|
Size: 1391
Comment: Updated to reflect current configuration: Apache on mooneye -> mussel, info about members.conf being auto-generated by zonemake
|
Size: 1392
Comment: Prevent moinwiki auto-link to something that isn't intended to be an article
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 6: | Line 6: |
| The configuration for member VirtualHosts is on mussel in {{{/etc/apache2/sites-enabled/members.conf}}}. These !VirtualHost entries simply set the !DocumentRoot to the {{{/public-html}}} folder in the user's home directory. The {{{members.conf}}} configuration file is automatically generated by {{{zonemake.py}}}, a Python script which manages DNS zones on [[Monnik|monnik]]. | The configuration for member !VirtualHosts is on mussel in {{{/etc/apache2/sites-enabled/members.conf}}}. These !VirtualHost entries simply set the !DocumentRoot to the {{{/public-html}}} folder in the user's home directory. The {{{members.conf}}} configuration file is automatically generated by {{{zonemake.py}}}, a Python script which manages DNS zones on [[Monnik|monnik]]. |
UCC uses Apache 2 as a webserver for its website and member web-hosting services.
Web Serving
Member domains (username.ucc.asn.au) and the main website resolve as CNAMEs to mussel.
The configuration for member VirtualHosts is on mussel in /etc/apache2/sites-enabled/members.conf. These VirtualHost entries simply set the DocumentRoot to the /public-html folder in the user's home directory. The members.conf configuration file is automatically generated by zonemake.py, a Python script which manages DNS zones on monnik.
SSL
Historically, HTTPS services were hosted under https://secure.ucc.asn.au, which also points to mussel (though it uses the interface listening on 130.95.13.28, not 130.95.13.18). Originally, this was because we didn't want to buy an SSL certificate for every machine. Now we have a wildcard certificate, so subdomains1 can be accessed using HTTPS as well! Have a look at /etc/apache2/sites-available/secure.conf on mussel to see how it's configured (it's world-readable).
SSL wildcards are not actually wildcards — they only support one level of subdomain, so *.ucc.asn.au won't match something.weird.ucc.asn.au. (1)
