#
# This file holds the configuration of the Web server
# HOSTNAME.
# The complete server content is managed by TWiki.
#
# There exists two instances of that server: http and https. I.e., one
# where traffic is unencrypted and one where traffic is secure. Any
# traffic that sends plain-text passwords is done over SSL.
#

<VirtualHost IP_ADDRESS:80>

ServerName HOSTNAME
#ServerAlias alias.domain.tld
UseCanonicalName On

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
ErrorLog /var/log/apache2/error.log
CustomLog /var/log/apache2/access.log combined
# Rewrite log is only needed for debugging.
RewriteLog /var/log/apache2/rewrite.log
RewriteLogLevel 0


#
# Content basics
#

DocumentRoot "TWIKI_CONTENT"

# Turn over content management to TWiki:
Include include.d/twiki.full-server

# Let's also add a specification for the homepage of this server.
# We refrain from rewrite-by-redirection; we might want to use a different
# page in the future for the homepage.
RewriteRule ^/$		TWIKI_DIR/bin/view/Main/WebHome [L]

</VirtualHost>


<VirtualHost IP_ADDRESS:443>

ServerName HOSTNAME
UseCanonicalName On

# The www.dante.de cert has (actually, should have) HOSTNAME in its
# alternate names list.
SSLEngine on
SSLCertificateKeyFile	ssl/HOSTNAME.key
SSLCertificateFile	ssl/HOSTNAME.crt
<Location "/">
	SSLRequireSSL
</Location>

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
ErrorLog /var/log/apache2/ssl-error.log
CustomLog /var/log/apache2/ssl-access.log combined
CustomLog /var/log/apache2/ssl-request.log \
	"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
# Rewrite log is only needed for debugging.
RewriteLog /var/log/apache2/HOSTNAME/ssl-rewrite.log
RewriteLogLevel 0


#
# Content basics
#

DocumentRoot "TWIKI_CONTENT"

# Turn over content management to TWiki:
Include include.d/twiki.full-server

</VirtualHost>