Revision 6 as of 2023-12-28 23:04:14

Clear message

UCC uses Apache 2 as a webserver for its website and member web-hosting services.

Web Serving

Member domains (username.ucc.asn.au) and the main website resolve as CNAMEs to mussel.

The configuration for member VirtualHosts is on mussel in /etc/apache2/sites-enabled/members.conf. These VirtualHost entries simply set the DocumentRoot to the /public-html folder in the user's home directory. The members.conf configuration file is automatically generated by zonemake.py, a Python script which manages DNS zones on monnik.

SSL

Historically, HTTPS services were hosted under https://secure.ucc.asn.au, which also points to mussel (though it uses the interface listening on 130.95.13.28, not 130.95.13.18). Originally, this was because we didn't want to buy an SSL certificate for every machine. Now we have a wildcard certificate, so subdomains1 can be accessed using HTTPS as well! Have a look at /etc/apache2/sites-available/secure.conf on mussel to see how it's configured (it's world-readable).

  1. SSL wildcards are not actually wildcards — they only support one level of subdomain, so *.ucc.asn.au won't match something.weird.ucc.asn.au. (1)