apache-vhost.conf.erb

<% if @params[:ssl] %>
<VirtualHost <%= @params[:site]['secure_ip'] || '*' %>:<%= @params[:magento]['apache']['secure_port'] %>>
  SSLEngine on
  SSLCertificateKeyFile <%= @params[:site]['ssl']['keyfile'] %>
  SSLCertificateFile <%= @params[:site]['ssl']['certfile'] %>
  <% if defined?(@params[:site]['ssl']['cacertfile']) and !@params[:site]['ssl']['cacertfile'].nil? %>
  SSLCACertificateFile <%= @params[:site]['ssl']['cacertfile'] %>
  <% end %>
  <% if defined?(@params[:site]['ssl']['certchainfile']) and !@params[:site]['ssl']['certchainfile'].nil? %>
  SSLCertificateChainFile <%= @params[:site]['ssl']['certchainfile'] %>
  <% end %>
  SSLProtocol <%= @params[:site]['ssl']['protocols'] %>
  SSLCipherSuite <%= @params[:site]['ssl']['ciphersuite'] %>
<% else %>
<VirtualHost *:<%= @params[:magento]['apache']['unsecure_port'] %>>
<% end %>

  ServerName <%= @params[:site][:servername] %>
  <% if defined?(@params[:site][:server_alias]) and !@params[:site][:server_alias].nil? %>
  ServerAlias <% @params[:site][:server_alias].each do |a| %><%= a %> <% end %>
  <% end %>

  DocumentRoot <%= @params[:magento]['dir'] %>

  LogLevel info
  ErrorLog <%= @params[:apache]['log_dir'] %>/<%= @params[:site][:servername] %>-error.log
  CustomLog <%= @params[:apache]['log_dir'] %>/<%= @params[:site][:servername] %>-access.log combined

  ServerSignature Off

<% if @params[:site]['developer_mode'] %>
  SetEnv MAGE_IS_DEVELOPER_MODE true
<% end %>
<% if @params[:site][:run_code] %>
  SetEnv MAGE_RUN_CODE <%= @params[:site][:run_code] %>
<% end %>

  <Directory />
    Options FollowSymLinks
    AllowOverride All
  </Directory>

  <Directory <%= @params[:magento]['dir'] %>>
    Options FollowSymLinks

    EnableMMAP <%= @params[:magento]['apache']['enable_mmap'] %>
    EnableSendfile <%= @params[:magento]['apache']['enable_sendfile'] %>

    <% if @params[:apache]['basic_username'] %>
        <% if @params[:apache]['allow_from'] %>
            Satisfy Any
        <% end %>
    AuthUserFile <%= @params[:magento]['dir'] %>/.htpasswd
    AuthType Basic
    AuthName "Protected System"
    Require valid-user

    SetEnvIf Request_URI ^/LICENSE.txt$ noauth=1
    Allow from env=noauth
    <% end  %>

    <% if @params[:magento]['apache']['parse_htaccess'] %>
    AllowOverride All
    <% else %>
    ## Apache optimisation by disabling the .htaccess parsing
    ## Directives for securing directorys have been added to this file
    AllowOverride None
    <% end %>
    Order allow,deny
    <% if @params[:apache]['allow_from'] %>
        <% @params[:apache]['allow_from'].each do |ip| %>
            Allow from <%= ip %>
        <% end %>
    <% else %>
        Allow from all
    <% end %>
    ############################################
    ## uncomment these lines for CGI mode
    ## make sure to specify the correct cgi php binary file name
    ## it might be /cgi-bin/php-cgi

    #    Action php5-cgi /cgi-bin/php5-cgi
    #    AddHandler php5-cgi .php

    ############################################
    ## GoDaddy specific options

    #   Options -MultiViews

    ## you might also need to add this line to php.ini
    ##     cgi.fix_pathinfo = 1
    ## if it still doesn't work, rename php.ini to php5.ini

    ############################################
    ## this line is specific for 1and1 hosting

    #AddType x-mapp-php5 .php
    #AddHandler x-mapp-php5 .php

    ############################################
    ## default index file

    DirectoryIndex index.php

    <IfModule mod_php5.c>

        ############################################
        ## adjust memory limit

        #    php_value memory_limit 64M
        php_value memory_limit <%= @params[:php]['memory_limit'] %>


        ############################################
        ## php tuning

        php_value max_execution_time <%= @params[:php]['max_execution_time'] %>
        php_value display_errors <%= @params[:php]['display_errors'] %>
        php_value html_errors <%= @params[:php]['html_errors'] %>
        php_value upload_max_filesize <%= @params[:php]['upload_max_filesize'] %>

        ############################################
        ## disable magic quotes for php request vars

        php_flag magic_quotes_gpc off

        ############################################
        ## disable automatic session start
        ## before autoload was initialized

        php_flag session.auto_start off

        php_flag session.gc_maxlifetime 3600

        ############################################
        ## enable resulting html compression

        #php_flag zlib.output_compression on

        ###########################################
        # disable user agent verification to not break multiple image upload

        php_flag suhosin.session.cryptua off

        ###########################################
        # turn off compatibility with PHP4 when dealing with objects

        php_flag zend.ze1_compatibility_mode Off

    </IfModule>

    <IfModule mod_security.c>
        ###########################################
        # disable POST processing to not break multiple image upload

        SecFilterEngine Off
        SecFilterScanPOST Off
    </IfModule>

    <IfModule mod_deflate.c>

        ############################################
        ## enable apache served files compression
        ## http://developer.yahoo.com/performance/rules.html#gzip

        # Insert filter on all content
        ###SetOutputFilter DEFLATE
        # Insert filter on selected content types only
        AddOutputFilterByType DEFLATE text/css application/x-javascript text/javascript text/x-component text/html text/richtext image/svg+xml text/plain text/xsd text/xsl text/xml image/x-icon
        #
        # Netscape 4.x has some problems...
        BrowserMatch ^Mozilla/4 gzip-only-text/html

        # Netscape 4.06-4.08 have some more problems
        BrowserMatch ^Mozilla/4\.0[678] no-gzip

        # MSIE masquerades as Netscape, but it is fine
        BrowserMatch \bMSIE !no-gzip !gzip-only-text/html

        # Don't compress images
        SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-gzip dont-vary

        # Make sure proxies don't deliver the wrong content
        Header append Vary User-Agent env=!dont-vary

    </IfModule>

    <IfModule mod_ssl.c>

        ############################################
        ## make HTTPS env vars available for CGI mode

        SSLOptions StdEnvVars

    </IfModule>

    <IfModule mod_rewrite.c>

        ############################################
        ## enable rewrites

        Options +FollowSymLinks
        RewriteEngine on

        # RewriteLog <%= @params[:apache]['log_dir'] %>/<%= @application_name %>-rewrite.log
        # RewriteLogLevel 0

        ############################################
        ## you can put here your magento root folder
        ## path relative to web root

        #RewriteBase /

        <% if @params[:site]['additional_rewites'] != "" %>
        # Write any additional rewrite configuration
        <%= @params[:site]['additional_rewites'] %>
        <% end %>

        RewriteRule ^server-status - [L]

        ############################################
        ## workaround for HTTP authorization
        ## in CGI environment

        RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

        ############################################
        ## always send 404 on missing files in these folders

        RewriteCond %{REQUEST_URI} !^/(media|skin|js)/

        ############################################
        ## never rewrite for existing files, directories and links

        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteCond %{REQUEST_FILENAME} !-l

        ############################################
        ## rewrite everything else to index.php

        RewriteRule .* index.php [L]

    </IfModule>

    AddType application/x-font-woff woff

    <IfModule mod_expires.c>
        ExpiresActive on
        ExpiresByType image/jpg "access plus 6 months"
        ExpiresByType image/png "access plus 6 months"
        ExpiresByType image/jpeg "access plus 6 months"
        ExpiresByType image/gif "access plus 6 months"
        ExpiresByType image/png "access plus 6 months"
        ExpiresByType text/plain "access plus 6 months"
        ExpiresByType text/ico "access plus 6 months"
        ExpiresByType image/ico "access plus 6 months"
        ExpiresByType image/icon "access plus 6 months"
        ExpiresByType image/x-icon "access plus 6 months"
        ExpiresByType application/x-font-woff "access plus 6 months"
        ExpiresByType application/x-shockwave-flash "modification plus 6 months"
        ExpiresByType text/css "access plus 1 week"
        ExpiresByType text/javascript "access plus 1 week"
        ExpiresByType text/xml "modification plus 2 hours"
        ExpiresByType image/vnd.microsoft.icon "access plus 6 months"
    </IfModule>

    <IfModule mod_headers.c>
        Header append Vary User-Agent env=!dont-vary

        <FilesMatch "\.(ico|jpe?g|png|gif|swf|css|gz|js|woff)$">
            Header set Cache-Control  "public, max-age=2592000"
        </FilesMatch>
    </IfModule>

    ############################################
    ## Prevent character encoding issues from server overrides
    ## If you still have problems, use the second line instead

    AddDefaultCharset Off
    #AddDefaultCharset UTF-8

    ############################################
    ## If running in cluster environment, uncomment this
    ## http://developer.yahoo.com/performance/rules.html#etags

    FileETag none
    # FileETag MTime Size

  </Directory>
  <%
    [
      '/app',
      '/dev',
      '/downloader',
      '~ ^/error/.*\.(xml|phtml)$',
      '/includes',
      '/lib',
      '/media/downloadable',
      '/shell',
      '/skin/frontend/rwd/default/scss',
      '/frontend/rwd/enterprise/scss',
      '/var',
      '/.gitignore',
      '/composer.json',
      '/cron.php',
      '/cron.sh',
      '/index.php.sample',
      '/install.php',
      '/mage',
      '/php.ini.sample',
      '/RELEASE_NOTES.txt'
    ].each do |dir| %>
  <Location <%= dir %>>
      Order deny,allow
      Deny from all
  </Location>
  <% end %>

  <Directory <%= @params[:magento]['dir'] %>/media>
      Options All -Indexes
      <IfModule mod_php5.c>
      php_flag engine 0
      </IfModule>

      AddHandler cgi-script .php .pl .py .jsp .asp .htm .shtml .sh .cgi
      Options -ExecCGI

      <IfModule mod_rewrite.c>

          ############################################
          ## enable rewrites

          Options +FollowSymLinks
          RewriteEngine on

          ############################################
          ## never rewrite for existing files
          RewriteCond %{REQUEST_FILENAME} !-f

          ############################################
          ## rewrite everything else to index.php

          RewriteRule .* ../get.php [L]
      </IfModule>
  </Directory>

    <Directory <%= @params[:magento]['dir'] %>/staging>
          AllowOverride All
          Order allow,deny
          Allow from all
    </Directory>

    <% if @params[:magento]['apache']['additional_config_path'] %>
    # Include any additional configuration for the project
    Include <%= @params[:magento]['apache']['additional_config_path'] %>/*.conf
    <% end %>
</VirtualHost>