From f4f668af719b2eda2478309f85bcb613245129ec Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Thu, 22 Jan 2026 16:00:34 +0100
Subject: [PATCH] deploy cas-status to dmz

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
---
 apache/conf/cas-status.conf | 30 ++++++++++++++++++++++++++++++
 conf.d/cas-status.conf      | 21 +++++++++++++++++++++
 docker-compose.yaml         |  1 +
 3 files changed, 52 insertions(+)
 create mode 100644 apache/conf/cas-status.conf
 create mode 100644 conf.d/cas-status.conf

diff --git a/apache/conf/cas-status.conf b/apache/conf/cas-status.conf
new file mode 100644
index 0000000..80fe47b
--- /dev/null
+++ b/apache/conf/cas-status.conf
@@ -0,0 +1,30 @@
+<VirtualHost *:80>
+    ServerName cas-status.psi.ch
+    DocumentRoot /var/www/cas_status/web
+
+    ErrorLog /proc/self/fd/2
+    CustomLog /proc/self/fd/1 combined
+
+    Header set Access-Control-Allow-Origin "*"
+
+    # PHP configuration
+    <FilesMatch ".+\.ph(p[345]?|t|tml)$">
+        SetHandler application/x-httpd-php
+    </FilesMatch>
+
+    php_admin_value upload_tmp_dir /var/www/clients/client45/web70/tmp
+    php_admin_value session.save_path /var/www/clients/client45/web70/tmp
+    php_admin_value open_basedir /var/www/clients/client45/web70/web:/var/www/clients/client45/web70/private:/var/www/clients/client45/web70/tmp:/var/www/cas_status/web:/tmp:/usr/share/php:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/var/www/error/
+
+    <Directory /var/www/cas_status/web>
+        Options +FollowSymLinks +Includes
+        AllowOverride All
+        Require all granted
+
+        # SSI support
+        AddType text/html .shtml
+        AddOutputFilter INCLUDES .shtml
+    </Directory>
+
+</VirtualHost>
+
diff --git a/conf.d/cas-status.conf b/conf.d/cas-status.conf
new file mode 100644
index 0000000..86ffcd7
--- /dev/null
+++ b/conf.d/cas-status.conf
@@ -0,0 +1,21 @@
+server {
+    listen 80;
+    server_name cas-status.psi.ch;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name cas-status.psi.ch;
+
+    ssl_certificate /etc/nginx/certs/lx-docker-dmz-01.psi.ch.crt;
+    ssl_certificate_key /etc/nginx/private/lx-docker-dmz-01.psi.ch.key;
+
+    location / {
+        proxy_pass http://apache_app:80;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/docker-compose.yaml b/docker-compose.yaml
index ed6ee2d..153379a 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -30,6 +30,7 @@ services:
     volumes:
       - /opt/webcontent/DMZ/rfmwtools:/var/www/rfmwtools:ro
       - /opt/webcontent/DMZ/fluid-eos:/var/www/fluid-eos:rw
+      - /opt/webcontent/DMZ/cas_status:/var/www/cas_status:rw
       - /mount/srem/webhosting:/var/www/srem:rw
       - ./apache/conf:/etc/apache2/sites-enabled:ro
     networks: