Rework the nagios Apache config as a proper vhost

This also adds HSTS.  Based on the trac Apache config.

Fixes #435.

Suggested viewing: git show -w

(imported from commit e7e9fe74687b88497ddb21f74febfc7fdf9b1979)

servers/puppet/files/apache/sites/nagios

@@ -1,17 +1,29 @@
-# apache configuration for nagios 3.x
+<VirtualHost *:80>
+    ServerName nagios.humbughq.com
+    Redirect permanent / https://nagios.humbughq.com/
+</VirtualHost>
 
-ScriptAlias /cgi-bin/nagios3 /usr/lib/cgi-bin/nagios3
-ScriptAlias /nagios3/cgi-bin /usr/lib/cgi-bin/nagios3
+<VirtualHost *:443>
+    ServerName nagios.humbughq.com
 
-# Where the stylesheets (config files) reside
-Alias /nagios3/stylesheets /etc/nagios3/stylesheets
+    SSLEngine on
+    SSLCertificateFile /etc/apache2/certs/humbug-self-signed.crt
+    SSLCertificateKeyFile /etc/apache2/certs/humbug-self-signed.key
 
-# Where the HTML pages live
-Alias /nagios3 /usr/share/nagios3/htdocs
+    Header add Strict-Transport-Security "max-age=15768000"
 
-RedirectMatch ^/?$ https://nagios.humbughq.com/nagios3/
+    ScriptAlias /cgi-bin/nagios3 /usr/lib/cgi-bin/nagios3
+    ScriptAlias /nagios3/cgi-bin /usr/lib/cgi-bin/nagios3
 
-<DirectoryMatch (/usr/share/nagios3/htdocs|/usr/lib/cgi-bin/nagios3|/etc/nagios3/stylesheets)>
+    # Where the stylesheets (config files) reside
+    Alias /nagios3/stylesheets /etc/nagios3/stylesheets
+
+    # Where the HTML pages live
+    Alias /nagios3 /usr/share/nagios3/htdocs
+
+    RedirectMatch ^/?$ https://nagios.humbughq.com/nagios3/
+
+    <DirectoryMatch (/usr/share/nagios3/htdocs|/usr/lib/cgi-bin/nagios3|/etc/nagios3/stylesheets)>
         Options FollowSymLinks
 
         DirectoryIndex index.php index.html
@@ -25,14 +37,15 @@ RedirectMatch ^/?$ https://nagios.humbughq.com/nagios3/
         AuthDigestProvider file
         AuthUserFile /etc/apache2/users/wiki
         Require valid-user
-</DirectoryMatch>
+    </DirectoryMatch>
 
-<Directory /usr/share/nagios3/htdocs>
+    <Directory /usr/share/nagios3/htdocs>
         Options +ExecCGI
-</Directory>
+    </Directory>
 
-# Enable this ScriptAlias if you want to enable the grouplist patch.
-# See http://apan.sourceforge.net/download.html for more info
-# It allows you to see a clickable list of all hostgroups in the
-# left pane of the Nagios web interface
-ScriptAlias /nagios3/side.html /usr/lib/cgi-bin/nagios3/grouplist.cgi
+    # Enable this ScriptAlias if you want to enable the grouplist patch.
+    # See http://apan.sourceforge.net/download.html for more info
+    # It allows you to see a clickable list of all hostgroups in the
+    # left pane of the Nagios web interface
+    ScriptAlias /nagios3/side.html /usr/lib/cgi-bin/nagios3/grouplist.cgi
+</VirtualHost>