# This file was generated by genapachecfg.pl
# look in /home/cpuportal/etc/apache/config.ini
# for configuration settings.
# run genapachecfg.pl --help for help with configuration options
<VirtualHost 172.31.19.72:80 [::]:80>
    AssignUserID cpuportal portal

    DocumentRoot /home/cpuportal/sites/main/htdocs
    ServerName portal.cpunderconstruction.com
    ServerAdmin webmaster@commonplaces.com

    ServerAlias dev.portal.cpunderconstruction.com
    ServerAlias www.portal.cpunderconstruction.com
    RewriteEngine On
    RewriteOptions inherit
    <Directory /home/cpuportal/sites/main>
         AllowOverride All
         AuthType Basic
         AuthName "portal.cpunderconstruction.com Staging Site"
         AuthUserFile /home/cpuportal/etc/htpasswd
         Require valid-user
    </Directory>
    Alias /servername.html /var/www/html/servername.html
    Alias /.well-known /var/www/well-known/.well-known

    # force ssl but for .well-known
    RewriteCond %{REQUEST_URI} !^/.well-known
    RewriteRule (.*) https://%{SERVER_NAME}%{REQUEST_URI} [L,NE,R=permanent]
    ErrorLog /home/cpuportal/var/logs/error.log
    CustomLog /home/cpuportal/var/logs/access.log combined
</VirtualHost>
# This file was generated by genapachecfg.pl
# look in /home/cpuportal/etc/apache/config.ini
# for configuration settings.
# run genapachecfg.pl --help for help with configuration options
<VirtualHost 172.31.19.72:443 [::]:443>
    AssignUserID cpuportal portal

    DocumentRoot /home/cpuportal/sites/main/htdocs
    ServerName portal.cpunderconstruction.com
    ServerAdmin webmaster@commonplaces.com

    ServerAlias dev.portal.cpunderconstruction.com
    ServerAlias www.portal.cpunderconstruction.com
    RewriteEngine On
    RewriteOptions inherit
    <Directory /home/cpuportal/sites/main>
         AllowOverride All
         AuthType Basic
         AuthName "portal.cpunderconstruction.com Staging Site"
         AuthUserFile /home/cpuportal/etc/htpasswd
         Require valid-user
    </Directory>
    Alias /servername.html /var/www/html/servername.html
    Alias /static /home/cpuportal/sites/main/static
    <Directory /home/cpuportal/sites/main>
         AllowOverride All
         AuthType Basic
         AuthName "portal.cpunderconstruction.com Staging Site"
         AuthUserFile /home/cpuportal/etc/htpasswd
         Require valid-user
    </Directory>
    XSendFile on
    XSendFilePath "/home/cpuportal/sites/main/htdocs/media"
    SSLEngine on
    SSLHonorCipherOrder On
    #SSLCipherSuite HIGH:MEDIUM:!SSLv2:!ADH:!aNULL:!eNULL:!NULL:!LOW
    SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AE
S:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!SSLv2:!ADH
    #SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    SSLProtocol All -SSLv2 -SSLv3
    SSLCertificateKeyFile /cp/ssl/privkey.pem
    SSLCertificateFile /cp/ssl/cert.pem
    SSLCertificateChainFile /cp/ssl/chain.pem
    SSLOptions +ExportCertData +StrictRequire
    SSLUseStapling off
    SSLCACertificateFile /cp/ssl/chain.pem
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

    WSGIDaemonProcess cpuportalssl python-path=/home/cpuportal/sites/main/env:/h
ome/cpuportal/sites/main/env/lib/python3.4/site-packages:/home/cpuportal/sites/m
ain/htdocs user=cpuportal group=portal
    WSGIProcessGroup cpuportalssl
    WSGIScriptAlias / /home/cpuportal/sites/main/htdocs/wsgi.py
    <Directory /home/cpuportal/sites/main/htdocs>
         <Files wsgi.py>
              AllowOverride All
              AuthType Basic
              AuthName "portal.cpunderconstruction.com Staging Site"
              AuthUserFile /home/cpuportal/etc/htpasswd
              Require valid-user
        </Files>
    </Directory>
    ErrorLog /home/cpuportal/var/logs/error-ssl.log
    CustomLog /home/cpuportal/var/logs/access-ssl.log combined
</VirtualHost>