openstack-ansible-os_horizon/templates/openstack_dashboard.conf.j2
Adrien Cunin dfbc2a56b6 Set WSGIApplicationGroup %{GLOBAL} as recommended
mod_wsgi hangs trying to import the recent versions of
python-gobject-base used by python-keyring library, which is in turn
used by python-keystoneclient. This does not happen if the
WSGIApplicationGroup is global.

Change-Id: I4c7408699fddf327feb1c3b47e8e47cf2dd946f1
Closes-Bug: #1708655
Closes-Bug: #1624791
Related-Bug: #1700176
2017-12-18 16:47:22 +01:00

59 lines
2.0 KiB
Django/Jinja

# {{ ansible_managed }}
{% if not horizon_external_ssl | bool %}
<VirtualHost *:80>
ServerName {{ horizon_server_name }}
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{HTTP_HOST}/$1 [R,L]
</VirtualHost>
{% endif %}
<VirtualHost *:{% if not horizon_external_ssl | bool %}443{% else %}80{% endif %}>
ServerName {{ horizon_server_name }}
LogLevel {{ horizon_log_level }}
ErrorLog /var/log/horizon/horizon-error.log
CustomLog /var/log/horizon/ssl_access.log {{ horizon_apache_custom_log_format }}
Options +FollowSymLinks
{% if not horizon_external_ssl | bool %}
SSLEngine on
SSLCertificateFile {{ horizon_ssl_cert }}
SSLCertificateKeyFile {{ horizon_ssl_key }}
{% if horizon_user_ssl_ca_cert is defined -%}
SSLCACertificateFile {{ horizon_ssl_ca_cert }}
{% endif -%}
SSLCompression Off
SSLProtocol {{ horizon_ssl_protocol }}
SSLHonorCipherOrder On
SSLCipherSuite {{ horizon_ssl_cipher_suite }}
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
{% else %}
RequestHeader set {{ horizon_secure_proxy_ssl_header }} "https"
{% endif %}
WSGIScriptAlias / {{ horizon_lib_wsgi_file }}
WSGIDaemonProcess horizon user={{ horizon_system_user_name }} group={{ horizon_system_group_name }} processes={{ horizon_wsgi_processes | default(horizon_wsgi_threads) }} threads={{ horizon_wsgi_threads }} python-path={{ horizon_bin | dirname }}/lib/python2.7/site-packages
WSGIProcessGroup horizon
WSGIApplicationGroup %{GLOBAL}
<Directory {{ horizon_lib_wsgi_file | dirname }}>
<Files django.wsgi>
Order allow,deny
allow from all
Require all granted
</Files>
</Directory>
Alias /static {{ horizon_lib_dir }}/static/
<Directory {{ horizon_lib_dir }}/static/>
Options -FollowSymlinks
AllowOverride None
Order allow,deny
allow from all
Require all granted
</Directory>
</VirtualHost>