httpd_conf.in 3.17 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
PidFile "{{ parameters.path_pid }}"
ServerName example.com
ServerAdmin someone@email

<IfDefine !HTTPDPort>
  Listen [{{ parameters.global_ip }}]:{{ parameters.global_port }}
  Define HTTPDPort
</IfDefine>

LoadModule unixd_module modules/mod_unixd.so
LoadModule access_compat_module modules/mod_access_compat.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule mime_module modules/mod_mime.so
#LoadModule cgid_module modules/mod_cgid.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule alias_module modules/mod_alias.so
LoadModule env_module modules/mod_env.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule headers_module modules/mod_headers.so
25
LoadModule log_config_module modules/mod_log_config.so
26 27
LoadModule dav_module modules/mod_dav.so
LoadModule dav_fs_module modules/mod_dav_fs.so
28 29
LoadModule cache_module modules/mod_cache.so
LoadModule file_cache_module modules/mod_file_cache.so
30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule dir_module modules/mod_dir.so
LoadModule cgid_module modules/mod_cgid.so
LoadModule autoindex_module modules/mod_autoindex.so

ErrorLog "{{ parameters.path_error_log }}"
LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog "{{ parameters.path_access_log }}" common

# SSL Configuration
Define SSLConfigured
SSLCertificateFile {{ parameters.cert_file }}
SSLCertificateKeyFile {{ parameters.key_file }}
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLRandomSeed startup /dev/urandom 256
SSLRandomSeed connect builtin
47 48 49
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
50 51 52
SSLEngine   On

Include {{ parameters.httpd_cors_file }}
53

54
DocumentRoot {{ parameters.runner_home }}/public
55

56 57 58 59 60 61 62 63
# Directory protection
<Directory />
    Options FollowSymLinks
    AllowOverride None
    Require all denied
</Directory>

Alias /public {{ parameters.runner_home }}/public
64
<Directory {{ parameters.runner_home }}/public>
65 66 67 68 69 70 71 72
    <Limit GET HEAD OPTIONS REPORT PROPFIND>
      Order Allow,Deny
      Allow from all
      AllowOverride All
      Satisfy Any
      Options Indexes FollowSymLinks
      DirectoryIndex index.html
    </Limit>
73 74 75 76
    <Files .htaccess>
        order allow,deny
        deny from all
    </Files>
77 78
</Directory>

79 80
DavLockDB {{ parameters.dav_lock }}
Alias /share {{ parameters.runner_home }}
81 82 83 84 85
<Directory {{ parameters.runner_home }}>
    DirectoryIndex disabled
    DAV On
    Options Indexes FollowSymLinks
    AuthType Basic
86 87
    AuthName "Webrunner Dav"
    AuthUserFile "{{ parameters.htpasswd_file }}"
88 89 90 91 92 93

    # Prevent using the web browser cache if requesting  the same document
    # from different domains or with different users
    Header set Cache-Control "private, max-age=0, must-revalidate"
    Header set Vary "Origin,Cookie,Authorization"

94 95 96
    <LimitExcept OPTIONS>
        Require valid-user
    </LimitExcept>
97 98
</Directory>