Hinzugefuegt:

[people/pmueller/ipfire-2.x.git] / config / httpd / httpd.conf

##\r
## httpd.conf -- Apache HTTP server configuration file\r
##\r
ServerType standalone\r
ServerRoot /etc/httpd\r
\r
LockFile /var/lock/httpd.lock\r
PidFile /var/run/httpd.pid\r
ScoreBoardFile /var/run/httpd.scoreboard\r
Timeout 900\r
KeepAlive On\r
MaxKeepAliveRequests 100\r
KeepAliveTimeout 15\r
MinSpareServers 1\r
MaxSpareServers 2\r
StartServers 2\r
MaxClients 10\r
MaxRequestsPerChild 100\r
Port 81\r
Listen 81\r
Listen 444\r
User nobody\r
Group nobody\r
ServerAdmin root@localhost\r
ServerTokens Prod\r
DocumentRoot /home/httpd/html\r
# Limit track/trace requests\r
RewriteEngine on\r
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS)\r
RewriteRule .* - [F]\r
\r
<Directory />\r
    Options None\r
    AllowOverride None\r
</Directory>\r
<Directory /home/httpd/html>\r
    Options ExecCGI\r
    AllowOverride None\r
    Order allow,deny\r
    Allow from all\r
</Directory>\r
<DirectoryMatch "/home/httpd/html/(graphs|sgraph)">\r
    AuthName "IPFire - Restricted"\r
    AuthType Basic\r
    AuthUserFile /var/ipfire/auth/users\r
    Require user admin\r
</DirectoryMatch>\r
ScriptAlias /cgi-bin/ /home/httpd/cgi-bin/\r
<Directory /home/httpd/cgi-bin>\r
    AllowOverride None\r
    Options None\r
    AuthName "IPFire - Restricted"\r
    AuthType Basic\r
    AuthUserFile /var/ipfire/auth/users\r
    Require user admin\r
    <Files chpasswd.cgi>\r
        Satisfy Any\r
        Allow from All\r
    </Files>\r
    <Files webaccess.cgi>\r
        Satisfy Any\r
        Allow from All\r
    </Files>\r
    <Files credits.cgi>\r
        Satisfy Any\r
        Allow from All\r
    </Files>\r
    <Files dial.cgi>\r
        Require user admin\r
    </Files>\r
</Directory>\r
<Directory /home/httpd/cgi-bin/dial>\r
    AllowOverride None\r
    Options None\r
    AuthName "IPFire - Restricted"\r
    AuthType Basic\r
    AuthUserFile /var/ipfire/auth/users\r
    Require user dial admin\r
</Directory>\r
<IfModule mod_dir.c>\r
    DirectoryIndex index.html index.htm index.shtml index.cgi\r
</IfModule>\r
AccessFileName .htaccess\r
<Files ~ "^\.ht">\r
    Order allow,deny\r
    Deny from all\r
</Files>\r
<IfModule mod_mime.c>\r
    TypesConfig /etc/mime.types\r
</IfModule>\r
DefaultType text/plain\r
\r
HostnameLookups Off\r
ErrorLog /var/log/httpd/error_log\r
LogLevel warn\r
LogFormat "%h %l %u %t \"%r\" %>s %b" common\r
CustomLog /var/log/httpd/access_log common\r
ServerSignature Off\r
AddHandler cgi-script .cgi\r
<IfModule mod_setenvif.c>\r
    BrowserMatch "Mozilla/2" nokeepalive\r
    BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0\r
    BrowserMatch "RealPlayer 4\.0" force-response-1.0\r
    BrowserMatch "Java/1\.0" force-response-1.0\r
    BrowserMatch "JDK/1\.0" force-response-1.0\r
</IfModule>\r
\r
###\r
### SSL Configuration\r
###\r
AddType application/x-x509-ca-cert .crt\r
AddType application/x-pkcs7-crl    .crl\r
\r
SSLPassPhraseDialog  builtin\r
SSLSessionCache         dbm:/var/log/httpd/ssl_scache\r
SSLSessionCacheTimeout  900\r
SSLMutex  file:/var/log/httpd/ssl_mutex\r
SSLRandomSeed startup builtin\r
SSLRandomSeed connect builtin\r
SSLLog      /var/log/httpd/ssl_engine_log\r
SSLLogLevel info\r
\r
<VirtualHost _default_:444>\r
    RewriteEngine on\r
    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS)\r
    RewriteRule .* - [F]\r
    DocumentRoot /home/httpd/html\r
    ServerAdmin root@localhost\r
    ErrorLog /var/log/httpd/error_log\r
    TransferLog /var/log/httpd/access_log\r
    SSLEngine on\r
    SSLProtocol all -SSLv2\r
    SSLCipherSuite ALL:!ADH:!EXPORT56:!eNULL:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP\r
    SSLCertificateFile /etc/httpd/server.crt\r
    SSLCertificateKeyFile /etc/httpd/server.key\r
    <Files ~ "\.(cgi|shtml?)$">\r
	SSLOptions +StdEnvVars\r
    </Files>\r
    <Directory /home/httpd/cgi-bin>\r
	SSLOptions +StdEnvVars\r
    </Directory>\r
    SetEnv HOME /home/nobody\r
    SetEnvIf User-Agent ".*MSIE.*" \\r
	nokeepalive ssl-unclean-shutdown \\r
	downgrade-1.0 force-response-1.0\r
    CustomLog /var/log/httpd/ssl_request_log \\r
	"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"\r
</VirtualHost>\r
\r
<Directory /home/httpd/html/backup>\r
    Options None\r
    AllowOverride None\r
    AuthName "IPFire - Restricted"\r
    AuthType Basic\r
    AuthUserFile /var/ipfire/auth/users\r
    require user admin\r
</Directory>\r
\r
include /etc/httpd/conf/hostname.conf\r