# -*- mode: apache -*-

<VirtualHost *:80>
    ServerName pod.localhost

    DocumentRoot /srv/pod/
    <Directory /srv/pod/>
        Options +Indexes
        Require all granted
    </Directory>

    # Forbid directory browsing of POD images; there are just too many.
    <DirectoryMatch "^/srv/pod/pictures/gtin/gtin-\d{3}">
        Options -Indexes
    </DirectoryMatch>

    ErrorLog ${APACHE_LOG_DIR}/error.log
    LogLevel warn
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>


<VirtualHost *:443>
    ServerName pod.localhost

    DocumentRoot /srv/pod/
    <Directory /srv/pod>
        Options +Indexes
        Require all granted
    </Directory>

    # Forbid directory browsing of POD images; there are just too many.
    <DirectoryMatch "^/srv/pod/pictures/gtin/gtin-\d{3}">
        Options -Indexes
    </DirectoryMatch>

    SSLEngine on
    SSLCertificateFile    /etc/ssl/certs/ssl-cert-snakeoil.pem
    SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key

    ErrorLog ${APACHE_LOG_DIR}/error.log
    LogLevel warn
    CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined

    BrowserMatch "MSIE [2-6]" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
</VirtualHost>