]> git.ipfire.org Git - people/teissler/ipfire-2.x.git/blame - config/httpd/vhosts.d/ipfire-interface-ssl.conf
Chmod esniper home to 777
[people/teissler/ipfire-2.x.git] / config / httpd / vhosts.d / ipfire-interface-ssl.conf
CommitLineData
90c973a6
MT
1<VirtualHost *:444>
2
3 RewriteEngine on
4 RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS)
5 RewriteRule .* - [F]
d733119b 6 DocumentRoot /srv/web/ipfire/html
90c973a6
MT
7 ServerAdmin root@localhost
8 ErrorLog /var/log/httpd/error_log
9 TransferLog /var/log/httpd/access_log
10 SSLEngine on
11 SSLProtocol all -SSLv2
12 SSLCipherSuite ALL:!ADH:!EXPORT56:!eNULL:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP
13 SSLCertificateFile /etc/httpd/server.crt
14 SSLCertificateKeyFile /etc/httpd/server.key
d733119b 15 <Directory /srv/web/ipfire/html>
90c973a6
MT
16 Options ExecCGI
17 AllowOverride None
18 Order allow,deny
19 Allow from all
20 </Directory>
d733119b 21 <DirectoryMatch "/srv/web/ipfire/html/(graphs|sgraph)">
90c973a6
MT
22 AuthName "IPFire - Restricted"
23 AuthType Basic
24 AuthUserFile /var/ipfire/auth/users
25 Require user admin
26 </DirectoryMatch>
d733119b
MT
27 ScriptAlias /cgi-bin/ /srv/web/ipfire/cgi-bin/
28 <Directory /srv/web/ipfire/cgi-bin>
90c973a6
MT
29 AllowOverride None
30 Options None
31 AuthName "IPFire - Restricted"
32 AuthType Basic
33 AuthUserFile /var/ipfire/auth/users
34 Require user admin
35 <Files chpasswd.cgi>
36 Satisfy Any
37 Allow from All
38 </Files>
39 <Files webaccess.cgi>
40 Satisfy Any
41 Allow from All
42 </Files>
43 <Files credits.cgi>
44 Satisfy Any
45 Allow from All
46 </Files>
47 <Files dial.cgi>
48 Require user admin
49 </Files>
50 </Directory>
d733119b 51 <Directory /srv/web/ipfire/cgi-bin/dial>
90c973a6
MT
52 AllowOverride None
53 Options None
54 AuthName "IPFire - Restricted"
55 AuthType Basic
56 AuthUserFile /var/ipfire/auth/users
57 Require user dial admin
58 </Directory>
59 <Files ~ "\.(cgi|shtml?)$">
60 SSLOptions +StdEnvVars
61 </Files>
d733119b 62 <Directory /srv/web/ipfire/cgi-bin>
90c973a6
MT
63 SSLOptions +StdEnvVars
64 </Directory>
65 SetEnv HOME /home/nobody
66 SetEnvIf User-Agent ".*MSIE.*" \
67 nokeepalive ssl-unclean-shutdown \
68 downgrade-1.0 force-response-1.0
69 CustomLog /var/log/httpd/ssl_request_log \
70 "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
71</VirtualHost>