projects / ipfire-2.x.git / blame
| Commit | Line | Data |
|---|---|---|
| 90c973a6 MT |
1 | <VirtualHost *:444> |
| 2 | ||
| 3 | RewriteEngine on | |
| 4 | RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS) | |
| 5 | RewriteRule .* - [F] | |
| d733119b | 6 | DocumentRoot /srv/web/ipfire/html |
| 90c973a6 MT |
7 | ServerAdmin root@localhost |
| 8 | ErrorLog /var/log/httpd/error_log | |
| 9 | TransferLog /var/log/httpd/access_log | |
| 10 | SSLEngine on | |
| a7006325 | 11 | SSLProtocol all -SSLv2 -SSLv3 |
| f227ae4f | 12 | SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:CAMELLIA128-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA |
| 69776cc4 | 13 | SSLHonorCipherOrder on |
| 90c973a6 MT |
14 | SSLCertificateFile /etc/httpd/server.crt |
| 15 | SSLCertificateKeyFile /etc/httpd/server.key | |
| 73ba2286 PM |
16 | SSLCertificateFile /etc/httpd/server-ecdsa.crt |
| 17 | SSLCertificateKeyFile /etc/httpd/server-ecdsa.key | |
| 810a7ea2 | 18 | |
| d733119b | 19 | <Directory /srv/web/ipfire/html> |
| 90c973a6 MT |
20 | Options ExecCGI |
| 21 | AllowOverride None | |
| d41fe99f | 22 | Require all granted |
| 90c973a6 | 23 | </Directory> |
| d733119b | 24 | <DirectoryMatch "/srv/web/ipfire/html/(graphs|sgraph)"> |
| 90c973a6 MT |
25 | AuthName "IPFire - Restricted" |
| 26 | AuthType Basic | |
| 27 | AuthUserFile /var/ipfire/auth/users | |
| 28 | Require user admin | |
| 29 | </DirectoryMatch> | |
| d733119b MT |
30 | ScriptAlias /cgi-bin/ /srv/web/ipfire/cgi-bin/ |
| 31 | <Directory /srv/web/ipfire/cgi-bin> | |
| 90c973a6 | 32 | AllowOverride None |
| 810a7ea2 | 33 | Options ExecCGI |
| 90c973a6 MT |
34 | AuthName "IPFire - Restricted" |
| 35 | AuthType Basic | |
| 36 | AuthUserFile /var/ipfire/auth/users | |
| 37 | Require user admin | |
| d41fe99f WA |
38 | <Files chpasswd.cgi> |
| 39 | Require all granted | |
| 90c973a6 MT |
40 | </Files> |
| 41 | <Files webaccess.cgi> | |
| d41fe99f | 42 | Require all granted |
| 90c973a6 | 43 | </Files> |
| 90c973a6 MT |
44 | </Directory> |
| 45 | <Files ~ "\.(cgi|shtml?)$"> | |
| 46 | SSLOptions +StdEnvVars | |
| 47 | </Files> | |
| d733119b | 48 | <Directory /srv/web/ipfire/cgi-bin> |
| 90c973a6 MT |
49 | SSLOptions +StdEnvVars |
| 50 | </Directory> | |
| 51 | SetEnv HOME /home/nobody | |
| 52 | SetEnvIf User-Agent ".*MSIE.*" \ | |
| 53 | nokeepalive ssl-unclean-shutdown \ | |
| 54 | downgrade-1.0 force-response-1.0 | |
| 55 | CustomLog /var/log/httpd/ssl_request_log \ | |
| 56 | "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" | |
| 0bc58278 AF |
57 | |
| 58 | Alias /updatecache/ /var/updatecache/ | |
| 59 | <Directory /var/updatecache> | |
| 60 | Options ExecCGI | |
| 61 | AllowOverride None | |
| d41fe99f | 62 | Require all granted |
| 0bc58278 | 63 | </Directory> |
| 7e620487 | 64 | |
| a4c76879 | 65 | Alias /repository/ /var/urlrepo/ |
| 7e620487 CS |
66 | <Directory /var/urlrepo> |
| 67 | Options ExecCGI | |
| 68 | AllowOverride None | |
| d41fe99f | 69 | Require all granted |
| 7e620487 | 70 | </Directory> |
| f8716194 MT |
71 | |
| 72 | Alias /proxy-reports/ /var/log/sarg/ | |
| 73 | <Directory /var/log/sarg> | |
| 74 | AllowOverride None | |
| 75 | Options None | |
| 76 | AuthName "IPFire - Restricted" | |
| 77 | AuthType Basic | |
| 78 | AuthUserFile /var/ipfire/auth/users | |
| 79 | Require user admin | |
| 80 | </Directory> | |
| 90c973a6 | 81 | </VirtualHost> |