Merge lp:~dooferlad/linaro-license-protection/django-configs-debug-off into lp:~linaro-automation/linaro-license-protection/trunk

[James Tunnicliffe]

[Данило Шеган (danilo)]

You should propose against ~linaro-infrastructure/linaro-license-protection/configs :)

review: Disapprove

[Данило Шеган (danilo)]

https://code.launchpad.net/~dooferlad/linaro-license-protection/django-configs-debug-off/+merge/120411

Unmerged revisions

19. By James Tunnicliffe on 2012-08-20

Disabled DEBUG for production instances

18. By Данило Шеган on 2012-08-17

Move deployment steps for upload framework here as well.

17. By Данило Шеган on 2012-08-16

Fallback to "templates" dir for separate sites.

16. By Данило Шеган on 2012-08-16

Revert previous change.

15. By Данило Шеган on 2012-08-15

Clear-up system path in wsgi file.

14. By Данило Шеган on 2012-08-15

Update SSL cert file on snapshots.linaro.org.

13. By Данило Шеган on 2012-08-13

Update the SSL statement as well.

12. By Данило Шеган on 2012-08-13

Move deployment steps out of the code README and into the configs README.

11. By Данило Шеган on 2012-08-13

Set DJANGO_SETTINGS_MODULE unconditionally to avoid variable-based flakiness in mod_wsgi (for production configs as well).

10. By Данило Шеган on 2012-08-13

Set DJANGO_SETTINGS_MODULE unconditionally to avoid variable-based flakiness in mod_wsgi.

=== added file 'README'
--- README	1970-01-01 00:00:00 +0000
+++ README	2012-08-20 15:32:38 +0000
@@ -0,0 +1,213 @@
+Linaro License Protection configuration
+=======================================
+
+This branch contains current production configuration for
+
+ * releases.linaro.org (hosted on mombin.canonical.com)
+ * snapshots.linaro.org (mombin)
+ * staging.releases.linaro.org (kahaku.canonical.com)
+ * staging.snapshots.linaro.org (kahaku.canonical.com)
+
+
+Dependencies
+------------
+
+libapache2-mod-xsendfile >= 0.10
+libapache2-mod-python
+python-django >= 1.3.1
+python-django-openid-auth
+python-apache-openid
+
+python-apache-openid is needed until we migrate existing apache
+openid-protected directories to the new setup.
+
+
+Pushing framework on snapshots.linaro.org
+-----------------------------------------
+
+Pushing/uploading side is currently implemented as a multi-system setup:
+
+ * configuration on jenkins
+ * configuration of users on server
+
+Configuration of jenkins
+........................
+
+ * We are using Publish-over-SSH plugin for jenkins
+
+ * We perform two build (not publish, to allow for LAVA to have known URLs)
+   steps:
+
+   * publish artifacts over SSH (ends up on a private location on the server)
+
+   * call out a trigger script over SSH (to move files securely to a public
+     location)
+
+ * We use strictly "push from master" in advanced settings of publish-over-ssh
+   plugin, and keep private keys for both actions above on the master:
+
+    /home/ubuntu/snapshots-sync2/linaro-android-build-publish —
+      linaro-android-build-publish
+    /home/ubuntu/snapshots-sync2/linaro-android-build-publish-trigger —
+      linaro-android-build-publish-trigger
+
+Configuration of users on the receiving server (snapshots.l.o)
+..............................................................
+
+For the two actions above, we have two separate users for all hosts
+accessing the system (two for android-build.linaro.org and another two
+for ci.linaro.org at this time).
+
+One of the users is a sftp/push user, and another is the trigger user that
+shuffles the files around.
+
+Current users and their configurations:
+
+ * linaro-android-build-publish
+   /etc/ssh/user-authorized-keys/linaro-android-build-publish
+
+     command="/usr/lib/sftp-server",no-pty,no-port-forwarding,\
+     no-X11-forwarding,no-agent-forwarding,from="50.17.250.69" \
+     <PUBLIC-SSH-KEY-DATA>
+
+   (chrooted to /srv/snapshots.linaro.org/uploads/)
+
+ * linaro-android-build-publish-trigger:
+
+   /etc/ssh/user-authorized-keys/linaro-android-build-publish-trigger
+
+     command="/home/linaro-android-build-publish-trigger/scripts\
+              /trigger-linaro-android-build-publish.sh \
+              ${SSH_ORIGINAL_COMMAND#* }",\
+     no-pty,no-port-forwarding,no-X11-forwarding,no-agent-forwarding,
+     from="50.17.250.69" <PUBLIC-SSH-KEY-DATA>
+
+   The script being executed passes parameters to publish_to_snapshots
+   which moves files from /uploads/ into appropriate public directory:
+
+     #!/bin/sh
+     if [ "$(id -un)" != "linaro-android-build-publish-trigger" ]; then
+       echo "This script is designed to be run as linaro-android-build-publish-trigger user"
+       exit 1
+     fi
+     sudo -u linaro-android-build-publish /home/linaro-android-build-publish/linaro-license-protection/scripts/publish_to_snapshots.py "$@"
+
+ * linaro-ci-publish
+
+   Exactly the same as linaro-android-build-publish, except for the IP
+   (allowing ci.linaro.org from 50.17.200.206) and SSH key data.
+
+ * linaro-ci-publish-trigger
+
+   Like linaro-android-build-publish-trigger, with different IP
+   and SSH key data.  Script lives in
+
+     /home/linaro-ci-publish-trigger/scripts/trigger-linaro-ci-publish.sh
+
+   and is of similar structure to the one for the user
+   linaro-android-build-publish-trigger.
+
+android-build.linaro.org
+........................
+
+Runs Jenkins and uses SFTP plugin to access the above two users.  Private
+keys live in
+
+  /home/ubuntu/snapshots-sync2/linaro-android-build-publish —
+    linaro-android-build-publish
+  /home/ubuntu/snapshots-sync2/linaro-android-build-publish-trigger —
+    linaro-android-build-publish-trigger
+
+To ensure serialization of steps, and allow LAVA submission, these happen as
+build steps, and not as publishing steps.
+
+Deployment steps
+----------------
+
+This documents our current deployment while at the same time representing
+an example production deployment.
+
+1. Install the dependencies
+   (see the "Dependencies" section)
+
+2. Get the code
+
+     mkdir -p /srv/shared-branches
+     cd /srv/shared-branches
+     bzr branch lp:linaro-license-protection
+
+   (we are actually using http URLs since lp: defaults to bzr+ssh which
+   doesn't work on system accounts)
+
+3. Get the configuration
+
+   Configuration files for deploying to snapshots.linaro.org,
+   releases.linaro.org, staging.snapshots.linaro.org
+   and staging.releases.linaro.org all live in
+
+     lp:linaro-license-protection/configs
+
+   We need to branch that into /srv/shared-branches as well:
+
+     cd /srv/shared-branches
+     bzr branch lp:linaro-license-protection/configs linaro-license-protection-configs
+
+4. Checkout branches for the services you want to use:
+
+     (cd /srv/staging.snapshots.linaro.org &&
+      bzr checkout /srv/shared-branches/linaro-license-protection-configs configs &&
+      bzr checkout /srv/shared-branches/linaro-license-protection)
+
+   Replace "/srv/staging.snapshots.linaro.org" with one of
+     /srv/staging.releases.linaro.org
+     /srv/snapshots.linaro.org
+     /srv/releases.linaro.org
+
+   depending on the service you are deploying.
+
+   If you use these paths, none of the config files will need updating.
+
+5. Configure apache2
+
+   Make sure mod-xsendfile and mod-python are enabled.
+   Copy appropriate
+     /srv/staging.snapshots.linaro.org/configs/apache/staging.snapshots.linaro.org
+   files to /etc/apache2/sites-available
+
+   Add appropriate NameVirtualHost directive to
+
+     /etc/apache2/sites-enabled/000-default
+
+   Run "a2ensite staging.snapshots.linaro.org".
+
+   You also need to set up SSL certificate for *snapshots.linaro.org.
+
+6. Create databases and set up static files
+
+   Make sure appropriate configs/django directory is in the PYTHONPATH
+   and set DJANGO_SETTINGS_MODULE and then run django-admin:
+
+     export PYTHONPATH=/srv/staging.snapshots.linaro.org:/srv/staging.snapshots.linaro.org/linaro-license-protection:/srv/staging.snapshots.linaro.org/configs/django
+     export DJANGO_SETTINGS_MODULE=settings_staging_snapshots
+     mkdir -p /srv/staging.snapshots.linaro.org/db
+     django-admin syncdb --noinput
+     django-admin collectstatic --noinput
+
+7. Set up a cron job to keep code updating automatically
+
+   You may want to automatically keep code up to date (mostly for staging)
+   instances.
+
+   There is
+
+     scripts/update-staging.py
+
+   which can be run from a cronjob to keep the above deployment always
+   up to date.
+
+8. Ensure license_protected_downloads/config.py contains relevant white-listed
+   IP addresses:
+
+     For releases.linaro.org:
+      * android-build.linaro.org (50.17.250.69)
+      * validation.linaro.org (213.123.120.124)

=== renamed file 'README' => 'README.moved'
=== added directory 'apache'
=== added file 'apache/releases.linaro.org'
--- apache/releases.linaro.org	1970-01-01 00:00:00 +0000
+++ apache/releases.linaro.org	2012-08-20 15:32:38 +0000
@@ -0,0 +1,39 @@
+<VirtualHost 91.189.95.80:80>
+    Alias /static/ /srv/releases.linaro.org/linaro-license-protection/static/
+    DocumentRoot /srv/releases.linaro.org/www
+    ServerName releases.linaro.org
+    ServerAdmin [e-mail]
+    CustomLog /var/log/apache2/releases.linaro.org-access.log combined
+    ErrorLog  /var/log/apache2/releases.linaro.org-error.log
+
+    <Directory /srv/releases.linaro.org/linaro-license-protection/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    <Directory /srv/releases.linaro.org/www>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    XSendFile on
+    XSendFilePath /srv/releases.linaro.org/www
+
+    WSGIScriptAlias / /srv/releases.linaro.org/configs/wsgi/wsgi_releases.py
+    WSGIDaemonProcess linaro-license-protection-releases
+
+    <Directory /srv/releases.linaro.org/configs/wsgi>
+        <Files wsgi_releases.py>
+            Order deny,allow
+            Allow from all
+        </Files>
+    </Directory>
+
+    <Directory />
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico HEADER.html
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+</VirtualHost>

=== added file 'apache/snapshots.linaro.org'
--- apache/snapshots.linaro.org	1970-01-01 00:00:00 +0000
+++ apache/snapshots.linaro.org	2012-08-20 15:32:38 +0000
@@ -0,0 +1,154 @@
+<VirtualHost 91.189.95.80:80>
+
+    Alias /static/ /srv/snapshots.linaro.org/linaro-license-protection/static/
+    DocumentRoot /srv/snapshots.linaro.org/www
+    ServerName snapshots.linaro.org
+    ServerAdmin [e-mail]
+    CustomLog /var/log/apache2/snapshots.linaro.org-access.log combined
+    ErrorLog  /var/log/apache2/snapshots.linaro.org-error.log
+
+    Redirect /hwpacks https://snapshots.linaro.org/hwpacks
+    Redirect /precise/restricted https://snapshots.linaro.org/precise/restricted
+
+    <Directory /srv/snapshots.linaro.org/linaro-license-protection/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    <Directory /srv/snapshots.linaro.org/www>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    XSendFile on
+    XSendFilePath /srv/snapshots.linaro.org/www
+
+    WSGIScriptAlias / /srv/snapshots.linaro.org/configs/wsgi/wsgi_snapshots.py
+    WSGIDaemonProcess linaro-license-protection-snapshots
+
+    <Directory /srv/snapshots.linaro.org/configs/wsgi>
+        <Files wsgi_snapshots.py>
+            Order deny,allow
+            Allow from all
+        </Files>
+    </Directory>
+
+    <Directory />
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico HEADER.html
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+</VirtualHost>
+
+<VirtualHost 91.189.95.80:443>
+
+    Alias /static/ /srv/snapshots.linaro.org/linaro-license-protection/static/
+    DocumentRoot /srv/snapshots.linaro.org/www
+    ServerName snapshots.linaro.org
+    ServerAdmin [e-mail]
+    CustomLog /var/log/apache2/snapshots.linaro.org-access.log combined
+    ErrorLog  /var/log/apache2/snapshots.linaro.org-error.log
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/staging.snapshots.linaro.org.pem
+
+    <Directory /srv/snapshots.linaro.org/linaro-license-protection/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    <Directory /srv/snapshots.linaro.org/www>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    XSendFile on
+    XSendFilePath /srv/snapshots.linaro.org/www
+
+    WSGIScriptAlias / /srv/snapshots.linaro.org/configs/wsgi/wsgi_snapshots.py
+    WSGIDaemonProcess linaro-license-protection-snapshots-ssl
+
+    <Directory /srv/snapshots.linaro.org/configs/wsgi>
+        <Files wsgi_snapshots.py>
+            Order deny,allow
+            Allow from all
+        </Files>
+    </Directory>
+
+    <Directory />
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico HEADER.html
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+    <Location "/hwpacks">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/all-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    <Location "/openid/">
+        Allow from all
+        SetHandler mod_python
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption store-type file
+        PythonOption store-directory /var/cache/apache2/openid/
+        PythonOption allowed-op-list-url "file:///etc/apache2/security/allowed-ops.txt"
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/all-private-hwpack-teams.txt"
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/linaro-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    <Location "/precise/restricted">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/linaro-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/freescale /srv/landing-teams/hwpacks/freescale
+    <Location "/hwpacks/freescale">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/freescale-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/samsung /srv/landing-teams/hwpacks/samsung
+    <Location "/hwpacks/samsung">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/samsung-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/ste /srv/landing-teams/hwpacks/ste
+    <Location "/hwpacks/ste">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/ste-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/ti /srv/landing-teams/hwpacks/ti
+    <Location "/hwpacks/ti">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/ti-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/arm /srv/landing-teams/hwpacks/arm
+    <Location "/hwpacks/arm">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/arm-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+</VirtualHost>

=== added file 'apache/staging.releases.linaro.org'
--- apache/staging.releases.linaro.org	1970-01-01 00:00:00 +0000
+++ apache/staging.releases.linaro.org	2012-08-20 15:32:38 +0000
@@ -0,0 +1,39 @@
+<VirtualHost 91.189.95.80:80>
+    Alias /static/ /srv/staging.releases.linaro.org/linaro-license-protection/static/
+    DocumentRoot /srv/staging.releases.linaro.org/www
+    ServerName staging.releases.linaro.org
+    ServerAdmin [e-mail]
+    CustomLog /var/log/apache2/staging.releases.linaro.org-access.log combined
+    ErrorLog  /var/log/apache2/staging.releases.linaro.org-error.log
+
+    <Directory /srv/staging.releases.linaro.org/linaro-license-protection/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    <Directory /srv/staging.releases.linaro.org/www>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    XSendFile on
+    XSendFilePath /srv/staging.releases.linaro.org/www
+
+    WSGIScriptAlias / /srv/staging.releases.linaro.org/configs/wsgi/wsgi_staging_releases.py
+    WSGIDaemonProcess linaro-license-protection-staging-releases
+
+    <Directory /srv/staging.releases.linaro.org/configs/wsgi>
+        <Files wsgi_staging_releases.py>
+            Order deny,allow
+            Allow from all
+        </Files>
+    </Directory>
+
+    <Directory />
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico HEADER.html
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+</VirtualHost>

=== added file 'apache/staging.snapshots.linaro.org'
--- apache/staging.snapshots.linaro.org	1970-01-01 00:00:00 +0000
+++ apache/staging.snapshots.linaro.org	2012-08-20 15:32:38 +0000
@@ -0,0 +1,154 @@
+<VirtualHost 91.189.95.80:80>
+
+    Alias /static/ /srv/staging.snapshots.linaro.org/linaro-license-protection/static/
+    DocumentRoot /srv/staging.snapshots.linaro.org/www
+    ServerName staging.snapshots.linaro.org
+    ServerAdmin [e-mail]
+    CustomLog /var/log/apache2/staging.snapshots.linaro.org-access.log combined
+    ErrorLog  /var/log/apache2/staging.snapshots.linaro.org-error.log
+
+    Redirect /hwpacks https://staging.snapshots.linaro.org/hwpacks
+    Redirect /precise/restricted https://staging.snapshots.linaro.org/precise/restricted
+
+    <Directory /srv/staging.snapshots.linaro.org/linaro-license-protection/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    <Directory /srv/staging.snapshots.linaro.org/www>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    XSendFile on
+    XSendFilePath /srv/staging.snapshots.linaro.org/www
+
+    WSGIScriptAlias / /srv/staging.snapshots.linaro.org/configs/wsgi/wsgi_staging_snapshots.py
+    WSGIDaemonProcess linaro-license-protection-staging-snapshots
+
+    <Directory /srv/staging.snapshots.linaro.org/configs/wsgi>
+        <Files wsgi_staging_snapshots.py>
+            Order deny,allow
+            Allow from all
+        </Files>
+    </Directory>
+
+    <Directory />
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico HEADER.html
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+</VirtualHost>
+
+<VirtualHost 91.189.95.80:443>
+
+    Alias /static/ /srv/staging.snapshots.linaro.org/linaro-license-protection/static/
+    DocumentRoot /srv/staging.snapshots.linaro.org/www
+    ServerName staging.snapshots.linaro.org
+    ServerAdmin [e-mail]
+    CustomLog /var/log/apache2/staging.snapshots.linaro.org-access.log combined
+    ErrorLog  /var/log/apache2/staging.snapshots.linaro.org-error.log
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/staging.snapshots.linaro.org.pem
+
+    <Directory /srv/staging.snapshots.linaro.org/linaro-license-protection/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    <Directory /srv/staging.snapshots.linaro.org/www>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    XSendFile on
+    XSendFilePath /srv/staging.snapshots.linaro.org/www
+
+    WSGIScriptAlias / /srv/staging.snapshots.linaro.org/configs/wsgi/wsgi_staging_snapshots.py
+    WSGIDaemonProcess linaro-license-protection-staging-snapshots-ssl
+
+    <Directory /srv/staging.snapshots.linaro.org/configs/wsgi>
+        <Files wsgi_staging_snapshots.py>
+            Order deny,allow
+            Allow from all
+        </Files>
+    </Directory>
+
+    <Directory />
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico HEADER.html
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+    <Location "/hwpacks">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/all-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    <Location "/openid/">
+        Allow from all
+        SetHandler mod_python
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption store-type file
+        PythonOption store-directory /var/cache/apache2/openid/
+        PythonOption allowed-op-list-url "file:///etc/apache2/security/allowed-ops.txt"
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/all-private-hwpack-teams.txt"
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/linaro-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    <Location "/precise/restricted">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/linaro-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/freescale /srv/landing-teams/hwpacks/freescale
+    <Location "/hwpacks/freescale">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/freescale-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/samsung /srv/landing-teams/hwpacks/samsung
+    <Location "/hwpacks/samsung">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/samsung-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/ste /srv/landing-teams/hwpacks/ste
+    <Location "/hwpacks/ste">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/ste-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/ti /srv/landing-teams/hwpacks/ti
+    <Location "/hwpacks/ti">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/ti-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+    Alias /hwpacks/arm /srv/landing-teams/hwpacks/arm
+    <Location "/hwpacks/arm">
+        PythonAccessHandler apache_openid::protect
+        PythonOption handler openidteams
+        PythonOption authorized-teams-list-url "file:///etc/apache2/security/arm-private-hwpack-teams.txt"
+        PythonOption action-path "/openid/"
+    </Location>
+
+</VirtualHost>

=== added directory 'django'
=== added file 'django/settings_releases.py'
--- django/settings_releases.py	1970-01-01 00:00:00 +0000
+++ django/settings_releases.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,22 @@
+# Settings for releases.linaro.org.
+
+from settings import *
+
+DEBUG = False
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': '/srv/releases.linaro.org/db/licenses.db',
+        'USER': '',
+        'PASSWORD': '',
+        'HOST': '',
+        'PORT': '',
+    }
+}
+
+TEMPLATE_DIRS = (
+    os.path.join(PROJECT_ROOT, "templates_releases" ),
+    os.path.join(PROJECT_ROOT, "templates" ),
+    )
+SERVED_PATHS = ['/srv/releases.linaro.org/www']

=== added file 'django/settings_snapshots.py'
--- django/settings_snapshots.py	1970-01-01 00:00:00 +0000
+++ django/settings_snapshots.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,22 @@
+# Settings for snapshots.linaro.org.
+
+from settings import *
+
+DEBUG = False
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': '/srv/snapshots.linaro.org/db/licenses.db',
+        'USER': '',
+        'PASSWORD': '',
+        'HOST': '',
+        'PORT': '',
+    }
+}
+
+TEMPLATE_DIRS = (
+    os.path.join(PROJECT_ROOT, "templates_snapshots" ),
+    os.path.join(PROJECT_ROOT, "templates" ),
+    )
+SERVED_PATHS = ['/srv/snapshots.linaro.org/www']

=== added file 'django/settings_staging_releases.py'
--- django/settings_staging_releases.py	1970-01-01 00:00:00 +0000
+++ django/settings_staging_releases.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,20 @@
+# Settings for staging.releases.linaro.org.
+
+from settings import *
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': '/srv/staging.releases.linaro.org/db/licenses.db',
+        'USER': '',
+        'PASSWORD': '',
+        'HOST': '',
+        'PORT': '',
+    }
+}
+
+TEMPLATE_DIRS = (
+    os.path.join(PROJECT_ROOT, "templates_releases" ),
+    os.path.join(PROJECT_ROOT, "templates" ),
+    )
+SERVED_PATHS = ['/srv/staging.releases.linaro.org/www']

=== added file 'django/settings_staging_snapshots.py'
--- django/settings_staging_snapshots.py	1970-01-01 00:00:00 +0000
+++ django/settings_staging_snapshots.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,20 @@
+# Settings for staging.snapshots.linaro.org.
+
+from settings import *
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': '/srv/staging.snapshots.linaro.org/db/licenses.db',
+        'USER': '',
+        'PASSWORD': '',
+        'HOST': '',
+        'PORT': '',
+    }
+}
+
+TEMPLATE_DIRS = (
+    os.path.join(PROJECT_ROOT, "templates_snapshots" ),
+    os.path.join(PROJECT_ROOT, "templates" ),
+    )
+SERVED_PATHS = ['/srv/staging.snapshots.linaro.org/www']

=== added directory 'wsgi'
=== added file 'wsgi/wsgi_releases.py'
--- wsgi/wsgi_releases.py	1970-01-01 00:00:00 +0000
+++ wsgi/wsgi_releases.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,19 @@
+"""
+WSGI config for license_protected_downloads project.
+
+This file configures WSGI for releases.linaro.org.
+"""
+import os
+import sys
+sys.path.append("/usr/lib/python2.7/dist-packages")
+sys.path.append("/usr/lib/pymodules/python2.7")
+sys.path.append("/usr/lib/python2.7")
+
+sys.path.append("/srv/releases.linaro.org")
+sys.path.append("/srv/releases.linaro.org/linaro-license-protection")
+sys.path.append("/srv/releases.linaro.org/configs/django")
+
+os.environ["DJANGO_SETTINGS_MODULE"] = "settings_releases"
+
+import django.core.handlers.wsgi
+application = django.core.handlers.wsgi.WSGIHandler()

=== added file 'wsgi/wsgi_snapshots.py'
--- wsgi/wsgi_snapshots.py	1970-01-01 00:00:00 +0000
+++ wsgi/wsgi_snapshots.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,19 @@
+"""
+WSGI config for license_protected_downloads project.
+
+This file configures WSGI for snapshots.linaro.org.
+"""
+import os
+import sys
+sys.path.append("/usr/lib/python2.7/dist-packages")
+sys.path.append("/usr/lib/pymodules/python2.7")
+sys.path.append("/usr/lib/python2.7")
+
+sys.path.append("/srv/snapshots.linaro.org")
+sys.path.append("/srv/snapshots.linaro.org/linaro-license-protection")
+sys.path.append("/srv/snapshots.linaro.org/configs/django")
+
+os.environ["DJANGO_SETTINGS_MODULE"] = "settings_snapshots"
+
+import django.core.handlers.wsgi
+application = django.core.handlers.wsgi.WSGIHandler()

=== added file 'wsgi/wsgi_staging_releases.py'
--- wsgi/wsgi_staging_releases.py	1970-01-01 00:00:00 +0000
+++ wsgi/wsgi_staging_releases.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,19 @@
+"""
+WSGI config for license_protected_downloads project.
+
+This file configures WSGI for staging.releases.linaro.org.
+"""
+import os
+import sys
+sys.path.append("/usr/lib/python2.7/dist-packages")
+sys.path.append("/usr/lib/pymodules/python2.7")
+sys.path.append("/usr/lib/python2.7")
+
+sys.path.append("/srv/staging.releases.linaro.org")
+sys.path.append("/srv/staging.releases.linaro.org/linaro-license-protection")
+sys.path.append("/srv/staging.releases.linaro.org/configs/django")
+
+os.environ["DJANGO_SETTINGS_MODULE"] = "settings_staging_releases"
+
+import django.core.handlers.wsgi
+application = django.core.handlers.wsgi.WSGIHandler()

=== added file 'wsgi/wsgi_staging_snapshots.py'
--- wsgi/wsgi_staging_snapshots.py	1970-01-01 00:00:00 +0000
+++ wsgi/wsgi_staging_snapshots.py	2012-08-20 15:32:38 +0000
@@ -0,0 +1,19 @@
+"""
+WSGI config for license_protected_downloads project.
+
+This file configures WSGI for staging.snapshots.linaro.org.
+"""
+import os
+import sys
+sys.path.append("/usr/lib/python2.7/dist-packages")
+sys.path.append("/usr/lib/pymodules/python2.7")
+sys.path.append("/usr/lib/python2.7")
+
+sys.path.append("/srv/staging.snapshots.linaro.org")
+sys.path.append("/srv/staging.snapshots.linaro.org/linaro-license-protection")
+sys.path.append("/srv/staging.snapshots.linaro.org/configs/django")
+
+os.environ["DJANGO_SETTINGS_MODULE"] = "settings_staging_snapshots"
+
+import django.core.handlers.wsgi
+application = django.core.handlers.wsgi.WSGIHandler()