add rewrites

diff --git a/customer/spk-spar-checker/production.yaml b/customer/spk-spar-checker/production.yaml
index 786e559e8754e4628410bf55270156734e7171c2..9034a713f83d558d8ffb18f541ab67ca815f31be 100644 (file)
--- a/customer/spk-spar-checker/production.yaml
+++ b/customer/spk-spar-checker/production.yaml
@@ -32,7 +32,7 @@ infra::profile::apache::pp_vhosts:
       - www.spar-checker.de
       - www.sparkasse-sparchecker.de
     ssl: false
-    docroot_owner: apache
+    docroot_owner: deploy.spk
     docroot_group: apache
     docroot_mode: '0775'
     directories:
@@ -56,4 +56,18 @@ infra::profile::apache::pp_vhosts:
         auth_digest_algorithm: MD5
         auth_user_file: '/etc/httpd/htdigest'
         auth_require: 'valid-user'
+    setenvif:
+      - 'HTTPS on X-Forwarded-Proto=https'
+      - 'HTTPS on HTTPS=on'
+    rewrites:
+      - comment: 'http to https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP:HTTPS} !=on'
+        rewrite_rule:
+          - '^(.*)$ https://spar-checker-de.pixelpark.net$1 [R=301,L]'
+      - comment: 'Alle Aliase auf Servername'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} !^spar-checker-de.pixelpark.net$ [NC]'
+        rewrite_rule:
+          - '^(.*)$ https://spar-checker-de.pixelpark.net$1 [R=301,L]'