Files
confdroid_apache/examples/vhost_ssl.erb
2017-07-09 16:18:26 +01:00

40 lines
1.4 KiB
Plaintext

<VirtualHost *:<%= @ae_ssl_vhost_port %> >
ServerAdmin <%= @ae_server_admin %>
DocumentRoot <%= @ae_doc_root %>
ServerName www.<%= @ae_server_name %>
ServerAlias <%= @ae_server_name %>
DirectoryIndex <%= @ae_dir_index %>
ErrorLog /var/log/httpd/<%= @ae_server_name %>_ssl_error_log
TransferLog /var/log/httpd/<%= @ae_server_name%>_ssl_transfer_log
CustomLog /var/log/httpd/<%= @ae_server_name%>_ssl_access_log common
LogLevel <%= @ae_vhost_loglevel %>
SSLEngine on
SSLProtocol <%= @ae_ssl_protocols%>
SSLCipherSuite "<%= @ae_ssl_ciphersuite%>"
SSLCertificateFile <%= @ae_tls_cert_path %>/<%= @ae_ssl_vhost_cert %>
SSLCertificateKeyFile <%= @ae_tls_key_path %>/<%= @ae_ssl_vhost_key %>
SSLCertificateChainFile <%= @ae_tls_cert_path %>/<%= @ae_ssl_vhost_chain %>
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
<Directory <%= @ae_doc_root -%>
AllowOverride none
Order Allow,Deny
Allow from <%= @ae_allow_from %>
</Directory>
<% end %>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>