64 lines
1.6 KiB
ApacheConf
64 lines
1.6 KiB
ApacheConf
IncludeOptional mods-enabled/*.load
|
|
IncludeOptional mods-enabled/*.conf
|
|
|
|
Listen 80
|
|
|
|
# Run as the distro's apache user and use the standard runtime dir, otherwise the
|
|
# child processes run as uid -1 and mod_auth_openidc cannot write its OIDCCacheDir
|
|
# (state/cache) -> HTTP 500 on the first authenticated request.
|
|
User ${APACHE_RUN_USER}
|
|
Group ${APACHE_RUN_GROUP}
|
|
DefaultRuntimeDir ${APACHE_RUN_DIR}
|
|
PidFile ${APACHE_PID_FILE}
|
|
|
|
ServerName app.boxi.ch
|
|
ServerAdmin online@boxi.ch
|
|
ServerTokens Prod
|
|
ServerSignature Off
|
|
|
|
DocumentRoot "/var/www"
|
|
|
|
IncludeOptional /etc/apache2/conf.d/*.conf
|
|
|
|
AddDefaultCharset UTF-8
|
|
EnableSendfile on
|
|
|
|
FileETag None
|
|
TraceEnable off
|
|
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
|
|
Header always append X-Frame-Options SAMEORIGIN
|
|
Header set X-XSS-Protection "1; mode=block"
|
|
RewriteEngine On
|
|
RewriteCond %{THE_REQUEST} !HTTP/1.1$
|
|
RewriteRule .* - [F]
|
|
Timeout 60
|
|
|
|
Mutex posixsem
|
|
|
|
OIDCCacheType file
|
|
OIDCCacheDir ${APACHE_RUN_DIR}/mod_auth_openidc/cache
|
|
|
|
# SSLStaplingCache shmcb:${APACHE_RUN_DIR}/stapling_cache(128000)
|
|
|
|
|
|
<IfModule dir_module>
|
|
DirectoryIndex index.html
|
|
</IfModule>
|
|
<Files ".ht*">
|
|
Require all denied
|
|
</Files>
|
|
|
|
<IfModule log_config_module>
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b" common
|
|
|
|
<IfModule logio_module>
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
|
|
</IfModule>
|
|
</IfModule>
|
|
|
|
ErrorLog /dev/stderr
|
|
CustomLog /dev/stdout combined
|
|
LogLevel debug
|
|
|
|
IncludeOptional sites-enabled/* |