SetEnv PYTHON_EGG_CACHE /tmp/.python-eggs
WSGIPythonPath /a/mailarch/current

<VirtualHost *:443>
        ServerAdmin ietf-action@ietf.org
        ServerName mailarchive.ietf.org
        CustomLog /var/log/apache2/mailarchive_log common
        RemoveHandler cgi-script .py

        Redirect /archive /arch

        Alias /static/ /a/mailarch/current/static/
        Alias /robots.txt /a/mailarch/current/static/robots.txt
        Alias /usagedata/ /a/mailarch/usagedata/
        AliasMatch ^/arch/attach/([^/]+)/([^/]+) /a/mailarch/data/archive/$1/_attachments/$2
        WSGIScriptAlias / /a/mailarch/current/mlarchive/production.wsgi

	SSLEngine on
        SSLHonorCipherOrder On
	#SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!SRP:!PSK:!SEED:!CAMELLIA:!LOW
	SSLCompression off
	SSLProtocol All -SSLv2 -SSLv3
	SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:!EDH:!EXPORT
	SSLCertificateFile /etc/apache2/ssl/www.ietf.org.crt
	SSLCertificateKeyFile /etc/apache2/ssl/www.ietf.org.key

        WSGIApplicationGroup %{GLOBAL}
        WSGIProcessGroup mailarchive.ietf.org

        Timeout 180

        <Directory /a/mailarch>
            Options FollowSymLinks
        </Directory>

        <Directory /a/mailarch/current/static>
            Require all granted
        </Directory>

        <Directory /a/mailarch/current/mlarchive>
        <Files production.wsgi>
            Require all granted
        </Files>
        </Directory>

        <DirectoryMatch "^/a/mailarch/data/archive/[^/]+/_attachments/">
            Require all granted
        </DirectoryMatch>

        <Directory "/a/mailarch/usagedata">
            Options None
            AllowOverride None
            Require all granted

            #AuthType Basic
            #AuthName "IETF Mail Archive"
            #AuthUserFile /a/www/htpasswd

            #Include /etc/apache2/vhosts.d/amscore.perms
            #Include /etc/apache2/vhosts.d/amsstaff.perms
            #Include /etc/apache2/vhosts.d/ietfleaders.perms
            #Include /etc/apache2/vhosts.d/ietfwg.perms
        </Directory>
</VirtualHost>

<VirtualHost *:80>
        ServerAdmin ietf-action@ietf.org
        ServerName mailarchive.ietf.org
        CustomLog /var/log/apache2/mailarchive_log common

#       WSGIDaemonProcess mailarchive.ietf.org processes=5 threads=15 display-name=%{GROUP} stack-size=1048576 maximum-requests=100
        WSGIDaemonProcess mailarchive.ietf.org processes=5 threads=5 display-name=%{GROUP} stack-size=1048576 maximum-requests=100
        WSGIApplicationGroup %{GLOBAL}
        WSGIProcessGroup mailarchive.ietf.org

        Redirect / https://mailarchive.ietf.org/

</VirtualHost>