source: trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf @ 2842

Last change on this file since 2842 was 2842, checked in by andersk, 5 years ago
Updates for MITnet turning into something else that rhymes with MITnet
File size: 2.0 KB
RevLine 
[623]1Alias /__scripts/heartbeat /afs/athena.mit.edu/contrib/scripts/web_scripts/heartbeat
[2257]2Alias /__scripts/django/static/admin /usr/lib/python2.7/site-packages/django/contrib/admin/static/admin
[2676]3Alias /__scripts /etc/httpd/scripts-special
[604]4
[2703]5Alias /.well-known/acme-challenge /etc/httpd/scripts-special/.well-known/acme-challenge
6
[2676]7<Directory /etc/httpd/scripts-special>
[603]8    <Files *>
9        SetHandler none
10    </Files>
[2675]11    SSILegacyExprParser off
[603]12</Directory>
13
[2257]14<Directory /usr/lib/python2.7/site-packages/django/contrib/admin/static/admin>
[1039]15    <Files *>
16        SetHandler none
17    </Files>
18</Directory>
19
[603]20<Location /__scripts/needcerts>
21    RewriteEngine On
[708]22
[603]23    RewriteCond %{HTTP_HOST} !:444$
[708]24    RewriteCond %{SERVER_NAME} ^(.*\.)?scripts$
25    RewriteCond %{THE_REQUEST} ^[^\ ]*\ (.*)\ .*
26    RewriteRule ^ https://%{SERVER_NAME}.mit.edu:444%1 [L,R]
27
28    RewriteCond %{HTTP_HOST} !:444$
[603]29    RewriteCond %{SERVER_NAME} !=scripts-cert.mit.edu
30    RewriteCond %{SERVER_NAME} !=scripts-cert
31    RewriteCond %{THE_REQUEST} ^[^\ ]*\ (.*)\ .*
32    RewriteRule ^ https://%{SERVER_NAME}:444%1 [L,R]
33
[1483]34    RewriteCond %{HTTP_USER_AGENT} Mac\ OS\ X.*AppleWebKit
[2676]35    RewriteRule /etc/httpd/scripts-special/needcerts(.*) /__scripts/certerror$1 [L]
[1483]36
[2676]37    RewriteRule /etc/httpd/scripts-special/needcerts(.+) $1 [L]
38    RewriteRule /etc/httpd/scripts-special/needcerts /__scripts/unauthorized.html [L]
[603]39</Location>
[1483]40
[2591]41<IfModule ssl_module>
[2119]42<Location /__scripts/certerror>
[1483]43    SSLVerifyClient require
[2676]44    RewriteRule /etc/httpd/scripts-special/certerror(.+) $1 [L]
45    RewriteRule /etc/httpd/scripts-special/certerror /__scripts/unauthorized.html [L]
[1483]46</Location>
[2674]47</IfModule>
48
[2675]49ErrorDocument 403 /__scripts/forbidden.shtml
[2835]50
51<Directory /disabled>
52    Require all denied
53    ErrorDocument 403 /__scripts/disabled.html
54</Directory>
[2839]55
56# Generated from http://kb.mit.edu/confluence/x/F4DCAg, 2017-04-23
[2842]57SetEnvIf REMOTE_ADDR ^(10|18\.(\d\d?|1([0-37]\d|4[0-46-9]|5[024-9]|6[0135-9]|8[0-3679]|9[02389])|2(0[018]|1[248]|29|3[024589]|4[0-57-9]|5[0-245]))|128\.(3[01]|52))\. SCRIPTS_REMOTE_MITNET
Note: See TracBrowser for help on using the repository browser.