]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - config/httpd/vhosts.d/ipfire-interface-ssl.conf
RRDTool Fix
[people/pmueller/ipfire-2.x.git] / config / httpd / vhosts.d / ipfire-interface-ssl.conf
CommitLineData
90c973a6
MT
1<VirtualHost *:444>
2
3 RewriteEngine on
4 RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS)
5 RewriteRule .* - [F]
6 DocumentRoot /home/httpd/html
7 ServerAdmin root@localhost
8 ErrorLog /var/log/httpd/error_log
9 TransferLog /var/log/httpd/access_log
10 SSLEngine on
11 SSLProtocol all -SSLv2
12 SSLCipherSuite ALL:!ADH:!EXPORT56:!eNULL:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP
13 SSLCertificateFile /etc/httpd/server.crt
14 SSLCertificateKeyFile /etc/httpd/server.key
15 <Directory /home/httpd/html>
16 Options ExecCGI
17 AllowOverride None
18 Order allow,deny
19 Allow from all
20 </Directory>
21 <DirectoryMatch "/home/httpd/html/(graphs|sgraph)">
22 AuthName "IPFire - Restricted"
23 AuthType Basic
24 AuthUserFile /var/ipfire/auth/users
25 Require user admin
26 </DirectoryMatch>
27 ScriptAlias /cgi-bin/ /home/httpd/cgi-bin/
28 <Directory /home/httpd/cgi-bin>
29 AllowOverride None
30 Options None
31 AuthName "IPFire - Restricted"
32 AuthType Basic
33 AuthUserFile /var/ipfire/auth/users
34 Require user admin
35 <Files chpasswd.cgi>
36 Satisfy Any
37 Allow from All
38 </Files>
39 <Files webaccess.cgi>
40 Satisfy Any
41 Allow from All
42 </Files>
43 <Files credits.cgi>
44 Satisfy Any
45 Allow from All
46 </Files>
47 <Files dial.cgi>
48 Require user admin
49 </Files>
50 </Directory>
51 <Directory /home/httpd/cgi-bin/dial>
52 AllowOverride None
53 Options None
54 AuthName "IPFire - Restricted"
55 AuthType Basic
56 AuthUserFile /var/ipfire/auth/users
57 Require user dial admin
58 </Directory>
59 <Files ~ "\.(cgi|shtml?)$">
60 SSLOptions +StdEnvVars
61 </Files>
62 <Directory /home/httpd/cgi-bin>
63 SSLOptions +StdEnvVars
64 </Directory>
65 SetEnv HOME /home/nobody
66 SetEnvIf User-Agent ".*MSIE.*" \
67 nokeepalive ssl-unclean-shutdown \
68 downgrade-1.0 force-response-1.0
69 CustomLog /var/log/httpd/ssl_request_log \
70 "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
71</VirtualHost>