forked from jan/cacert-devsetup
56 lines
1.4 KiB
Text
56 lines
1.4 KiB
Text
|
# customized settings for CAcert webserver
|
||
|
|
|
||
|
|
MaxRequestsPerChild 100
|
||
|
|
|
||
|
|
ServerAdmin support@cacert.org
|
||
|
|
ServerName cacert.org
|
||
|
|
|
||
|
|
Header always set X-Frame-Options "DENY"
|
||
|
|
Header always set X-XSS-Protection "1; mode=block"
|
||
|
|
Header always set X-Content-Type-Options "nosniff"
|
||
|
|
|
||
|
|
DocumentRoot /www/www
|
||
|
|
|
||
|
|
<Directory />
|
||
|
|
Options -Indexes +Includes +FollowSymLinks
|
||
|
|
AllowOverride None
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory /www/www>
|
||
|
|
Options -Indexes +Includes +FollowSymLinks
|
||
|
|
AllowOverride All
|
||
|
|
Require all granted
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory /www/www/docs>
|
||
|
|
Options +Indexes +Includes +FollowSymLinks +MultiViews
|
||
|
|
AllowOverride None
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory /www/stamp>
|
||
|
|
Options -Indexes +Includes +FollowSymLinks
|
||
|
|
AllowOverride All
|
||
|
|
Require all granted
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
UseCanonicalName off
|
||
|
|
HostnameLookups on
|
||
|
|
|
||
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" mod_gzip: %{mod_gzip_compression_ratio}npct. %T %v" full
|
||
|
|
|
||
|
|
CustomLog /var/log/apache2/access.log full
|
||
|
|
|
||
|
|
ServerSignature off
|
||
|
|
|
||
|
|
AddDefaultCharset on
|
||
|
|
|
||
|
|
<IfModule mod_ssl.c>
|
||
|
|
# OCSP Stapling, only in httpd 2.3.3 and later
|
||
|
|
SSLUseStapling on
|
||
|
|
SSLStaplingResponderTimeout 5
|
||
|
|
SSLStaplingReturnResponderErrors off
|
||
|
|
SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ocsp(1280000)
|
||
|
|
SSLStaplingFakeTryLater off
|
||
|
|
SSLStaplingStandardCacheTimeout 86400
|
||
|
|
</IfModule>
|