debian: update config files

debian/apache-example.conf

@@ -1,20 +1,52 @@
 <VirtualHost *:80>
-	ServerAdmin webmaster@example.com
-	ServerName montpellier.example.com
+    ServerAdmin webmaster@example.com
+    ServerName montpellier.example.com
 
-	Alias /static /var/lib/compte-agglo-montpellier/static
+    Alias /static /var/lib/compte-agglo-montpellier/static
 
-	<Proxy *>
-	    Order deny,allow
-	    Allow from all
-	</Proxy>
+    <Proxy *>
+        Order deny,allow
+        Allow from all
+    </Proxy>
 
-	ProxyPass /static !
-	ProxyPass / http://127.0.0.1:8094/
-	ProxyPassReverse / http://127.0.0.1:8094/
+    ProxyPass /static !
+    ProxyPass / http://127.0.0.1:8094/
+    ProxyPassReverse / http://127.0.0.1:8094/
+    ProxyPreserveHost on
 
-	LogLevel warn
-	ErrorLog /var/log/apache2/error.log
-	CustomLog /var/log/apache2/access.log combined
+    LogLevel warn
+    ErrorLog /var/log/apache2/error.log
+    CustomLog /var/log/apache2/access.log combined
+</VirtualHost>
+
+<VirtualHost *:443>
+    ServerAdmin webmaster@example.com
+    ServerName montpellier.example.com
+
+    Alias /static /var/lib/compte-agglo-montpellier/static
+
+    SSLEngine on
+#    SSLCertificateFile  /etc/ssl/certs/ssl-cert-snakeoil.pem
+#    SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
+
+    Alias /static /var/lib/compte-agglo-montpellier/static
+
+    RequestHeader set X-Forwarded-SSL on
+    RequestHeader set X-Forwarded-Protocol ssl
+    RequestHeader set X-Forwarded-Proto https
+
+    <Proxy *>
+        Order deny,allow
+        Allow from all
+    </Proxy>
+
+    ProxyPass /static !
+    ProxyPass / http://127.0.0.1:8094/
+    ProxyPassReverse / http://127.0.0.1:8094/
+    ProxyPreserveHost on
+
+    LogLevel warn
+    ErrorLog /var/log/apache2/compteagglo.local-error.log
+    CustomLog /var/log/apache2/compteagglo.local-access.log combined
 </VirtualHost>
 

debian/changelog

@@ -1,3 +1,9 @@
+compte-agglo-montpellier (0.1.68.g3e20239-2) stable; urgency=low
+
+  * update config files
+
+ -- Jérôme Schneider <jschneider@entrouvert.com>  Wed, 19 Jun 2013 12:18:56 +0200
+
 compte-agglo-montpellier (0.1.68.g3e20239-1) stable; urgency=low
 
   * update to last master commit

debian/compte-agglo-montpellier.conf

@@ -10,7 +10,24 @@ export STATIC_ROOT='/var/lib/compte-agglo-montpellier/static'
 export LOG_ROOT='/var/log/compte-agglo-montpellier/compte-agglo-montpellier.log'
 
 # secret to CHANGE
-export SECRET_KEY="changeme"
+export SECRET_KEY='changeme'
 
 # We are behind a reverse proxy so we accept every hosts
 export ALLOWED_HOSTS='*'
+
+# You MUST set RSA key here
+# you can generate this key with this commands :
+# openssl genrsa -out saml.key 2048
+# openssl rsa -in saml.key -pubout -out saml.pub
+#export SAML_SIGNATURE_PUBLIC_KEY=""
+#export SAML_SIGNATURE_PRIVATE_KEY=""
+
+# Enables some features
+#export IDP_SAML2='yes'
+#export IDP_OPENID='yes'
+#export IDP_CAS='yes'
+#export AUTH_SAML2='yes'
+#export AUTH_OPENID='yes'
+#export AUTH_SSL='yes'
+#export AUTH_OATH='yes'
+