Implemented example configuration file for Hawat web interface deployment with Apache2.

(Redmine issue: #3387)

conf/apache/hawat-mod-wsgi.conf

@@ -7,10 +7,10 @@
 # Use of this source is governed by the MIT license, see LICENSE file.
 #-------------------------------------------------------------------------------
 
-WSGIDaemonProcess hawat user=mek group=mek threads=5
-WSGIScriptAlias /hawat-ng /home/mek/Workspace/mentat-ng/lib/hawat/hawat/hawat.wsgi
+WSGIDaemonProcess hawat user=mentat group=mentat threads=5
+WSGIScriptAlias /mentat /usr/local/bin/mentat-hawat.wsgi
 
-<Directory /home/mek/Workspace/mentat-ng/lib/hawat/hawat>
+<Directory /usr/lib/python3/dist-packages/hawat>
     WSGIProcessGroup hawat
     WSGIApplicationGroup %{GLOBAL}
     Require all granted

conf/apache/site_mentat-ng.conf.example

+#-------------------------------------------------------------------------------
+# Example APACHE web server configuration file for HAWAT
+#
+# This file is part of Mentat system (https://mentat.cesnet.cz/).
+#
+# Copyright (C) since 2011 CESNET, z.s.p.o (http://www.ces.net/)
+# Use of this source is governed by the MIT license, see LICENSE file.
+#-------------------------------------------------------------------------------
+
+
+<IfModule mod_ssl.c>
+    <VirtualHost _default_:443>
+        ServerAdmin webmaster@mentat.organization.org
+        ServerName mentat.organization.org
+
+        DocumentRoot /var/www
+
+        WSGIDaemonProcess hawat user=mentat group=mentat threads=5
+        WSGIScriptAlias /mentat /usr/local/bin/mentat-hawat.wsgi
+
+        <Location />
+            Require all granted
+        </Location>
+
+        <Directory /usr/lib/python3/dist-packages/hawat>
+            WSGIProcessGroup hawat
+            WSGIApplicationGroup %{GLOBAL}
+            Require all granted
+        </Directory>
+
+        <Location /mentat/auth_env/login>
+            AuthType shibboleth
+            ShibRequireSession On
+            Require valid-user
+        </Location>
+        <Location /mentat/auth_env/register>
+            AuthType shibboleth
+            ShibRequireSession On
+            Require valid-user
+        </Location>
+
+        RewriteEngine on
+        # Rewrite the path when accessed without a trailing slash.
+        RewriteRule ^/mentat$ /mentat/ [R]
+        # Rewrite webserver root to mentat application.
+        RewriteRule ^/$ /mentat/ [R]
+
+
+        ErrorLog ${APACHE_LOG_DIR}/error.log
+
+        # Possible values: debug, info, notice, warn, error, crit, alert, emerg.
+        LogLevel warn
+
+        CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
+
+        SSLEngine on
+        #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
+
+        # Using custom server certificates
+        SSLCertificateFile      /etc/ssl/servercert/cert.pem
+        SSLCertificateKeyFile   /etc/ssl/servercert/key.pem
+        SSLCertificateChainFile /etc/ssl/servercert/chain.pem
+
+        <FilesMatch "\.(cgi|shtml|phtml|php)$">
+                SSLOptions +StdEnvVars
+        </FilesMatch>
+        <Directory /usr/lib/cgi-bin>
+                SSLOptions +StdEnvVars
+        </Directory>
+
+        BrowserMatch "MSIE [2-6]" \
+                nokeepalive ssl-unclean-shutdown \
+                downgrade-1.0 force-response-1.0
+        # MSIE 7 and newer should be able to use keepalive
+        BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
+
+    </VirtualHost>
+</IfModule>