Use specific Apache configuration files for Debian packaging (#760)

0936dfe9 · Clément OUDOT · 5bb0f01d · 0936dfe9 · 0936dfe9 · 0936dfe9
Commit 0936dfe9 authored Nov 04, 2014 by Clément OUDOT
5 changed files
--- a/Makefile
+++ b/Makefile
@@ -532,6 +532,10 @@ debian-dist:	clean
 	@cp -pRH $$(find * -maxdepth 0|grep -v -e "\(lemonldap-ng-$(VERSION)\|rpm\)") lemonldap-ng-$(VERSION)
 	@rm -rf $$(find lemonldap-ng-$(VERSION) -name .svn -print)
 	@find $$dir -name '*.bak' -delete
+	@mv lemonldap-ng-$(VERSION)/_example/etc/handler-apache2.X.conf lemonldap-ng-$(VERSION)/_example/etc/handler-apache2.conf
+	@mv lemonldap-ng-$(VERSION)/_example/etc/manager-apache2.X.conf lemonldap-ng-$(VERSION)/_example/etc/manager-apache2.conf
+	@mv lemonldap-ng-$(VERSION)/_example/etc/portal-apache2.X.conf lemonldap-ng-$(VERSION)/_example/etc/portal-apache2.conf
+	@mv lemonldap-ng-$(VERSION)/_example/etc/test-apache2.X.conf lemonldap-ng-$(VERSION)/_example/etc/test-apache2.conf
 	@rm -rf lemonldap-ng-$(VERSION)/lemonldap-ng-$(VERSION)
 	@$(COMPRESS) lemonldap-ng_$(VERSION).orig.$(COMPRESSSUFFIX) lemonldap-ng-$(VERSION)
 	@rm -rf lemonldap-ng-$(VERSION)

--- a/_example/etc/handler-apache2.X.conf
+++ b/_example/etc/handler-apache2.X.conf
+#====================================================================
+# Apache configuration for LemonLDAP::NG Handler
+#====================================================================
+
+# Uncomment this if no previous NameVirtualHost declaration
+#NameVirtualHost __VHOSTLISTEN__
+
+# Load LemonLDAP::NG Handler
+PerlOptions +GlobalRequest
+PerlRequire Lemonldap/NG/Handler.pm
+
+# Common error page and security parameters
+ErrorDocument 403 http://auth.__DNSDOMAIN__/?lmError=403
+ErrorDocument 500 http://auth.__DNSDOMAIN__/?lmError=500
+ErrorDocument 503 http://auth.__DNSDOMAIN__/?lmError=503
+
+<VirtualHost __VHOSTLISTEN__>
+    ServerName reload.__DNSDOMAIN__
+
+    # Configuration reload mechanism (only 1 per physical server is
+    # needed): choose your URL to avoid restarting Apache when
+    # configuration change
+    <Location /reload>
+        <IfVersion >= 2.3>
+            Require ip 127 ::1
+        </IfVersion> 
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Deny from all
+            Allow from 127.0.0.0/8 ::1
+        </IfVersion>
+        PerlHeaderParserHandler Lemonldap::NG::Handler->reload
+    </Location>
+
+    # Uncomment this to activate status module
+    #<Location /status>
+    #    <IfVersion >= 2.3>
+    #        Require ip 127 ::1
+    #    </IfVersion> 
+    #    <IfVersion < 2.3>
+    #        Order Deny,Allow
+    #        Deny from all
+    #        Allow from 127.0.0.0/8 ::1
+    #    </IfVersion>
+    #    SetHandler perl-script
+    #    PerlResponseHandler Lemonldap::NG::Handler->status
+    #    # You may have to uncomment the next directive to skip
+    #    # an upper PerlHeaderParserHandler directive
+    #    #PerlHeaderParserHandler Apache2::Const::DECLINED
+    #</Location>
+
+</VirtualHost>
+
+
--- a/_example/etc/manager-apache2.X.conf
+++ b/_example/etc/manager-apache2.X.conf
+#====================================================================
+# Apache configuration for LemonLDAP::NG Manager
+#====================================================================
+
+# Uncomment this if no previous NameVirtualHost declaration
+#NameVirtualHost __VHOSTLISTEN__
+
+# Manager virtual host (manager.__DNSDOMAIN__)
+<VirtualHost __VHOSTLISTEN__>
+    ServerName manager.__DNSDOMAIN__
+
+    # DocumentRoot
+    DocumentRoot __MANAGERDIR__
+    <Directory __MANAGERDIR__>
+        <IfVersion >= 2.3>
+            Require all granted
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Allow from all
+        </IfVersion>
+        Options +ExecCGI +FollowSymLinks
+    </Directory>
+
+    # On-line documentation
+    Alias /doc/ __DEFDOCDIR__
+    Alias /lib/ __DEFDOCDIR__lib/
+    <Directory __DEFDOCDIR__>
+        <IfVersion >= 2.3>
+            Require all granted
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Allow from all
+        </IfVersion>
+        ErrorDocument 404 /notfound.html
+        Options +FollowSymLinks
+    </Directory>
+
+    # French version (needs fr-doc installation)
+    Alias /fr-doc/ __FRDOCDIR__
+    <Directory __FRDOCDIR__>
+        <IfVersion >= 2.3>
+            Require all granted
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Allow from all
+        </IfVersion>
+        ErrorDocument 404 /notfoundfr.html
+        Options +FollowSymLinks
+    </Directory>
+
+    # Perl script
+    # Note: to avoid manager stay in memory, we don't use ModPerl::Registry
+    #       by default. Change this to increase manager performances
+    <Files *.pl>
+        SetHandler cgi-script
+        #SetHandler perl-script
+        #PerlResponseHandler ModPerl::Registry
+    </Files>
+
+    # Directory index
+    <IfModule mod_dir.c>
+        DirectoryIndex index.pl index.html
+    </IfModule>
+
+    <Location />
+        <IfModule mod_deflate.c>
+                AddOutputFilterByType DEFLATE text/html text/plain text/xml text/javascript text/css
+                SetOutputFilter DEFLATE
+                BrowserMatch ^Mozilla/4 gzip-only-text/html
+                BrowserMatch ^Mozilla/4\.0[678] no-gzip
+                BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
+                SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary
+        </IfModule>
+        <IfModule mod_headers.c>
+                Header append Vary User-Agent env=!dont-vary
+        </IfModule>
+    </Location>
+    <Location /doc/>
+        <IfModule mod_expires.c>
+                ExpiresActive On
+                ExpiresDefault "access plus 1 month"
+        </IfModule>
+    </Location>
+    <Location /skins/>
+        <IfModule mod_expires.c>
+                ExpiresActive On
+                ExpiresDefault "access plus 1 month"
+        </IfModule>
+    </Location>
+</VirtualHost>
+
--- a/_example/etc/portal-apache2.X.conf
+++ b/_example/etc/portal-apache2.X.conf
+#====================================================================
+# Apache configuration for LemonLDAP::NG Portal
+#====================================================================
+
+# Uncomment this if no previous NameVirtualHost declaration
+#NameVirtualHost __VHOSTLISTEN__
+
+# Portal Virtual Host (auth.__DNSDOMAIN__)
+<VirtualHost __VHOSTLISTEN__>
+    ServerName auth.__DNSDOMAIN__
+
+    # DocumentRoot
+    DocumentRoot __PORTALDIR__
+    <Directory __PORTALDIR__>
+        <IfVersion >= 2.3>
+            Require all granted
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Allow from all
+        </IfVersion>
+        Options +ExecCGI +FollowSymLinks
+    </Directory>
+
+    # Perl script
+    <Files *.pl>
+        SetHandler perl-script
+        PerlResponseHandler ModPerl::Registry
+    </Files>
+
+    <IfModule mod_dir.c>
+        DirectoryIndex index.pl index.html
+    </IfModule>
+
+    # SOAP functions for sessions management (disabled by default)
+    <Location /index.pl/adminSessions>
+        <IfVersion >= 2.3>
+            Require all denied
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Deny from all
+        </IfVersion>
+    </Location>
+
+    # SOAP functions for sessions access (disabled by default)
+    <Location /index.pl/sessions>
+        <IfVersion >= 2.3>
+            Require all denied
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Deny from all
+        </IfVersion>
+    </Location>
+
+    # SOAP functions for configuration access (disabled by default)
+    <Location /index.pl/config>
+        <IfVersion >= 2.3>
+            Require all denied
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Deny from all
+        </IfVersion>
+    </Location>
+
+    # SOAP functions for notification insertion (disabled by default)
+    <Location /index.pl/notification>
+        <IfVersion >= 2.3>
+            Require all denied
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Deny from all
+        </IfVersion>
+    </Location>
+
+    # SAML2 Issuer
+    <IfModule mod_rewrite.c>
+        RewriteEngine On
+        RewriteRule ^/saml/metadata /metadata.pl
+        RewriteRule ^/saml/.* /index.pl
+    </IfModule>
+
+    # CAS Issuer
+    <IfModule mod_rewrite.c>
+        RewriteEngine On
+        RewriteRule ^/cas/.* /index.pl
+    </IfModule>
+
+    # OpenID Issuer
+    <IfModule mod_rewrite.c>
+        RewriteEngine On
+        RewriteRule ^/openidserver/.* /index.pl
+    </IfModule>
+
+    <Location />
+        <IfModule mod_deflate.c>
+                AddOutputFilterByType DEFLATE text/html text/plain text/xml text/javascript text/css
+                SetOutputFilter DEFLATE
+                BrowserMatch ^Mozilla/4 gzip-only-text/html
+                BrowserMatch ^Mozilla/4\.0[678] no-gzip
+                BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
+                SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary
+        </IfModule>
+        <IfModule mod_headers.c>
+                Header append Vary User-Agent env=!dont-vary
+        </IfModule>
+    </Location>
+    <Location /skins/>
+        <IfModule mod_expires.c>
+                ExpiresActive On
+                ExpiresDefault "access plus 1 month"
+        </IfModule>
+    </Location>
+</VirtualHost>
+
+##############################################
+## Best performance under ModPerl::Registry ##
+##############################################
+
+# Uncomment this to increase performance of Portal:
+<Perl>
+    #require Lemonldap::NG::Portal::SharedConf;
+    #Lemonldap::NG::Portal::SharedConf->compile(
+    #    qw(delete header cache read_from_client cookie redirect unescapeHTML));
+    # Uncomment this line if you use Lemonldap::NG menu
+    #require Lemonldap::NG::Portal::Menu;
+    # Uncomment this line if you use portal SOAP capabilities
+    #require SOAP::Lite;
+</Perl>
+
--- a/_example/etc/test-apache2.X.conf
+++ b/_example/etc/test-apache2.X.conf
+#====================================================================
+# Apache configuration for LemonLDAP::NG sample applications
+#====================================================================
+
+# Uncomment this if no previous NameVirtualHost declaration
+#NameVirtualHost __VHOSTLISTEN__
+
+# Sample application
+<VirtualHost __VHOSTLISTEN__>
+    ServerName test1.__DNSDOMAIN__
+    ServerAlias test2.__DNSDOMAIN__
+
+    # SSO protection
+    PerlHeaderParserHandler Lemonldap::NG::Handler
+
+    # DocumentRoot
+    DocumentRoot __TESTDIR__
+    <Directory __TESTDIR__>
+        <IfVersion >= 2.3>
+            Require all granted
+        </IfVersion>
+        <IfVersion < 2.3>
+            Order Deny,Allow
+            Allow from all
+        </IfVersion>
+        Options +ExecCGI
+    </Directory>
+
+    # Perl script (application test is written in Perl)
+    <Files *.pl>
+        SetHandler perl-script
+        PerlResponseHandler ModPerl::Registry
+
+        # Display Menu
+        PerlOutputFilterHandler Lemonldap::NG::Handler::Menu
+
+    </Files>
+
+    # Directory index
+    <IfModule mod_dir.c>
+        DirectoryIndex index.pl index.html
+    </IfModule>
+
+</VirtualHost>
+