ZZZZ-sprinklers.conf

#
# Enable name-based virtual hosts on port 80
#
NameVirtualHost *:80

#
# Virtual host for http://ipa.example.com - redirects to IPA admin interface
# on port 443
#
<VirtualHost *:80>
	ServerName ipa.example.com
	Include /etc/httpd/conf.d/ipa-rewrite.conf
</VirtualHost>

#
# Virtual host for http://sprinklers.example.com - redirects to reverse proxy/
# static UI content server on port 59872
#
<VirtualHost *:80>
	ServerName sprinklers.example.com
	ServerAlias sprinklers
	Redirect "/" "https://www.example.com:59872/"
</VirtualHost>

#
# Listen on port 59872
#
Listen 59872

#
# Virtual host for https://www.example.com:59872 - reverse proxy for
# OpenSprinkler controller plus static UI content server
#
<VirtualHost *:59872>

	ServerName www.example.com:59872
	DocumentRoot "/var/www/opensprinkler"

	ErrorLog /etc/httpd/logs/opensprinkler_error_log
	TransferLog /etc/httpd/logs/opensprinkler_access_log
	LogLevel warn

	NSSEngine on

	# Copied from /etc/httpd/conf.d/nss.conf (IPA)
	NSSCipherSuite +rsa_rc4_128_md5,+rsa_rc4_128_sha,+rsa_3des_sha,-rsa_des_sha,-rsa_rc4_40_md5,-rsa_rc2_40_md5,-rsa_null_md5,-rsa_null_sha,+fips_3des_sha,-fips_des_sha,-fortezza,-fortezza_rc4_128_sha,-fortezza_null,-rsa_des_56_sha,-rsa_rc4_56_sha,+rsa_aes_128_sha,+rsa_aes_256_sha

	# Copied from /etc/httpd/conf.d/nss.conf (IPA); why 3 times?
	NSSProtocol TLSv1.0,TLSv1.1,TLSv1.2
	NSSProtocol TLSv1.0,TLSv1.1,TLSv1.2
	NSSProtocol TLSv1.0,TLSv1.1,TLSv1.2

	NSSNickname "www.example.com - Verisign, Inc."

	# Copied from /etc/httpd/conf.d/nss.conf (IPA); needed?
	<Files ~ "\.(cgi|shtml|phtml|php3?)$">
	    NSSOptions +StdEnvVars
	</Files>
	<Directory "/var/www/cgi-bin">
	    NSSOptions +StdEnvVars
	</Directory>

	# Don't proxy the /ui directory; serve it directly
	ProxyPass /ui !

	# Get everything else from the OpenSprinkler controller
	ProxyPass / http://opensprinkler.example.com/
	# And fix the headers in any redirect responses
	ProxyPassReverse / http://opensprinkler.example.com/

</VirtualHost>