69 lines
1.7 KiB
ApacheConf
69 lines
1.7 KiB
ApacheConf
|
<IfModule mod_ssl.c>
|
||
|
|
<VirtualHost _default_:443>
|
||
|
|
#ServerName example.com
|
||
|
|
#ServerAlias www.example.com
|
||
|
|
ServerAdmin webmaster@localhost
|
||
|
|
|
||
|
|
DocumentRoot /var/www/html
|
||
|
|
|
||
|
|
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||
|
|
CustomLog ${APACHE_LOG_DIR}/access.log combined
|
||
|
|
|
||
|
|
SSLEngine on
|
||
|
|
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
|
||
|
|
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
|
||
|
|
#SSLCertificateChainFile /etc/apache2/ssl.crt/server-ca.crt
|
||
|
|
|
||
|
|
#SSLCACertificatePath /etc/ssl/certs/
|
||
|
|
#SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
|
||
|
|
|
||
|
|
#SSLCARevocationPath /etc/apache2/ssl.crl/
|
||
|
|
#SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl
|
||
|
|
|
||
|
|
# Client Authentication (Type):
|
||
|
|
# Client certificate verification type and depth. Types are
|
||
|
|
# none, optional, require and optional_no_ca. Depth is a
|
||
|
|
# number which specifies how deeply to verify the certificate
|
||
|
|
# issuer chain before deciding the certificate is not valid.
|
||
|
|
#SSLVerifyClient require
|
||
|
|
#SSLVerifyDepth 10
|
||
|
|
|
||
|
|
#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
|
||
|
|
<FilesMatch "\.php$">
|
||
|
|
SSLOptions +StdEnvVars
|
||
|
|
</FilesMatch>
|
||
|
|
|
||
|
|
<Directory "/">
|
||
|
|
Require all denied
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory "/var/www/html/">
|
||
|
|
Require all granted
|
||
|
|
Options -Indexes
|
||
|
|
<LimitExcept GET POST>
|
||
|
|
Deny from all
|
||
|
|
</LimitExcept>
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory "/var/www/html/class">
|
||
|
|
Require all denied
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory "/var/www/html/admin/class">
|
||
|
|
Require all denied
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
<Directory "/var/www/html/admin/snippets">
|
||
|
|
Require all denied
|
||
|
|
</Directory>
|
||
|
|
|
||
|
|
|
||
|
|
<FilesMatch "\.(jpe?g|png|gif|js|css|ico)$">
|
||
|
|
ExpiresActive On
|
||
|
|
ExpiresDefault "access plus 1 day"
|
||
|
|
</FilesMatch>
|
||
|
|
|
||
|
|
|
||
|
|
</VirtualHost>
|
||
|
|
</IfModule>
|