##=========================================================
## 1) Basic apache configuration
##=========================================================

## Include this file in your standard httpd.conf. 
## When using SuSE Linux, just copy it to /etc/apache2/vhost.d/myolat.conf
## In other Linuxes you can include it to the main apache config file. In most
## cases you can add the following line to /etc/httpd/httpd.conf:

# Include  "@base.dir@/conf/httpd.conf"

## Listen to your @apache.host@ interface on port @apache.host.port@
## In most circumstances you don't need to do anything here. port 80 is default
## Most people install it on port 80, and usually in the default apache configuration there
## is already  a Listen on port 80. If you do not have port 80, uncomment the following line

#Listen @server.port@

## Tell apache that all requests on port @apache.host.port@ for any ip address is a
## virtual host request. In most cases you don't have to do anything since port 80
## is the default port.

#NameVirtualHost *:@server.port@


##=========================================================
## 2) Tomcat JK Connector basic configuration for Apache
##=========================================================
## (These settings have to match @base.dir@/conf/workers.properties)
## If you have several webapps that use the connector, this section must be included only once!
##
<IfModule mod_jk.c>
	JkWorkersFile "@base.dir@/conf/workers.properties"
	JkRequestLogFormat "%w %V %T %r" 	
	JkLogLevel error
	JkOptions +ForwardURICompatUnparsed
</IfModule>																		

##=========================================================
## 3) Apache OLAT configuration as virtual host
##=========================================================
<VirtualHost *:@server.port@>
        ServerName @server.domainname@
        ServerAdmin @adminemail@
        
        ## Mod JK configuration
		## (These settings have to match @base.dir@/conf/workers.properties)
		<IfModule mod_jk.c>
			JkLogFile "@log.dir@/mod_jk.log.txt"
			JkMount @tomcat.contextpath@/* worker1
			JkMount @tomcat.contextpath@ worker1
		</IfModule>

   		## Redirect everything unspecific to the OLAT application
        RedirectMatch permanent ^/$		@server.contextpath@/dmz/
        RedirectMatch permanent ^@server.contextpath@$	@server.contextpath@/dmz/
                
		## Main server config
        DocumentRoot 		"@base.dir@/htdocs"
        AccessFileName 		.htaccess
        
        ## Apache config files
		ErrorLog  "@log.dir@/apache_error.log"
		CustomLog "@log.dir@/apache_access.log" combined

        
		## OLAT monitoring alias
		Alias /monitoring 	"@userdata.dir@/monitoring"		
		Alias /webalizer 	"@userdata.dir@/webalizer"		

		## Security settings
        <Directory "@base.dir@/htdocs">
	            Options Indexes IncludesNoExec
                AllowOverride None
                Order deny,allow
    			Allow from all
        </Directory>
        <Directory "@userdata.dir@/monitoring">
                Options -Indexes IncludesNoExec FollowSymLinks
                AllowOverride None
                Order deny,allow
    			Allow from all
        </Directory>
        <Directory "@userdata.dir@/webalizer">
                Options -Indexes IncludesNoExec FollowSymLinks
                AllowOverride None
                Order deny,allow
    			Allow from all
        </Directory>
        		
		## Special OLAT error pages
        ErrorDocument 403 /403error.html
        ErrorDocument 404 /403error.html
        ErrorDocument 500 /500error.html

		## Webapp icon file
        AddType text/html .html .htm
		AddType image/x-icon .ico
</VirtualHost>



##=========================================================
## 3) Apache OLAT configuration as virtual host using SSL
##=========================================================
<IfDefine SSL>
<IfDefine !NOSSL>

<VirtualHost *:@server.port.ssl@>
        ServerName @server.domainname@
        ServerAdmin @adminemail@
        
        ## Mod JK configuration
		## (These settings have to match @base.dir@/conf/workers.properties)
		<IfModule mod_jk.c>
			JkLogFile "@log.dir@/mod_jk.log.txt"
			JkMount @server.contextpath@/* worker1
			JkMount @server.contextpath@ worker1
		</IfModule>

   		## Redirect everything unspecific to the OLAT application
        RedirectMatch permanent ^/$		@server.contextpath@/dmz/
        RedirectMatch permanent ^@server.contextpath@$	@server.contextpath@/dmz/
                
		## Main server config
        DocumentRoot 		"@base.dir@/htdocs"
        AccessFileName 		.htaccess
        
        ## Apache config files
		ErrorLog  "@log.dir@/apache_error_ssl.log"
		CustomLog "@log.dir@/apache_access_ssl.log" combined
        
		## OLAT monitoring alias
		Alias /monitoring 	"@userdata.dir@/monitoring"		
		Alias /webalizer 	"@userdata.dir@/webalizer"		

		## Security settings
        <Directory "@base.dir@/htdocs">
	            Options Indexes IncludesNoExec
                AllowOverride None
                Order deny,allow
    			Allow from all
        </Directory>
        <Directory "@userdata.dir@/monitoring">
                Options -Indexes IncludesNoExec FollowSymLinks
                AllowOverride None
                Order deny,allow
    			Allow from all
        </Directory>
        <Directory "@userdata.dir@/webalizer">
                Options -Indexes IncludesNoExec FollowSymLinks
                AllowOverride None
                Order deny,allow
    			Allow from all
        </Directory>
        		
		## Special OLAT error pages
        ErrorDocument 403 /403error.html
        ErrorDocument 404 /403error.html
        ErrorDocument 500 /500error.html

		## Webapp icon file
        AddType text/html .html .htm
		AddType image/x-icon .ico
		
		## SSL configuration
        SSLEngine on
        SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile @base.dir@/conf/certs/server.crt
        SSLCertificateKeyFile @base.dir@/conf/certs/server.key
        SetEnvIf User-Agent ".*MSIE.*" \
                 nokeepalive ssl-unclean-shutdown \
                 downgrade-1.0 force-response-1.0		
</VirtualHost>

</IfDefine>
</IfDefine>