
  <IfModule mod_rewrite.c>
    RewriteEngine on
    # Make sure the browser supports gzip encoding and file with .gz added
    # does exist on disc before we rewrite with the extension
    RewriteCond %{HTTP:Accept-Encoding} \b(x-)?gzip\b
    RewriteCond %{REQUEST_FILENAME}.gz -s
    RewriteRule ^(.+) $1.gz [L]
    # Set headers for all possible assets which are compressed
    <FilesMatch \.css\.gz$>
      ForceType text/css
      Header set Content-Encoding gzip
      SetEnv no-gzip
    </FilesMatch>
    <FilesMatch \.js\.gz$>
      ForceType text/javascript
      Header set Content-Encoding gzip
      SetEnv no-gzip
    </FilesMatch>
  </IfModule>

</Directory>


</VirtualHost>