File inspector-apache.conf.j2 of Package ironic

# Licensed under the Apache License, Version 2.0 (the"License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed
# under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES
# OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the
# specific language governing permissions and limitations
# under the License.

Listen 5050
{% if env.LISTEN_ALL_INTERFACES | lower == "true" %}
<VirtualHost *:5050>
{% else %}
<VirtualHost {{ env.IRONIC_INSPECTOR_HOST }}:5050>
{% endif %}
ProxyPass "/"  "http://127.0.0.1:{{ env.IRONIC_INSPECTOR_PRIVATE_PORT }}/"
ProxyPassReverse "/"  "http://127.0.0.1:{{ env.IRONIC_INSPECTOR_PRIVATE_PORT }}/"

SetEnv APACHE_RUN_USER ironic-inspector
SetEnv APACHE_RUN_GROUP ironic-inspector

ErrorLog /dev/stdout
LogLevel debug
CustomLog /dev/stdout combined

ServerName {{ env.IRONIC_INSPECTOR_HTTPD_SERVER_NAME }}

SSLEngine On
SSLProtocol {{ env.IRONIC_SSL_PROTOCOL }}
SSLCertificateFile {{ env.IRONIC_INSPECTOR_CERT_FILE }}
SSLCertificateKeyFile {{ env.IRONIC_INSPECTOR_KEY_FILE }}

{% if "INSPECTOR_HTPASSWD" in env and env.INSPECTOR_HTPASSWD | length %}
<Location />
    AuthType Basic
    AuthName "Restricted area"
    AuthUserFile "/etc/ironic-inspector/htpasswd"
    Require valid-user
</Location>

<Location ~ "^/(v1/?)?$" >
    Require all granted
</Location>

<Location /v1/continue >
    Require all granted
</Location>
{% endif %}
</VirtualHost>