# generated by https://github.com/apache/whimsy/blob/master/tools/mkconf.rb
# do not edit directly.  Based on definitions found in
# https://github.com/apache/infrastructure-p6
#
# ************************************
# Vhost template in module puppetlabs-apache
# Managed by Puppet
# ************************************
#
<VirtualHost *:80>
  ServerName whimsy.local

  ## Vhost docroot
  DocumentRoot "/srv/whimsy/www"

  # Redirect all request to a 503 return code when in maintenance mode
  ErrorDocument 503 /503.html

  RewriteEngine on
  # Allow access to error pages
  RewriteCond %{REQUEST_URI} !^/\d\d\d.html$
  # Allow access to assets
  RewriteCond %{REQUEST_URI} !^/assets/
  RewriteCond %{REQUEST_URI} !^/icons/
  RewriteCond %{REQUEST_URI} !=/whimsy.svg
  RewriteCond %{REQUEST_URI} !=/favicon.ico
  # Allow access to JSON files
  RewriteCond %{REQUEST_URI} !^/public$
  RewriteCond %{REQUEST_URI} !^/public/
  # Access to linked docs
  RewriteCond %{REQUEST_URI} !=/test/dataflow.cgi
  RewriteCond %{REQUEST_URI} !=/test/dataflow.json
  # Don't redirect 503 page!
  RewriteCond %{REQUEST_URI} !=/503.html
  RewriteCond %{REQUEST_URI} !=/maintenance.txt
  RewriteCond /srv/whimsy/www/maintenance.txt -f
  RewriteRule ^ - [R=503,L]

  # Redirect away from the maintenance page if not in maintenance mode
  RewriteCond /srv/whimsy/www/maintenance.txt !-f
  RewriteRule ^/503.html$ / [R,L]

  ## Directories, there should at least be a declaration for /srv/whimsy/www

  <Directory "/srv/whimsy/www">
    Options +FollowSymLinks +MultiViews +ExecCGI
    AllowOverride None
    Require all granted
  </Directory>

  ## Logging
  ErrorLog "/var/log/apache2/whimsy_error.log"
  ServerSignature Off
  CustomLog "/var/log/apache2/whimsy_access.log" combined

  ## Server aliases
  ## ServerAlias whimsy6.apache.org
  ## ServerAlias whimsy.apache.org

  ## Custom fragment

## Needed? SetEnv PATH /usr/local/rvm/wrappers/ruby-2.7:${PATH}

PassengerFriendlyErrorPages on

# Needed for Git to be able to find .gitconfig
SetEnv HOME /var/www

# to agree with Dockerfile (ensure svn does not complain)
SetEnv LANG C.UTF-8
SetEnv LC_ALL C.UTF-8

AddCharset UTF-8 .json

ExpiresActive On
<Directory /srv/whimsy/www/>
  AddHandler cgi-script .cgi
  MultiViewsMatch Any
  CheckSpelling On

  <FilesMatch ".(js|css)$">
    <If "%{QUERY_STRING} =~ /^\d+$/">
      Header set Cache-Control "public, max-age=31536000, immutable"
      ExpiresDefault "access plus 1 year"
    </If>
  </FilesMatch>
</Directory>

<Directory /srv/whimsy/www/.well-known/acme-challenge>
  Require all granted
</Directory>

<Directory /srv/whimsy/www/public/>
  Header add Access-Control-Allow-Origin "*"
  Options +Indexes
</Directory>

<Directory /srv/whimsy/www/logs>
  Options +Indexes
</Directory>

<Directory /srv/whimsy/www/members/log>
  Options +Indexes
</Directory>

# WHIMSY-199
<Directory /srv/whimsy/www/board/minutes>
  AllowOverride FileInfo
</Directory>

RewriteEngine on
RewriteRule ^.*$ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

# for secretary workbench
RedirectMatch permanent ^/secmail /secretary/workbench

RedirectMatch permanent ^/officers/public_names /secretary/public-names

# redirect obsolete mailing list request form to replacement application
RedirectMatch permanent ^/officers/mlreq https://selfserve.apache.org/mail.html

ProxyPass "/board/agenda/websocket/"  "ws://localhost:34234/"

# We now have local custom error pages
ErrorDocument 401 /401.html
ErrorDocument 404 /404.html
ErrorDocument 500 /500.html

Alias /board/agenda/ /srv/whimsy/www/board/agenda/public

<Location /board/agenda>
  PassengerBaseURI /board/agenda
  PassengerAppRoot /srv/whimsy/www/board/agenda
  Options -MultiViews
  CheckSpelling Off
  # SetEnv HTTPS on
</Location>

Alias /racktest/ /srv/whimsy/www/racktest/public

<Location /racktest>
  PassengerBaseURI /racktest
  PassengerAppRoot /srv/whimsy/www/racktest
  Options -MultiViews
  CheckSpelling Off
  # SetEnv HTTPS on
</Location>

Alias /roster/ /srv/whimsy/www/roster/public

<Location /roster>
  PassengerBaseURI /roster
  PassengerAppRoot /srv/whimsy/www/roster
  Options -MultiViews
  CheckSpelling Off
  # SetEnv HTTPS on
</Location>

Alias /secretary/workbench/ /srv/whimsy/www/secretary/workbench/public

<Location /secretary/workbench>
  PassengerBaseURI /secretary/workbench
  PassengerAppRoot /srv/whimsy/www/secretary/workbench
  Options -MultiViews
  CheckSpelling Off
  # SetEnv HTTPS on
</Location>

Alias /project/icla/ /srv/whimsy/www/project/icla/public

<Location /project/icla>
  PassengerBaseURI /project/icla
  PassengerAppRoot /srv/whimsy/www/project/icla
  Options -MultiViews
  CheckSpelling Off
  # SetEnv HTTPS on
</Location>

<LocationMatch ^/board/subscriptions>
  AuthType Basic
  AuthName "ASF Committers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</LocationMatch>

<Directory /srv/whimsy/www/committers>
  AuthType Basic
  AuthName "ASF Committers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/project/icla>
  AuthType Basic
  AuthName "ASF Committers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/roster>
  AuthType Basic
  AuthName "ASF Committers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/test/roster>
  AuthType Basic
  AuthName "ASF Committers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/test/public>
  Require all granted
</Directory>

<Directory /srv/whimsy/www/test/committer>
  AuthType Basic
  AuthName "ASF committer"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  Require ldap-alias-committer
</Directory>

<Directory /srv/whimsy/www/test/member>
  AuthType Basic
  AuthName "ASF Members"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  Require ldap-alias-member
</Directory>

<Directory /srv/whimsy/www/test/incubator>
  AuthType Basic
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthName "Incubator PMC"
  Require ldap-alias-incubator-pmc
</Directory>

<Directory /srv/whimsy/www/test/member-incubator>
  AuthType Basic
  AuthName "ASF Members and Incubator PMC"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  <RequireAny>
    Require ldap-alias-member
    Require ldap-alias-incubator-pmc
  </RequireAny>
</Directory>

<Directory /srv/whimsy/www/test/pmc-chair>
  AuthType Basic
  AuthName "ASF PMC Chairs"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  Require ldap-alias-pmc-chair
</Directory>

<Directory /srv/whimsy/www/test/secretary>
  AuthType Basic
  AuthName "ASF secretarial team"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  Require ldap-alias-secretary
</Directory>

<LocationMatch ^/incubator/moderators>
  AuthType Basic
  AuthName "ASF Members and Incubator PMC"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</LocationMatch>

<LocationMatch ^/incubator/signoff>
  AuthType Basic
  AuthName "ASF Members and Incubator PMC"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</LocationMatch>

<Directory /srv/whimsy/www/fundraising>
  AuthType Basic
  AuthName "ASF Members and Officers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/officers>
  AuthType Basic
  AuthName "ASF Members and Officers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/treasurer>
  AuthType Basic
  AuthName "ASF Members and Officers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/board/agenda>
  AuthType Basic
  AuthName "ASF Members and Officers"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require expr %{REQUEST_URI} == '/board/agenda/app.js'
  Require expr %{REQUEST_URI} == '/board/agenda/app.js.map'
  Require expr %{REQUEST_URI} =~ m#^/board/agenda/.*\.js\.rb$#
  Require expr %{REQUEST_URI} =~ m#^/board/agenda/[-\d]+/bootstrap.html$#
  Require expr %{REQUEST_URI} == '/board/agenda/manifest.json'
  Require expr %{REQUEST_URI} == '/board/agenda/stylesheets/app.css'
  Require expr %{REQUEST_URI} == '/board/agenda/sw.js'
  Require ldap-group cn=committers,ou=role,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/apmail>
  AuthType Basic
  AuthName "ASF Members"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute memberUid
  AuthLDAPGroupAttributeIsDN off
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=member,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/members>
  AuthType Basic
  AuthName "ASF Members"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute memberUid
  AuthLDAPGroupAttributeIsDN off
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=member,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/voter>
  AuthType Basic
  AuthName "ASF Members"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute memberUid
  AuthLDAPGroupAttributeIsDN off
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=member,ou=groups,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/infra>
  AuthType Basic
  AuthName "ASF Infrastructure Team"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  Require ldap-group cn=infrastructure,ou=groups,ou=services,dc=apache,dc=org
</Directory>

<Directory /srv/whimsy/www/secretary>
  AuthType Basic
  AuthName "ASF Secretarial Team"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  <RequireAny>
    Require ldap-group cn=asf-secretary,ou=groups,ou=services,dc=apache,dc=org
    Require ldap-group cn=apldap,ou=groups,ou=services,dc=apache,dc=org
  </RequireAny>
</Directory>

<LocationMatch ^/board/publish_minutes>
  AuthType Basic
  AuthName "ASF Secretarial Team"
  AuthBasicProvider ldap
  AuthLDAPUrl "ldaps://<%= ldaphosts%>/ou=people,dc=apache,dc=org?uid"
  AuthLDAPBindDN <%= ldapbinddn%>
  AuthLDAPBindPassword "<%= ldapbindpw%>"
  AuthLDAPGroupAttribute member
  AuthLDAPGroupAttributeIsDN on
  AuthLDAPMaxSubGroupDepth 0
  <RequireAny>
    Require ldap-group cn=asf-secretary,ou=groups,ou=services,dc=apache,dc=org
    Require ldap-group cn=apldap,ou=groups,ou=services,dc=apache,dc=org
  </RequireAny>
</LocationMatch>

</VirtualHost>