###
# Generated by Puppet
###

# External
<VirtualHost *:80>

  DocumentRoot /srv/iclassify/public

  LimitRequestBody 8388608

  ServerName iclassify.sfo.example.com
  ServerAlias iclassify

  <Directory />
    Options FollowSymLinks
    AllowOverride None
  </Directory>

  <Location /server-status>
    SetHandler server-status

    Order Deny,Allow
    Deny from all
    Allow from 127.0.0.1 192.168.0.0/255.255.0.0
  </Location>

  LogLevel info
  ErrorLog /var/log/apache2/iclassify-error.log
  CustomLog /var/log/apache2/iclassify-access.log combined

  RewriteEngine On
  RewriteLog /var/log/apache2/iclassify-rewrite.log
  RewriteLogLevel 0

  RewriteCond  %{SERVER_PORT} !^443$
  RewriteRule ^(.*)$ https://iclassify.sfo.example.com$1

</VirtualHost>

<VirtualHost *:443>

  DocumentRoot /srv/iclassify/public

  LimitRequestBody 8388608

  ServerName iclassify.sfo.example.com
  ServerAlias iclassify

  <Directory />
    Options FollowSymLinks
    AllowOverride None
  </Directory>

  <Location /server-status>
    SetHandler server-status

    Order Deny,Allow
    Deny from all
    Allow from 127.0.0.1 192.168.0.0/255.255.0.0
  </Location>

  <Proxy *>
    Order allow,deny
    Allow from all
  </Proxy>

  LogLevel info
  ErrorLog /var/log/apache2/iclassify-error.log
  CustomLog /var/log/apache2/iclassify-access.log combined

  RewriteEngine On
  RewriteLog /var/log/apache2/iclassify-rewrite.log
  RewriteLogLevel 0



  RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
  RewriteCond %{DOCUMENT_ROOT}/system/maintenance.html -f
  RewriteCond %{SCRIPT_FILENAME} !maintenance.html
  RewriteRule ^.*$ /system/maintenance.html [L]

  RewriteRule ^/server-status$ /server-status$1 [L]

  RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
  RewriteRule ^/(.*)$ http://127.0.0.1:4999%{REQUEST_URI} [P,QSA,L]
  ProxyPassReverse / http://127.0.0.1:4999/
  SetEnv proxy-nokeepalive 1

  SSLEngine on

  SSLCertificateFile /etc/apache2/ssl/wildcard.pem
  SSLCertificateKeyFile /etc/apache2/ssl/wildcard.pem

  BrowserMatch ".*MSIE.*" \
   nokeepalive ssl-unclean-shutdown \
   downgrade-1.0 force-response-1.0

  RequestHeader set X_FORWARDED_PROTO 'https'

</VirtualHost>