Listen *:8000
ServerRoot "/etc/httpd"
TraceEnable Off
ServerSignature Off
ServerTokens Prod
ServerRoot "/etc/httpd"
ServerName "heat.openstack.svc"

User apache
Group apache

TypesConfig /etc/mime.types

Include conf.modules.d/*.conf

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy

SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
CustomLog /dev/stdout combined env=!forwarded
CustomLog /dev/stdout proxy env=forwarded
ErrorLog /dev/stdout


# internal vhost heat-cfnapi-internal.openstack.svc configuration
<VirtualHost *:8000>
  ServerName heat-cfnapi-internal.openstack.svc

  AllowEncodedSlashes on

  ## Logging
  LogLevel debug
  ErrorLog /dev/stdout
  ServerSignature Off
  SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
  CustomLog /dev/stdout combined env=!forwarded
  CustomLog /dev/stdout proxy env=forwarded
  ErrorLog /dev/stdout
  SetEnvIf X-Forwarded-Proto https HTTPS=1

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      "/etc/pki/tls/certs/internal.crt"
  SSLCertificateKeyFile   "/etc/pki/tls/private/internal.key"

  ## WSGI configuration
  WSGIApplicationGroup %{GLOBAL}
  WSGIDaemonProcess internal display-name=internal group=heat processes=8 threads=1 user=heat
  WSGIProcessGroup internal
  WSGIScriptAlias / "/usr/bin/heat-wsgi-api-cfn"
  WSGIPassAuthorization On

  Timeout 600
</VirtualHost>

# public vhost heat-cfnapi-public.openstack.svc configuration
<VirtualHost *:8000>
  ServerName heat-cfnapi-public.openstack.svc

  AllowEncodedSlashes on

  ## Logging
  LogLevel debug
  ErrorLog /dev/stdout
  ServerSignature Off
  SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
  CustomLog /dev/stdout combined env=!forwarded
  CustomLog /dev/stdout proxy env=forwarded
  ErrorLog /dev/stdout
  SetEnvIf X-Forwarded-Proto https HTTPS=1

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      "/etc/pki/tls/certs/public.crt"
  SSLCertificateKeyFile   "/etc/pki/tls/private/public.key"

  ## WSGI configuration
  WSGIApplicationGroup %{GLOBAL}
  WSGIDaemonProcess public display-name=public group=heat processes=8 threads=1 user=heat
  WSGIProcessGroup public
  WSGIScriptAlias / "/usr/bin/heat-wsgi-api-cfn"
  WSGIPassAuthorization On

  Timeout 600
</VirtualHost>