All pastes #489426 Raw Edit

Something

public text v1 · immutable
·published 2007-05-15 15:14 UTC
rendered paste body
# httpd-2.0.59 + mod_perl for secure.alliancemca.com

ServerRoot /opt/apache

LockFile logs/accept.lock
PidFile logs/httpd.pid

Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15

StartServers        5
MinSpareServers     5 
MaxSpareServers     10
MaxClients         150
MaxRequestsPerChild 30


LoadModule perl_module modules/mod_perl.so

### Section 2: 'Main' server configuration
User safefax
Group users

ServerAdmin migmir@alliancemca.com
ServerName secure.alliancemca.com
ServerTokens Prod
ServerSignature Email 

UseCanonicalName Off

#DirectoryIndex index.cgi
TypesConfig conf/mime.types
DefaultType text/html

HostnameLookups Off

# Possible values include: debug, info, notice, warn, error, crit, alert, emerg.
ErrorLog logs/error_log
LogLevel debug
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog logs/access_log combined

Listen 	80
Listen 	443

SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin
SSLSessionCache         dbm:/opt/apache/logs/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex  file:/opt/apache/logs/ssl_mutex

# VIRTUALHOST FOR SECURE.ALLIANCEMCA.COM #

<VirtualHost secure.alliancemca.com:443>

ServerName secure.alliancemca.com
ServerAdmin admin@alliancemca.com

DocumentRoot "/opt/apache/cgi/"
DirectoryIndex index.html index.cgi index.pl

ErrorLog /opt/apache/logs/error_log
TransferLog /opt/apache/logs/access_log

PerlRequire conf/startup.pl
PerlModule Apache2::Reload

# Reload les modules lorsque le fichier a ÈtÈ touchÈ.
PerlInitHandler Apache2::Reload
PerlSetVar ReloadAll Off
PerlSetVar ReloadDebug Off
PerlSetVar ReloadModules "ApachePerl::*"
#PerlSetVar ReloadModules "ApachePerl::CgiAccess"
#PerlSetVar ReloadModules "ApachePerl::IndexCgi"
#PerlSetVar ReloadModules "ApachePerl::PnotesMenu"
PerlSetVar ReloadModules "Crystal::*"


#LoadModule disk_cache_module modules/mod_disk_cache.so
#<IfModule mod_disk_cache.c>
	#CacheRoot /var/cache/apache
	#CacheSize 25600
	#CacheEnable disk /images/
	#CacheEnable disk /js/
	#CacheEnable disk /css/
	#CacheEnable disk /svg/
	#CacheDirLevels 4
	#CacheDirLength 3
#</IfModule>

#mod_mem_cache.c
#CacheEnable mem /
#CacheEnable mem /images/
#CacheEnable mem /js/
#CacheEnable mem /css/
#CacheEnable mem /svg/
#CacheEnable mem /favicon.ico
#CacheEnable mem /icons/
CacheLastModifiedFactor 0.05
MCacheSize 800000
CacheMaxExpire 86400
MCacheMaxObjectCount 12900
MCacheMinObjectSize 1
MCacheMaxObjectSize 128000000

#mod_cache.c
PerlTypeHandler ApachePerl::Test

ProxyPass /images/ http://www.alliancemca.com/images/
ProxyPassReverse /images/ http://www.alliancemca.com/images/
ProxyPass /css/ http://www.alliancemca.com/css/
ProxyPassReverse /css/ http://www.alliancemca.com/css/
ProxyPass /svg/ http://www.alliancemca.com/svg/
ProxyPassReverse /svg/ http://www.alliancemca.com/svg/
ProxyPass /icons/ http://www.alliancemca.com/icons/
ProxyPassReverse /icons/ http://www.alliancemca.com/icons/
ProxyPass /js/ http://www.alliancemca.com/js/
ProxyPassReverse /js/ http://www.alliancemca.com/js/
ProxyRequests Off

#DeAuthUriRegex "^(/css/|/images/|/js/|/icons/|/favicon.ico)"
PerlSetVar DeAuthUris  "^(/css/|/images/|/svg/|/js/|/icons/|/favicon.ico)"
PerlPostReadRequestHandler ApachePerl::DeAuth

# local FS
Alias /favicon.ico "/opt/apache/htdocs/css/favicon.ico"
<Location /favicon.ico>
	Options -Multiviews -Indexes -ExecCGI -Includes 
	AllowOverride None
	Order Allow,Deny
	Allow from all
</Location>

Alias /camembert_serveur.svg "/opt/apache/htdocs/SVG/camembert_serveur.svg"
<Location /favicon.ico>
	Options -Multiviews -Indexes -ExecCGI -Includes 
	AllowOverride None
	Order Allow,Deny
	Allow from all
</Location>


Alias / "/opt/apache/cgi/"
<Directory "/opt/apache/cgi">
	DirectoryIndex index.cgi
	SetHandler perl-script
  AllowOverride None
	Options +ExecCGI
</Directory>

<LocationMatch "/.*\.cgi">
	#	SetHandler perl-script
		PerlAuthzHandler ApachePerl::CgiAccess
		PerlAuthenHandler ApachePerl::AuthGDBM
		PerlFixupHandler	ApachePerl::PnotesMenu
		PerlResponseHandler ModPerl::Registry
		PerlOptions +ParseHeaders
	<LimitExcept GET POST>
		Order allow,deny
		Deny from all
	</LimitExcept>
	<Limit GET POST>
 	  Order allow,deny
  	Allow from all
		AuthName SecureLogin
		AuthType Basic
		require valid-user
	</Limit>
</LocationMatch>

<LocationMatch "^/$|^/index\.cgi">
#SetHandler perl-script
PerlAuthenHandler ApachePerl::AuthGDBM
PerlAuthzHandler ApachePerl::CgiAccess
PerlFixupHandler	ApachePerl::PnotesMenu 
PerlResponseHandler ApachePerl::IndexCgi
AllowOverride None
Order Allow,Deny
Allow from all
<Limit GET POST>
	AuthName SecureLogin
	AuthType Basic
	require valid-user
</Limit>
<LimitExcept GET POST>
Order allow,deny
Deny from all
</LimitExcept>
</LocationMatch>

<Location /myspace/>
	PerlAuthenHandler ApachePerl::AuthGDBM
	PerlResponseHandler	ApachePerl::MySpace
  Order allow,deny
  Allow from all
	AuthName SecureLogin
	AuthType Basic
	require valid-user
</Location>

SSLEngine on
SSLProtocol all
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL:RC4+MD5

SSLCertificateFile /opt/apache/conf/ssl/secure.alliancemca.com.crt
SSLCertificateKeyFile /opt/apache/conf/ssl/secure.alliancemca.com.key
SSLCACertificateFile  /opt/apache/conf/ssl/secure.alliancemca.com.ca-bundle

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0
CustomLog /opt/apache/logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>