NameVirtualHost *:443
WSGISocketPrefix /var/run/wsgi
# LoadModule ssl_module modules/mod_ssl.so

<VirtualHost _default_:443>
  ServerName localhost
  ServerAlias *
  DocumentRoot /var/lib/awx/public
  SSLEngine on
# This certificate can be replaced.
# However, do not use a different name for, or path to, the SSL certificate.
# Tower's live events feature requires the SSL certificate to be in this location.
  SSLCertificateFile /etc/tower/tower.cert
  SSLCertificateKeyFile /etc/tower/tower.key
  SSLProtocol all -SSLv3 -SSLv2

  WSGIScriptAlias / /var/lib/awx/wsgi.py
  WSGIPassAuthorization On

  WSGIDaemonProcess awx user=awx group=awx processes=2 threads=20 maximum-requests=1000 display-name="%{GROUP}"
  WSGIProcessGroup awx

  Alias /favicon.ico /var/lib/awx/public/static/favicon.ico
  Alias /static/ /var/lib/awx/public/static/

  <Directory /var/lib/awx/>
    <Files wsgi.py>
      <IfVersion >= 2.3>
        Require all granted
      </IfVersion>
      <IfVersion < 2.3>
        Order deny,allow
        Allow from all
      </IfVersion>
    </Files>
  </Directory>

  <Directory /var/lib/awx/public/>
    <IfVersion >= 2.3>
      Require all granted
    </IfVersion>
    <IfVersion < 2.3>
      Order deny,allow
      Allow from all
    </IfVersion>
  </Directory>

  Include conf.d/awx-munin.conf
</VirtualHost>