ServerTokens Prod
ServerSignature Off
TraceEnable Off
PidFile run/httpd.pid
ServerRoot "/etc/httpd"
ServerName "localhost.localdomain"

User apache
Group apache

Listen 6385

TypesConfig /etc/mime.types

Include conf.modules.d/*.conf
Include conf.d/*.conf

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy

ErrorLog /dev/stdout
ServerSignature Off
SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
CustomLog /dev/stdout combined env=!forwarded
CustomLog /dev/stdout proxy env=forwarded


# internal vhost ironic-internal.openstack.svc configuration
<VirtualHost *:6385>
  ServerName ironic-internal.openstack.svc

  ## Vhost docroot
  DocumentRoot "/var/www/cgi-bin/ironic"

  ## Directories, there should at least be a declaration for /var/www/cgi-bin/ironic
  <Directory "/var/www/cgi-bin/ironic">
    Options -Indexes +FollowSymLinks +MultiViews
    AllowOverride None
    Require all granted
  </Directory>
  SetEnvIf X-Forwarded-Proto https HTTPS=1

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      "/etc/pki/tls/certs/internal.crt"
  SSLCertificateKeyFile   "/etc/pki/tls/private/internal.key"

  ## WSGI configuration
  WSGIApplicationGroup %{GLOBAL}
  WSGIDaemonProcess internal display-name=internal group=ironic processes=1 threads=15 user=ironic
  WSGIProcessGroup internal
  WSGIScriptAlias / "/var/www/cgi-bin/ironic/app"
  WSGIPassAuthorization On

  TimeOut 60
</VirtualHost>

# public vhost ironic-public.openstack.svc configuration
<VirtualHost *:6385>
  ServerName ironic-public.openstack.svc

  ## Vhost docroot
  DocumentRoot "/var/www/cgi-bin/ironic"

  ## Directories, there should at least be a declaration for /var/www/cgi-bin/ironic
  <Directory "/var/www/cgi-bin/ironic">
    Options -Indexes +FollowSymLinks +MultiViews
    AllowOverride None
    Require all granted
  </Directory>
  SetEnvIf X-Forwarded-Proto https HTTPS=1

  ## SSL directives
  SSLEngine on
  SSLCertificateFile      "/etc/pki/tls/certs/public.crt"
  SSLCertificateKeyFile   "/etc/pki/tls/private/public.key"

  ## WSGI configuration
  WSGIApplicationGroup %{GLOBAL}
  WSGIDaemonProcess public display-name=public group=ironic processes=1 threads=15 user=ironic
  WSGIProcessGroup public
  WSGIScriptAlias / "/var/www/cgi-bin/ironic/app"
  WSGIPassAuthorization On

  TimeOut 60
</VirtualHost>