apache & erp5: make & use generic apache configuration file

- apache: add generic configuration file for backend
- erp5: make balancer use generic apache backend configuration file

stack/erp5/apache.conf.in → component/apache/apache-backend.conf.in

+{# This file configures apache to redirect requests from ports to specific urls.
+ # It provides SSL support for server and optionaly for client.
+ #
+ # All parameters are given through the `parameter_dict` variable, see the
+ # list entries :
+ #
+ #     parameter_dict = {
+ #       #  The path given to "PidFile"
+ #       "pid-file": "<file_path>",
+ #
+ #       #  The number given to "TimeOut"
+ #       "timeout": 300,
+ #
+ #       #  The path given to "SSLCertificateFile"
+ #       "cert": "<file_path>",
+ #
+ #       #  The path given to "SSLCertificateKeyFile"
+ #       "key": "<file_path>",
+ #
+ #       #  The value given to "SSLCipherSuite" (can be empty)
+ #       "cipher": "",
+ #
+ #       #  The path given to "SSLSessionCache shmcb:<folder_path>(512000)"
+ #       "ssl-session-cache": "<folder_path>",
+ #
+ #       #  The path given to "SSLCACertificateFile" (can be empty)
+ #       #  If this value is not empty, it enables client certificate check.
+ #       #  (Enabling "SSLVerifyClient require")
+ #       "ca-cert": "<file_path>",
+ #
+ #       #  The path given to "SSLCARevocationFile" (used if ca-cert is not
+ #       #  empty)
+ #       "crl": "<file_path>",
+ #
+ #       #  The path given to "ErrorLog"
+ #       "error-log": "<file_path>",
+ #
+ #       #  The path given to "AccessLog"
+ #       "access-log": "<file_path>",
+ #
+ #       #  The list of ip which apache will listen to.
+ #       "ip-list": [
+ #         "0.0.0.0",
+ #         "[::1]",
+ #       ],
+ #
+ #       #  The list of backends which apache should redirect to.
+ #       "backend-list": [
+ #         # (port, unused, internal_scheme)
+ #         (8000, _, "http://10.0.0.10:8001"),
+ #         (8002, _, "http://10.0.0.10:8003"),
+ #       ],
+ #     }
+ #
+ # This sample of `parameter_dict` will make apache listening to :
+ # - 0.0.0.0:8000 redirecting internaly to http://10.0.0.10:8001
+ # - [::1]:8000 redirecting internaly to http://10.0.0.10:8001
+ # - 0.0.0.0:8002 redirecting internaly to http://10.0.0.10:8003
+ # - [::1]:8002 redirecting internaly to http://10.0.0.10:8003
+-#}
 LoadModule unixd_module modules/mod_unixd.so
 LoadModule access_compat_module modules/mod_access_compat.so
 LoadModule authz_core_module modules/mod_authz_core.so

component/apache/buildout.cfg

@@ -183,3 +183,9 @@ configure-options = -c mod_antiloris.c
 make-binary = ${:configure-command}
 make-options = -i -a -n antiloris mod_antiloris.la
 make-targets =
+
+[template-apache-backend-conf]
+recipe = slapos.recipe.build:download
+url = ${:_profile_base_location_}/apache-backend.conf.in
+md5sum = e376fdbe8b19551ec08604e64e9a53b9
+mode = 640

stack/erp5/buildout.cfg

@@ -291,7 +291,7 @@ context =
     key sixtunnel_location 6tunnel:location
     key slapos_core_version versions:slapos.core
     key stunnel_location stunnel:location
-    key template_apache_conf template-apache-conf:target
+    key template_apache_conf template-apache-backend-conf:target
     key template_balancer template-balancer:target
     key template_cloudooo template-cloudooo:target
     key template_create_erp5_site template-create-erp5-site:target
@@ -367,11 +367,6 @@ link-binary =
 filename = instance-balancer.cfg.in
 md5sum = ec9321514674c084e509ca070763b4a1
 
-[template-apache-conf]
-<= download-base
-filename = apache.conf.in
-md5sum = cbe53c1879db9601a521e3ce1d546116
-
 [template-haproxy-cfg]
 <= download-base
 filename = haproxy.cfg.in