diff options
Diffstat (limited to 'localfs/etc/httpd/conf.d/vhosts.d/jango104.conf')
| -rw-r--r-- | localfs/etc/httpd/conf.d/vhosts.d/jango104.conf | 140 |
1 files changed, 140 insertions, 0 deletions
diff --git a/localfs/etc/httpd/conf.d/vhosts.d/jango104.conf b/localfs/etc/httpd/conf.d/vhosts.d/jango104.conf new file mode 100644 index 0000000..b3cade8 --- /dev/null +++ b/localfs/etc/httpd/conf.d/vhosts.d/jango104.conf @@ -0,0 +1,140 @@ +AddDefaultCharset UTF-8 +<VirtualHost *:80> + ServerAdmin some.email@comain.de + DocumentRoot "/var/www/vhosts/jango104.domain.de" + ServerName jango104.domain.de + ServerAlias jango104.domain.world jango104.domain.de jango104 + ErrorLog "/var/log/httpd/jango104.domain.de-error.log" + CustomLog "/var/log/httpd/jango104.domain.de-access.log" common + RewriteEngine on + RewriteCond %{HTTPS} !=on + RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [NE,R,L] +</VirtualHost> +<VirtualHost *:443> + ServerAdmin some.email@domain.de + DocumentRoot "/var/www/vhosts/jango104.domain.de" + ServerName jango104.domain.de + ServerAlias jango104.domain.world jango104.domain.de jango104 + Alias "/errors" "/var/www/errors" + ErrorLog "/var/log/httpd/jango104.domain.de-ssl-error.log" + CustomLog "/var/log/httpd/jango104.domain.de-ssl-access.log" common + ErrorDocument 401 "/errors/401.html" + ErrorDocument 403 "/errors/403.html" + ErrorDocument 404 "/errors/404.html" + <Directory /> + Options FollowSymLinks + AllowOverride none + </Directory> + <Directory "/var/www/errors"> + Options -Indexes + AllowOverride None + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de"> + Options Indexes FollowSymLinks MultiViews + IndexOptions +ShowForbidden +NameWidth=* + AllowOverride None + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/dump_hpe/"> + Options Indexes FollowSymlinks Multiviews + IndexOptions +ShowForbidden +Namewidth=* + AllowOverride all + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/dump/"> + Options Indexes FollowSymlinks Multiviews + IndexOptions +ShowForbidden +Namewidth=* + AllowOverride all + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/isos/"> + Options Indexes FollowSymlinks Multiviews + IndexOptions +ShowForbidden +Namewidth=* + AllowOverride all + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/redhat/"> + Options Indexes FollowSymlinks Multiviews + IndexOptions +ShowForbidden +Namewidth=* + AllowOverride all + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/test/"> + Options Indexes FollowSymlinks Multiviews + IndexOptions +ShowForbidden +Namewidth=* + AllowOverride all + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/propaganda/"> + Options Indexes FollowSymlinks Multiviews + IndexOptions +ShowForbidden +Namewidth=* + AllowOverride all + <RequireAll> + Require all granted + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/redhat/CD"> + Options Indexes FollowSymlinks MultiViews + IndexOptions +NameWidth=* + AllowOverride None + AuthType Basic + AuthName "gibe login" + AuthBasicProvider file + AuthUserFile "/etc/httpd/htaccess.d/redhat" + <RequireAll> + Require user company + Require valid-user + </RequireAll> + </Directory> + <Directory "/var/www/vhosts/jango104.domain.de/redhat/cert"> + Options Indexes FollowSymlinks MultiViews + IndexOptions +NameWidth=* + AllowOverride None + AuthType Basic + AuthName "gibe login" + AuthBasicProvider file + AuthUserFile "/etc/httpd/htaccess.d/redhat" + <RequireAll> + Require user company + Require valid-user + </RequireAll> + </Directory> + SSLEngine on + SSLProtocol all -SSLv3 + SSLProxyProtocol all -SSLv3 + SSLHonorCipherOrder on + SSLCipherSuite PROFILE=SYSTEM + SSLProxyCipherSuite PROFILE=SYSTEM + + # Feck snakeoil. Root CA and Intermed CA from root server, cert is a) chained and b) set up with higher ciphers. + # (Although, admittedly, there's way worse snakeoils than on Fedora 27, but still it's snakeoil.) + SSLCertificateFile /etc/pki/tls/certs/jango104.crt + SSLCertificateKeyFile /etc/pki/tls/private/jango104.key + #SSLCertificateChainFile /etc/pki/tls/certs/jango104.crt + #SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt + #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt + <FilesMatch "\.(cgi|shtml|phtml|php)$"> + SSLOptions +StdEnvVars + </FilesMatch> + <Directory "/var/www/cgi-bin"> + SSLOptions +StdEnvVars + </Directory> + BrowserMatch "MSIE [2-5]" \ + nokeepalive ssl-unclean-shutdown \ + downgrade-1.0 force-response-1.0 +</VirtualHost> |