Merge ~pjdc/ubuntu-mirror-charm/+git/ubuntu-mirror-charm:add-apache-template-testcases into ubuntu-mirror-charm:master

[Paul Collins]

add tests for remaining apache templates

The first-party test data is simply the virtualhost configs copied from actiontoad with the Juju header removed. `make generate-testdata` is a no-op.

[Paul Collins (pjdc)]

Output of makes lint, generate-testdata, unittest

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

This merge proposal is being monitored by mergebot. Change the status to Approved to merge.

[Haw Loeung (hloeung)]

LGTM

review: Approve (+1)

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

Change successfully merged at revision 1646a02f2dc28ced8dd952626e05c8d53e39eee3

diff --git a/scripts/generate-testdata.py b/scripts/generate-testdata.py
index caabf3e..3d00944 100755
--- a/scripts/generate-testdata.py
+++ b/scripts/generate-testdata.py
@@ -16,7 +16,7 @@ for name, cls in inspect.getmembers(test_templates, inspect.isclass):
     if not hasattr(cls, '_role'):
         print('skipping {}: no `_role` attribute'.format(name))
         continue
-    testcase = cls(methodName='test_template')
+    testcase = cls(methodName='test_apache_template')
     testcase.setUp()
     template_path = testcase._template_path(testcase._role)
     with warnings.catch_warnings():
@@ -25,6 +25,7 @@ for name, cls in inspect.getmembers(test_templates, inspect.isclass):
         with open(os.path.join(testcase.testdata_dir, testcase._role + '.txt'), 'w') as out:
             print('generating {}'.format(out.name))
             out.write(str(Template(file=template_path, searchList=testcase._search_list)))
-        with open(os.path.join(testcase.testdata_dir, 'thirdparty.txt'), 'w') as out:
-            out.write(str(Template(file=template_path, searchList=testcase._thirdparty_search_list)))
-            print('generating {}'.format(out.name))
+        if testcase._thirdparty_search_list:
+            with open(os.path.join(testcase.testdata_dir, 'thirdparty.txt'), 'w') as out:
+                out.write(str(Template(file=template_path, searchList=testcase._thirdparty_search_list)))
+                print('generating {}'.format(out.name))
diff --git a/tests/unit/test_templates.py b/tests/unit/test_templates.py
index a9cf4e6..cf21256 100644
--- a/tests/unit/test_templates.py
+++ b/tests/unit/test_templates.py
@@ -5,6 +5,15 @@ import unittest
 from Cheetah.Template import Template
 
 
+# as per hooks/hooks.py (yes, this should live in a shared location!)
+APACHE_TLS_SETTINGS = {
+    'ssl_cipher_suite': 'EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP',  # noqa: E501
+    'ssl_honor_cipher_order': 'on',
+    # per IS policy, TLS 1.2 is the minimum acceptable version
+    'ssl_protocol': 'ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1',
+}
+
+
 class TemplateTestCase(object):
     """Base class for template test cases.
 
@@ -24,6 +33,8 @@ class TemplateTestCase(object):
         self.assertEqual(str(template), wanted)
 
     def _template_path(self, role):
+        if role == 'ubuntu-unsafe':
+            role = 'ubuntu'
         return os.path.join(os.getcwd(), 'templates', 'apache-{}.tmpl'.format(role))
 
     # Cheetah warns about using the Python version of NameMapper, so
@@ -31,7 +42,7 @@ class TemplateTestCase(object):
     # seem to work, probably because it begins with a newline and
     # Python's warnings matching code anchors the message regexp.
     @pytest.mark.filterwarnings("ignore::UserWarning:Cheetah")
-    def test_template(self):
+    def test_apache_template(self):
         self._template_compare(
             self._template_path(self._role),
             self._search_list,
@@ -42,11 +53,14 @@ class TemplateTestCase(object):
     # seem to work, probably because it begins with a newline and
     # Python's warnings matching code anchors the message regexp.
     @pytest.mark.filterwarnings("ignore::UserWarning:Cheetah")
-    def test_template_thirdparty(self):
-        self._template_compare(
-            self._template_path(self._role),
-            self._thirdparty_search_list,
-            os.path.join(self.testdata_dir, 'thirdparty.txt'))
+    def test_apache_template_thirdparty(self):
+        if self._thirdparty_search_list:
+            self._template_compare(
+                self._template_path(self._role),
+                self._thirdparty_search_list,
+                os.path.join(self.testdata_dir, 'thirdparty.txt'))
+        else:
+            self.skipTest('_thirdparty_search_list is empty')
 
 
 LINUXCONTAINERS_THIRDPARTY_SEARCH_LIST = {
@@ -68,3 +82,199 @@ class TestLinuxcontainers(TemplateTestCase, unittest.TestCase):
     _role = 'linuxcontainers'
     _search_list = LINUXCONTAINERS_SEARCH_LIST
     _thirdparty_search_list = LINUXCONTAINERS_THIRDPARTY_SEARCH_LIST
+
+
+UBUNTU_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'archive.ubuntu.com',
+    'aliases': ['*.archive.ubuntu.com', 'archive.ubuntulinux.org', '*.archive.ubuntulinux.org', 'ftp.ubuntu.com', 'ftp.ubuntulinux.org', 'ftp.no-name-yet.com'],  # noqa: E501
+    'ports': [80],
+    'logdir': '/var/log/apache2',
+    'unsafe': False,
+}
+
+UBUNTU_THIRDPARTY_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'ubuntu.mirrors.example.net',
+    'aliases': [],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+    'unsafe': False,
+}
+UBUNTU_THIRDPARTY_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestUbuntu(TemplateTestCase, unittest.TestCase):
+    _role = 'ubuntu'
+    _search_list = UBUNTU_SEARCH_LIST
+    _thirdparty_search_list = UBUNTU_THIRDPARTY_SEARCH_LIST
+
+
+RELEASES_SEARCH_LIST = {
+    'addresses': ['91.189.88.247',  '[2001:67c:1360:8001::33]'],
+    'name': 'releases.ubuntu.com',
+    'aliases': ['*.releases.ubuntu.com', 'releases.ubuntulinux.org', '*.releases.ubuntulinux.org'],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+RELEASES_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+RELEASES_THIRDPARTY_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'ubuntu-releases.mirrors.example.net',
+    'aliases': [],
+    'ports': [80],
+    'logdir': '/var/log/apache2',
+}
+RELEASES_THIRDPARTY_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestReleases(TemplateTestCase, unittest.TestCase):
+    _role = 'releases'
+    _search_list = RELEASES_SEARCH_LIST
+    _thirdparty_search_list = RELEASES_THIRDPARTY_SEARCH_LIST
+
+
+CDIMAGE_SEARCH_LIST = {
+    'addresses': ['91.189.88.247',  '[2001:67c:1360:8001::33]'],
+    'name': 'cdimage.ubuntu.com',
+    'aliases': ['cdimages.ubuntu.com', '*.cdimage.ubuntu.com', '*.cdimages.ubuntu.com', 'cdimage.ubuntulinux.org', 'cdimages.ubuntulinux.org', '*.cdimage.ubuntulinux.org', '*.cdimages.ubuntulinux.org'],  # noqa: E501
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+CDIMAGE_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+CDIMAGE_THIRDPARTY_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'ubuntu-cdimage.mirrors.example.net',
+    'aliases': [],
+    'ports': [80],
+    'logdir': '/var/log/apache2',
+}
+CDIMAGE_THIRDPARTY_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestCDImage(TemplateTestCase, unittest.TestCase):
+    _role = 'cdimage'
+    _search_list = CDIMAGE_SEARCH_LIST
+    _thirdparty_search_list = CDIMAGE_THIRDPARTY_SEARCH_LIST
+
+
+PORTS_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'ports.ubuntu.com',
+    'aliases': ['ports.ubuntulinux.org', '*.ports.ubuntu.com', '*.ports.ubuntulinux.org'],
+    'ports': [80],
+    'logdir': '/var/log/apache2',
+}
+PORTS_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+PORTS_THIRDPARTY_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'ubuntu-ports.mirrors.example.net',
+    'aliases': [],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+PORTS_THIRDPARTY_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestPorts(TemplateTestCase, unittest.TestCase):
+    _role = 'ports'
+    _search_list = PORTS_SEARCH_LIST
+    _thirdparty_search_list = PORTS_THIRDPARTY_SEARCH_LIST
+
+
+UBUNTU_UNSAFE_SEARCH_LIST = {
+    'addresses': ['91.189.88.245', '[2001:67c:1360:8001::35]'],
+    'name': 'clouds.archive.ubuntu.com',
+    'aliases': ['*.clouds.archive.ubuntu.com'],
+    'ports': [80],
+    'logdir': '/var/log/apache2',
+    'unsafe': True,
+}
+
+
+class TestUbuntuUnsafe(TemplateTestCase, unittest.TestCase):
+    _role = 'ubuntu-unsafe'
+    _search_list = UBUNTU_UNSAFE_SEARCH_LIST
+    _thirdparty_search_list = None  # There had better not be third-party mirrors of this!
+
+
+CLOUD_IMAGES_SEARCH_LIST = {
+    'addresses': ['91.189.88.247', '[2001:67c:1360:8001::33]'],
+    'name': 'cloud-images.ubuntu.com',
+    'aliases': ['*.cloud-images.ubuntu.com', 'uec-images.ubuntu.com', 'uec-images.ubuntulinux.org'],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+CLOUD_IMAGES_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestCloudImages(TemplateTestCase, unittest.TestCase):
+    _role = 'cloud-images'
+    _search_list = CLOUD_IMAGES_SEARCH_LIST
+    _thirdparty_search_list = None  # There are probably not going to be third-party mirrors of this.
+
+
+MAAS_IMAGES_SEARCH_LIST = {
+    'addresses': ['91.189.88.247', '[2001:67c:1360:8001::33]'],
+    'name': 'images.maas.io',
+    'aliases': ['stats.images.maas.io', 'new.images.maas.io'],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+MAAS_IMAGES_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestMAASImages(TemplateTestCase, unittest.TestCase):
+    _role = 'maas-images'
+    _search_list = MAAS_IMAGES_SEARCH_LIST
+    _thirdparty_search_list = None  # There are probably not going to be third-party mirrors of this.
+
+
+SIMPLE_STREAMS_SEARCH_LIST = {
+    'addresses': ['91.189.88.247', '[2001:67c:1360:8001::33]'],
+    'name': 'streams.canonical.com',
+    'aliases': [],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+SIMPLE_STREAMS_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestSimpleStreams(TemplateTestCase, unittest.TestCase):
+    _role = 'simple-streams'
+    _search_list = SIMPLE_STREAMS_SEARCH_LIST
+    _thirdparty_search_list = None  # There are probably not going to be third-party mirrors of this.
+
+
+UBUNTU_CLOUD_ARCHIVE_SEARCH_LIST = {
+    'addresses': ['*'],
+    'name': 'ubuntu-cloud.archive.canonical.com',
+    'aliases': [],
+    'ports': [80],
+    'logdir': '/var/log/apache2',
+}
+
+
+class TestUbuntuCloudArchive(TemplateTestCase, unittest.TestCase):
+    _role = 'ubuntu-cloud-archive'
+    _search_list = UBUNTU_CLOUD_ARCHIVE_SEARCH_LIST
+    _thirdparty_search_list = None  # There are probably not going to be third-party mirrors of this.
+
+
+OLD_RELEASES_SEARCH_LIST = {
+    'addresses': ['91.189.88.247', '[2001:67c:1360:8001::33]'],
+    'name': 'old-releases.ubuntu.com',
+    'aliases': [],
+    'ports': [80, 443],
+    'logdir': '/var/log/apache2',
+}
+OLD_RELEASES_SEARCH_LIST.update(APACHE_TLS_SETTINGS)
+
+
+class TestOldReleases(TemplateTestCase, unittest.TestCase):
+    _role = 'old-releases'
+    _search_list = OLD_RELEASES_SEARCH_LIST
+    _thirdparty_search_list = None  # There are probably not going to be third-party mirrors of this.
diff --git a/tests/unit/testdata/cdimage/cdimage.txt b/tests/unit/testdata/cdimage/cdimage.txt
new file mode 100644
index 0000000..a9c2c86
--- /dev/null
+++ b/tests/unit/testdata/cdimage/cdimage.txt
@@ -0,0 +1,62 @@
+<VirtualHost 91.189.88.247:80 [2001:67c:1360:8001::33]:80>
+    ServerName cdimage.ubuntu.com
+    ServerAlias cdimages.ubuntu.com
+    ServerAlias *.cdimage.ubuntu.com
+    ServerAlias *.cdimages.ubuntu.com
+    ServerAlias cdimage.ubuntulinux.org
+    ServerAlias cdimages.ubuntulinux.org
+    ServerAlias *.cdimage.ubuntulinux.org
+    ServerAlias *.cdimages.ubuntulinux.org
+
+    CustomLog /var/log/apache2/cdimage.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/cdimage.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/cdimage.ubuntu.com/www
+    Alias /cdimage "/srv/cdimage.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/cdimage.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
+<VirtualHost 91.189.88.247:443 [2001:67c:1360:8001::33]:443>
+    ServerName cdimage.ubuntu.com
+    ServerAlias cdimages.ubuntu.com
+    ServerAlias *.cdimage.ubuntu.com
+    ServerAlias *.cdimages.ubuntu.com
+    ServerAlias cdimage.ubuntulinux.org
+    ServerAlias cdimages.ubuntulinux.org
+    ServerAlias *.cdimage.ubuntulinux.org
+    ServerAlias *.cdimages.ubuntulinux.org
+
+    CustomLog /var/log/apache2/cdimage.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/cdimage.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/cdimage.ubuntu.com.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/cdimage.ubuntu.com.key
+    SSLCertificateChainFile /etc/apache2/ssl/cdimage.ubuntu.com_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/cdimage.ubuntu.com/www
+    Alias /cdimage "/srv/cdimage.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/cdimage.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/cdimage/thirdparty.txt b/tests/unit/testdata/cdimage/thirdparty.txt
new file mode 100644
index 0000000..6245040
--- /dev/null
+++ b/tests/unit/testdata/cdimage/thirdparty.txt
@@ -0,0 +1,20 @@
+<VirtualHost *:80>
+    ServerName ubuntu-cdimage.mirrors.example.net
+
+    CustomLog /var/log/apache2/ubuntu-cdimage.mirrors.example.net-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu-cdimage.mirrors.example.net-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/ubuntu-cdimage.mirrors.example.net/www
+    Alias /cdimage "/srv/ubuntu-cdimage.mirrors.example.net/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu-cdimage.mirrors.example.net/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/cloud-images/cloud-images.txt b/tests/unit/testdata/cloud-images/cloud-images.txt
new file mode 100644
index 0000000..6cdd52f
--- /dev/null
+++ b/tests/unit/testdata/cloud-images/cloud-images.txt
@@ -0,0 +1,54 @@
+<VirtualHost 91.189.88.247:80 [2001:67c:1360:8001::33]:80>
+    ServerName cloud-images.ubuntu.com
+    ServerAlias *.cloud-images.ubuntu.com
+    ServerAlias uec-images.ubuntu.com
+    ServerAlias uec-images.ubuntulinux.org
+
+    CustomLog /var/log/apache2/cloud-images.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/cloud-images.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/cloud-images.ubuntu.com/www
+    Alias /cloud-images "/srv/cloud-images.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/cloud-images.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
+<VirtualHost 91.189.88.247:443 [2001:67c:1360:8001::33]:443>
+    ServerName cloud-images.ubuntu.com
+    ServerAlias *.cloud-images.ubuntu.com
+    ServerAlias uec-images.ubuntu.com
+    ServerAlias uec-images.ubuntulinux.org
+
+    CustomLog /var/log/apache2/cloud-images.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/cloud-images.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/cloud-images.ubuntu.com.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/cloud-images.ubuntu.com.key
+    SSLCertificateChainFile /etc/apache2/ssl/cloud-images.ubuntu.com_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/cloud-images.ubuntu.com/www
+    Alias /cloud-images "/srv/cloud-images.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/cloud-images.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/maas-images/maas-images.txt b/tests/unit/testdata/maas-images/maas-images.txt
new file mode 100644
index 0000000..5202aff
--- /dev/null
+++ b/tests/unit/testdata/maas-images/maas-images.txt
@@ -0,0 +1,56 @@
+<VirtualHost 91.189.88.247:80 [2001:67c:1360:8001::33]:80>
+    ServerName images.maas.io
+    ServerAlias stats.images.maas.io
+    ServerAlias new.images.maas.io
+
+    CustomLog /var/log/apache2/images.maas.io-access.log combined-port
+    ErrorLog /var/log/apache2/images.maas.io-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    # RT#128160
+    RedirectMatch permanent ^/ephemeral-v3/+daily/(.*) /ephemeral-v3/stable/$1
+
+    DocumentRoot /srv/images.maas.io/www
+
+    FileETag MTime Size
+    <Directory "/srv/images.maas.io/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
+<VirtualHost 91.189.88.247:443 [2001:67c:1360:8001::33]:443>
+    ServerName images.maas.io
+    ServerAlias stats.images.maas.io
+    ServerAlias new.images.maas.io
+
+    CustomLog /var/log/apache2/images.maas.io-access.log combined-port
+    ErrorLog /var/log/apache2/images.maas.io-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/images.maas.io.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/images.maas.io.key
+    SSLCertificateChainFile /etc/apache2/ssl/images.maas.io_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    # RT#128160
+    RedirectMatch permanent ^/ephemeral-v3/+daily/(.*) /ephemeral-v3/stable/$1
+
+    DocumentRoot /srv/images.maas.io/www
+
+    FileETag MTime Size
+    <Directory "/srv/images.maas.io/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/old-releases/old-releases.txt b/tests/unit/testdata/old-releases/old-releases.txt
new file mode 100644
index 0000000..19e302d
--- /dev/null
+++ b/tests/unit/testdata/old-releases/old-releases.txt
@@ -0,0 +1,84 @@
+<VirtualHost 91.189.88.247:80 [2001:67c:1360:8001::33]:80>
+    ServerName old-releases.ubuntu.com
+
+    CustomLog /var/log/apache2/old-releases.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/old-releases.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/old-releases.ubuntu.com/www
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/old-releases.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
+<VirtualHost 91.189.88.247:443 [2001:67c:1360:8001::33]:443>
+    ServerName old-releases.ubuntu.com
+
+    CustomLog /var/log/apache2/old-releases.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/old-releases.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/old-releases.ubuntu.com.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/old-releases.ubuntu.com.key
+    SSLCertificateChainFile /etc/apache2/ssl/old-releases.ubuntu.com_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/old-releases.ubuntu.com/www
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/old-releases.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/ports/ports.txt b/tests/unit/testdata/ports/ports.txt
new file mode 100644
index 0000000..ea6aaf7
--- /dev/null
+++ b/tests/unit/testdata/ports/ports.txt
@@ -0,0 +1,22 @@
+<VirtualHost *:80>
+    ServerName ports.ubuntu.com
+    ServerAlias ports.ubuntulinux.org
+    ServerAlias *.ports.ubuntu.com
+    ServerAlias *.ports.ubuntulinux.org
+
+    CustomLog /var/log/apache2/ports.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/ports.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/ports.ubuntu.com/www
+    Alias /cdimage "/srv/ports.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/ports.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/ports/thirdparty.txt b/tests/unit/testdata/ports/thirdparty.txt
new file mode 100644
index 0000000..b31b5e6
--- /dev/null
+++ b/tests/unit/testdata/ports/thirdparty.txt
@@ -0,0 +1,46 @@
+<VirtualHost *:80>
+    ServerName ubuntu-ports.mirrors.example.net
+
+    CustomLog /var/log/apache2/ubuntu-ports.mirrors.example.net-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu-ports.mirrors.example.net-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/ubuntu-ports.mirrors.example.net/www
+    Alias /cdimage "/srv/ubuntu-ports.mirrors.example.net/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu-ports.mirrors.example.net/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
+<VirtualHost *:443>
+    ServerName ubuntu-ports.mirrors.example.net
+
+    CustomLog /var/log/apache2/ubuntu-ports.mirrors.example.net-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu-ports.mirrors.example.net-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/ubuntu-ports.mirrors.example.net.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/ubuntu-ports.mirrors.example.net.key
+    SSLCertificateChainFile /etc/apache2/ssl/ubuntu-ports.mirrors.example.net_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/ubuntu-ports.mirrors.example.net/www
+    Alias /cdimage "/srv/ubuntu-ports.mirrors.example.net/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu-ports.mirrors.example.net/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/releases/releases.txt b/tests/unit/testdata/releases/releases.txt
new file mode 100644
index 0000000..6790689
--- /dev/null
+++ b/tests/unit/testdata/releases/releases.txt
@@ -0,0 +1,54 @@
+<VirtualHost 91.189.88.247:80 [2001:67c:1360:8001::33]:80>
+    ServerName releases.ubuntu.com
+    ServerAlias *.releases.ubuntu.com
+    ServerAlias releases.ubuntulinux.org
+    ServerAlias *.releases.ubuntulinux.org
+
+    CustomLog /var/log/apache2/releases.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/releases.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/releases.ubuntu.com/www
+    Alias /releases "/srv/releases.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/releases.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
+<VirtualHost 91.189.88.247:443 [2001:67c:1360:8001::33]:443>
+    ServerName releases.ubuntu.com
+    ServerAlias *.releases.ubuntu.com
+    ServerAlias releases.ubuntulinux.org
+    ServerAlias *.releases.ubuntulinux.org
+
+    CustomLog /var/log/apache2/releases.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/releases.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/releases.ubuntu.com.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/releases.ubuntu.com.key
+    SSLCertificateChainFile /etc/apache2/ssl/releases.ubuntu.com_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/releases.ubuntu.com/www
+    Alias /releases "/srv/releases.ubuntu.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/releases.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/releases/thirdparty.txt b/tests/unit/testdata/releases/thirdparty.txt
new file mode 100644
index 0000000..0043de6
--- /dev/null
+++ b/tests/unit/testdata/releases/thirdparty.txt
@@ -0,0 +1,20 @@
+<VirtualHost *:80>
+    ServerName ubuntu-releases.mirrors.example.net
+
+    CustomLog /var/log/apache2/ubuntu-releases.mirrors.example.net-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu-releases.mirrors.example.net-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/ubuntu-releases.mirrors.example.net/www
+    Alias /releases "/srv/ubuntu-releases.mirrors.example.net/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu-releases.mirrors.example.net/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/simple-streams/simple-streams.txt b/tests/unit/testdata/simple-streams/simple-streams.txt
new file mode 100644
index 0000000..c38ddce
--- /dev/null
+++ b/tests/unit/testdata/simple-streams/simple-streams.txt
@@ -0,0 +1,54 @@
+<VirtualHost 91.189.88.247:80 [2001:67c:1360:8001::33]:80>
+    ServerName streams.canonical.com
+
+    CustomLog /var/log/apache2/streams.canonical.com-access.log combined-port
+    ErrorLog /var/log/apache2/streams.canonical.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/streams.canonical.com/www
+    Alias /simple-streams "/srv/streams.canonical.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/streams.canonical.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+    # cRT#130349
+    AddOutputFilterByType DEFLATE application/json
+</VirtualHost>
+
+<VirtualHost 91.189.88.247:443 [2001:67c:1360:8001::33]:443>
+    ServerName streams.canonical.com
+
+    CustomLog /var/log/apache2/streams.canonical.com-access.log combined-port
+    ErrorLog /var/log/apache2/streams.canonical.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/streams.canonical.com.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/streams.canonical.com.key
+    SSLCertificateChainFile /etc/apache2/ssl/streams.canonical.com_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/streams.canonical.com/www
+    Alias /simple-streams "/srv/streams.canonical.com/www/"
+
+    FileETag MTime Size
+    <Directory "/srv/streams.canonical.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+        AllowOverride FileInfo Indexes
+    </Directory>
+
+    # cRT#130349
+    AddOutputFilterByType DEFLATE application/json
+</VirtualHost>
+
diff --git a/tests/unit/testdata/ubuntu-cloud-archive/ubuntu-cloud-archive.txt b/tests/unit/testdata/ubuntu-cloud-archive/ubuntu-cloud-archive.txt
new file mode 100644
index 0000000..34e829e
--- /dev/null
+++ b/tests/unit/testdata/ubuntu-cloud-archive/ubuntu-cloud-archive.txt
@@ -0,0 +1,39 @@
+<VirtualHost *:80>
+    ServerName ubuntu-cloud.archive.canonical.com
+
+    CustomLog /var/log/apache2/ubuntu-cloud.archive.canonical.com-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu-cloud.archive.canonical.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/ubuntu-cloud.archive.canonical.com/www
+
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu-cloud.archive.canonical.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/ubuntu-unsafe/ubuntu-unsafe.txt b/tests/unit/testdata/ubuntu-unsafe/ubuntu-unsafe.txt
new file mode 100644
index 0000000..2a2b121
--- /dev/null
+++ b/tests/unit/testdata/ubuntu-unsafe/ubuntu-unsafe.txt
@@ -0,0 +1,42 @@
+<VirtualHost 91.189.88.245:80 [2001:67c:1360:8001::35]:80>
+    ServerName clouds.archive.ubuntu.com
+    ServerAlias *.clouds.archive.ubuntu.com
+
+    CustomLog /var/log/apache2/clouds.archive.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/clouds.archive.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    # LP:1868232 (cRT#125271)
+    HTTPProtocolOptions unsafe
+
+    DocumentRoot /srv/clouds.archive.ubuntu.com/www
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/clouds.archive.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/ubuntu/thirdparty.txt b/tests/unit/testdata/ubuntu/thirdparty.txt
new file mode 100644
index 0000000..54b0912
--- /dev/null
+++ b/tests/unit/testdata/ubuntu/thirdparty.txt
@@ -0,0 +1,84 @@
+<VirtualHost *:80>
+    ServerName ubuntu.mirrors.example.net
+
+    CustomLog /var/log/apache2/ubuntu.mirrors.example.net-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu.mirrors.example.net-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/ubuntu.mirrors.example.net/www
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu.mirrors.example.net/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
+<VirtualHost *:443>
+    ServerName ubuntu.mirrors.example.net
+
+    CustomLog /var/log/apache2/ubuntu.mirrors.example.net-access.log combined-port
+    ErrorLog /var/log/apache2/ubuntu.mirrors.example.net-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    SSLEngine On
+    SSLCertificateFile /etc/apache2/ssl/ubuntu.mirrors.example.net.crt
+    SSLCertificateKeyFile /etc/apache2/ssl/ubuntu.mirrors.example.net.key
+    SSLCertificateChainFile /etc/apache2/ssl/ubuntu.mirrors.example.net_chain.crt
+    SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP
+    SSLHonorCipherOrder on
+    SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
+    DocumentRoot /srv/ubuntu.mirrors.example.net/www
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/ubuntu.mirrors.example.net/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+
diff --git a/tests/unit/testdata/ubuntu/ubuntu.txt b/tests/unit/testdata/ubuntu/ubuntu.txt
new file mode 100644
index 0000000..2121a4c
--- /dev/null
+++ b/tests/unit/testdata/ubuntu/ubuntu.txt
@@ -0,0 +1,44 @@
+<VirtualHost *:80>
+    ServerName archive.ubuntu.com
+    ServerAlias *.archive.ubuntu.com
+    ServerAlias archive.ubuntulinux.org
+    ServerAlias *.archive.ubuntulinux.org
+    ServerAlias ftp.ubuntu.com
+    ServerAlias ftp.ubuntulinux.org
+    ServerAlias ftp.no-name-yet.com
+
+    CustomLog /var/log/apache2/archive.ubuntu.com-access.log combined-port
+    ErrorLog /var/log/apache2/archive.ubuntu.com-error.log
+    LogFormat "%h %p %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined-port
+
+    DocumentRoot /srv/archive.ubuntu.com/www
+    # Munge the Cache-Control/Expires response headers to try make
+    # transparent proxy servers DTRT.
+    <Files ~ "Release(\.gpg)?|InRelease|Packages\.(xz|bz2|gz)|Sources\.(xz|bz2|gz)?|Translation-.*?$">
+        ExpiresActive On
+        ExpiresDefault "modification plus 1800 seconds"
+        Header append Cache-Control "proxy-revalidate"
+    </Files>
+    # Allow intermediate caches to cache .deb|.udeb|.ddeb files for a day.
+    # This could be increased in the future since deb files are the perfect
+    # case for cacheable resources (invariant, versioned URLs, and external
+    # integrity verification)
+    <FilesMatch ".+\.[ud]?deb$">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+    # Allow intermediate caches to store by-hash files for up to a day.
+    # Again, these files are by definition invariant so they are perfectly
+    # cacheable.
+    <FilesMatch "\/by-hash\/">
+        Header append Cache-Control "max-age=86400"
+    </FilesMatch>
+
+    FileETag MTime Size
+    <Directory "/srv/archive.ubuntu.com/">
+        Require all granted
+        IndexOptions NameWidth=* +SuppressDescription
+        Options +Indexes +FollowSymLinks
+        IndexIgnore favicon.ico
+    </Directory>
+</VirtualHost>
+