anchor.diff:  # DO NOT EDIT - This file is being maintained by Chef
   
  -<% [80, 443].each do |port| -%>
  -<VirtualHost *:<%= port %>>
  +<VirtualHost *:443>
       ServerName <%= node[:fqdn] %>
       ServerAlias nominatim.openstreetmap.org
       ServerAlias nominatim.osm.org
  
positive.code:     RewriteMap bulklist txt:<%= @directory %>/settings/ip_blocks.map
      RewriteRule ^/(search|reverse|lookup)(\.php)?(/.*)? /pool-${bulklist:%{REMOTE_ADDR}|www}/$1.php$3 [PT]
      RewriteRule ^/details(\.php)?(/.*)? /pool-${bulklist:%{REMOTE_ADDR}|details}/details.php$2 [PT]
  
  </VirtualHost>
  
  <% end -%>
  
negative.code:     ServerAlias nominatim.openmaps.org
      ServerAdmin webmaster@openstreetmap.org
  
      # Enable SSL
      SSLEngine on
      SSLProxyEngine on
      SSLCertificateFile /etc/ssl/certs/nominatim.openstreetmap.org.pem
      SSLCertificateKeyFile /etc/ssl/private/nominatim.openstreetmap.org.key
  
      # Remove Proxy request header to mitigate https://httpoxy.org/
      RequestHeader unset Proxy early
  