SetEnv PYTHON_EGG_CACHE /tmp/.python-eggs
WSGIPythonEggs /tmp/.python-eggs/

<VirtualHost *:443>
	ServerAdmin ietf-action@ietf.org
	ServerName trac.ietf.org
	HostnameLookups Off
	UseCanonicalName Off
	ServerSignature Off
        DocumentRoot /a/www/www6s/trac/
	CustomLog /var/log/apache2/ietf-trac_log vhost_combined

	AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript

	SSLEngine on
	SSLHonorCipherOrder On
	#SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!SRP:!PSK:!SEED:!CAMELLIA:!LOW
	SSLCompression off
	SSLProtocol All -SSLv2 -SSLv3
	SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:!EDH:!EXPORT
	SSLCertificateFile /etc/apache2/ssl/www.ietf.org.crt
	SSLCertificateKeyFile /etc/apache2/ssl/www.ietf.org.key

#	WSGIDaemonProcess trac.ietf.org display-name=wsgi:trac processes=20 threads=1 stack-size=1048576 maximum-requests=100
	WSGIDaemonProcess trac.ietf.org display-name=wsgi:trac processes=5 threads=5 stack-size=1048576 maximum-requests=100
	WSGIScriptAliasMatch /trac/([a-z0-9-]+)/(.*) /a/www/www6s/trac/$1/trac.wsgi/$2

	<Directory /a/www/www6s/trac>
   		WSGIApplicationGroup %{GLOBAL}
		WSGIProcessGroup trac.ietf.org
                Require all granted
		DirectoryIndex index.py
                AuthType Basic
                AuthName "TRAC"
                AuthUserFile /a/www/htpasswd-trac

	</Directory>
	<LocationMatch "/trac/[^/]+/login">
  		AuthType Basic
  		AuthName "Trac"
 		AuthUserFile /a/www/htpasswd-trac
  		Require valid-user
	</LocationMatch>

</VirtualHost>

<VirtualHost *:80>
	ServerAdmin ietf-action@ietf.org
	ServerName trac.ietf.org
	HostnameLookups Off
	UseCanonicalName Off
	ServerSignature Off
        CustomLog /var/log/apache2/ietf-trac_log vhost_combined

	Redirect        /        https://trac.ietf.org/
</VirtualHost>