########################################################################
# Maintenance page Apache config.  A single page "unavailable.html"
# is displayed for all HTTP/HTTPS access to *.royaltyshare.com.  Here's
# how to enable/disable the maintenance page.  You must do this as root
# on each web server.
#
# >>> To enable the maintenance page:
# # Remove the portal.conf and rshosts.conf links.
# rm rshosts.conf
# rm portal.conf
# # Create a link to rshosts_maint.conf
# ln -s /app/tools/sysadmin/conf/apache2/rshosts_maint.conf rshosts_maint.conf
# # Restart web server.
# service httpd restart
# 
# ---- To restore normal site operations.
# cd /etc/httpd/conf.d
# rm rshosts_maint.conf
# ln -s /app/tools/sysadmin/conf/apache2/rshosts.conf rshosts.conf
# ln -s /app/tools/sysadmin/conf/apache2/portal.conf portal.conf
# service httpd restart
#
########################################################################

####
#    This file should be copied from 
#    /app/tools/sysadmin/apache2/rshosts.conf.  For some reason with 
#    the apache configuration on STAGING64 <Perl> sections were being
#    ignored.  I suspect this has to do with SELinux, but I haven't 
#    to figured out how to fix it yet.
#
#    Anyway, don't edit this file directly.
####

# This is an attempt to get remote IP stuff working, but doesn't seem
# to at this time (Apr 2017). This is supposed to indicate who we trust
# as a source for this header info (or something like that).
<IfModule log_config_module>
    RemoteIPHeader X-Forwarded-For
    RemoteIPInternalProxy 172.31.0.0/16
</IfModule>

User apache
Group apache

ServerAdmin webmaster@royaltyshare.com
ServerName www.royaltyshare.com

LogLevel warn
LogFormat "%v %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
#LogFormat "%v %h %P %l %u %t \"%r\" %>s %b" common
#LogFormat "%v %h \#%{remoteip-proxy-ip-list}n\# %P %l %u %t \"%r\" %>s %b" common
LogFormat "%v %h %a %{remoteip-proxy-ip-list}n #%{X-Forwarded-For}i# %P %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

ErrorLog /etc/httpd/logs/error_log
CustomLog /etc/httpd/logs/access_log common

DirectoryIndex index.html

ExpiresActive On
<Location /production>
    Options Indexes Includes FollowSymLinks MultiViews
    Require all granted
    # 1 year
    ExpiresDefault A31536000
    Header append Cache-Control "public"
</Location>

<Location /images/charts>
    Options Indexes Includes FollowSymLinks MultiViews
    Require all granted
    # 1 year
    ExpiresDefault A31536000
    Header append Cache-Control "public"
</Location>



##<Location /app/tools/sysadmin/conf/apache2>
#<Location /sysadmin/conf/apache2>
#    Options Indexes Includes FollowSymLinks MultiViews
#    Require all granted
#</Location>
########################################################################
# Configure RoyaltyShare virtual hosts
########################################################################

###
#  Login Website (login.royaltyshare.com)
###

<VirtualHost *:80>
    ServerAdmin webmaster@royaltyshare.com
    ServerAlias *.royaltyshare.com
    VirtualDocumentRoot "/app/tools/"

    RewriteEngine On

    # Let JS and CSS through
    RewriteCond %{REQUEST_FILENAME} !.+\.(js|css)$
    RewriteCond %{REQUEST_URI} !=/unavailable.html
    RewriteRule "^(.+)$" "/common/production/html/unavailable.html" [PT]

    <Directory "/app/tools/">
        Options Indexes Includes FollowSymLinks MultiViews
        Require all granted
    </Directory>
</VirtualHost>

<VirtualHost *:443>
    ServerAdmin webmaster@royaltyshare.com
    ServerAlias *.royaltyshare.com

    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
    SSLCertificateKeyFile /etc/httpd/ssl.key/server.key
    SSLCertificateFile /etc/httpd/ssl.crt/STAR_royaltyshare_com.crt
    SSLCertificateChainFile /etc/httpd/ssl.crt/STAR_royaltyshare_com.ca-bundle

    VirtualDocumentRoot "/app/tools/"

    RewriteEngine On

    # Let JS and CSS through
    RewriteCond %{REQUEST_FILENAME} !.+\.(js|css)$
    RewriteCond %{REQUEST_URI} !=/unavailable.html
    RewriteRule "^(.+)$" "/common/production/html/unavailable.html" [PT]

    <Directory "/app/tools/">
        Options Indexes Includes FollowSymLinks MultiViews
        Require all granted
    </Directory>
</VirtualHost>