app-backup/backuppc/files/httpd.conf

   1 # This is a modification of the default Apache 2.2 configuration file
   2 # for Gentoo Linux.
   3 #
   4 # Support:
   5 #   http://www.gentoo.org/main/en/lists.xml   [mailing lists]
   6 #   http://forums.gentoo.org/                 [web forums]
   7 #   irc://irc.freenode.net#gentoo-apache      [irc chat]
   8 #
   9 # Bug Reports:
  10 #   http://bugs.gentoo.org                    [gentoo related bugs]
  11 #   http://httpd.apache.org/bug_report.html   [apache httpd related bugs]
  12 #
  13 #
  14 # This is the main Apache HTTP server configuration file.  It contains the
  15 # configuration directives that give the server its instructions.
  16 # See <URL:http://httpd.apache.org/docs/2.2> for detailed information.
  17 # In particular, see
  18 # <URL:http://httpd.apache.org/docs/2.2/mod/directives.html>
  19 # for a discussion of each configuration directive.
  20 #
  21 # Do NOT simply read the instructions in here without understanding
  22 # what they do.  They're here only as hints or reminders.  If you are unsure
  23 # consult the online docs. You have been warned.
  24 #
  25 # Configuration and logfile names: If the filenames you specify for many
  26 # of the server's control files begin with "/" (or "drive:/" for Win32), the
  27 # server will use that explicit path.  If the filenames do *not* begin
  28 # with "/", the value of ServerRoot is prepended -- so "var/log/apache2/foo_log"
  29 # with ServerRoot set to "/usr" will be interpreted by the
  30 # server as "/usr/var/log/apache2/foo.log".
  31
  32 # ServerRoot: The top of the directory tree under which the server's
  33 # configuration, error, and log files are kept.
  34 #
  35 # Do not add a slash at the end of the directory path.  If you point
  36 # ServerRoot at a non-local disk, be sure to point the LockFile directive
  37 # at a local disk.  If you wish to share the same ServerRoot for multiple
  38 # httpd daemons, you will need to change at least LockFile and PidFile.
  39 ServerRoot "/usr/lib/apache2"
  40
  41 # Dynamic Shared Object (DSO) Support
  42 #
  43 # To be able to use the functionality of a module which was built as a DSO you
  44 # have to place corresponding `LoadModule' lines at this location so the
  45 # directives contained in it are actually available _before_ they are used.
  46 # Statically compiled modules (those listed by `httpd -l') do not need
  47 # to be loaded here.
  48 #
  49 # Example:
  50 # LoadModule foo_module modules/mod_foo.so
  51 #
  52 # GENTOO: Automatically defined based on APACHE2_MODULES USE_EXPAND variable.
  53 #         Do not change manually, it will be overwritten on upgrade.
  54 #
  55 # The following modules are considered as the default configuration.
  56 # If you wish to disable one of them, you may have to alter other
  57 # configuration directives.
  58 #
  59 # Change these at your own risk!
  60
  61 LoadModule actions_module modules/mod_actions.so
  62 LoadModule alias_module modules/mod_alias.so
  63 LoadModule auth_basic_module modules/mod_auth_basic.so
  64 <IfDefine AUTH_DIGEST>
  65 LoadModule auth_digest_module modules/mod_auth_digest.so
  66 </IfDefine>
  67 LoadModule authn_anon_module modules/mod_authn_anon.so
  68 LoadModule authn_dbm_module modules/mod_authn_dbm.so
  69 LoadModule authn_default_module modules/mod_authn_default.so
  70 LoadModule authn_file_module modules/mod_authn_file.so
  71 LoadModule authz_dbm_module modules/mod_authz_dbm.so
  72 LoadModule authz_default_module modules/mod_authz_default.so
  73 LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
  74 LoadModule authz_host_module modules/mod_authz_host.so
  75 LoadModule authz_owner_module modules/mod_authz_owner.so
  76 LoadModule authz_user_module modules/mod_authz_user.so
  77 LoadModule autoindex_module modules/mod_autoindex.so
  78 <IfDefine CACHE>
  79 LoadModule cache_module modules/mod_cache.so
  80 </IfDefine>
  81 LoadModule cgi_module modules/mod_cgi.so
  82 LoadModule deflate_module modules/mod_deflate.so
  83 LoadModule dir_module modules/mod_dir.so
  84 <IfDefine CACHE>
  85 LoadModule disk_cache_module modules/mod_disk_cache.so
  86 </IfDefine>
  87 LoadModule env_module modules/mod_env.so
  88 LoadModule expires_module modules/mod_expires.so
  89 LoadModule ext_filter_module modules/mod_ext_filter.so
  90 <IfDefine CACHE>
  91 LoadModule file_cache_module modules/mod_file_cache.so
  92 </IfDefine>
  93 LoadModule filter_module modules/mod_filter.so
  94 LoadModule headers_module modules/mod_headers.so
  95 LoadModule include_module modules/mod_include.so
  96 <IfDefine INFO>
  97 LoadModule info_module modules/mod_info.so
  98 </IfDefine>
  99 LoadModule log_config_module modules/mod_log_config.so
 100 LoadModule logio_module modules/mod_logio.so
 101 <IfDefine CACHE>
 102 LoadModule mem_cache_module modules/mod_mem_cache.so
 103 </IfDefine>
 104 LoadModule mime_module modules/mod_mime.so
 105 LoadModule mime_magic_module modules/mod_mime_magic.so
 106 LoadModule negotiation_module modules/mod_negotiation.so
 107 <IfDefine PROXY>
 108 LoadModule proxy_module modules/mod_proxy.so
 109 </IfDefine>
 110 <IfDefine PROXY>
 111 LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
 112 </IfDefine>
 113 <IfDefine PROXY>
 114 LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
 115 </IfDefine>
 116 <IfDefine PROXY>
 117 LoadModule proxy_connect_module modules/mod_proxy_connect.so
 118 </IfDefine>
 119 <IfDefine PROXY>
 120 LoadModule proxy_http_module modules/mod_proxy_http.so
 121 </IfDefine>
 122 LoadModule rewrite_module modules/mod_rewrite.so
 123 LoadModule setenvif_module modules/mod_setenvif.so
 124 LoadModule speling_module modules/mod_speling.so
 125 <IfDefine SSL>
 126 LoadModule ssl_module modules/mod_ssl.so
 127 </IfDefine>
 128 <IfDefine STATUS>
 129 LoadModule status_module modules/mod_status.so
 130 </IfDefine>
 131 <IfDefine SUEXEC>
 132 LoadModule suexec_module modules/mod_suexec.so
 133 </IfDefine>
 134 LoadModule unique_id_module modules/mod_unique_id.so
 135 <IfDefine USERDIR>
 136 LoadModule userdir_module modules/mod_userdir.so
 137 </IfDefine>
 138 LoadModule usertrack_module modules/mod_usertrack.so
 139 LoadModule vhost_alias_module modules/mod_vhost_alias.so
 140
 141 #
 142 # HostnameLookups: Log the names of clients or just their IP addresses
 143 # e.g., www.apache.org (on) or 204.62.129.132 (off).
 144 # The default is off because it'd be overall better for the net if people
 145 # had to knowingly turn this feature on, since enabling it means that
 146 # each client request will result in AT LEAST one lookup request to the
 147 # nameserver.
 148 #
 149 HostnameLookups Off
 150
 151 # If you wish httpd to run as a different user or group, you must run
 152 # httpd as root initially and it will switch.
 153 #
 154 # User/Group: The name (or #number) of the user/group to run httpd as.
 155 # It is usually good practice to create a dedicated user and group for
 156 # running httpd, as with most system services.
 157 User backuppc
 158 Group backuppc
 159
 160 # Supplemental configuration
 161 #
 162 # Most of the configuration files in the /etc/apache2/modules.d/ directory can
 163 # be turned on using APACHE2_OPTS in /etc/conf.d/apache2 to add extra features
 164 # or to modify the default configuration of the server.
 165 #
 166 # To know which flag to add to APACHE2_OPTS, look at the first line of the
 167 # the file, which will usually be an <IfDefine OPTION> where OPTION is the
 168 # flag to use.
 169
 170 Include /etc/apache2/modules.d/*.conf
 171
 172 # Unique lock file
 173 LockFile /var/lock/apache-backuppc.lock
 174
 175 # Very important for init script
 176 # Unique process ID file
 177 PidFile /var/run/apache-backuppc.pid
 178
 179 # Unique scoreboard file
 180 ScoreBoardFile /var/run/apache-backuppc.scoreboard
 181
 182 # Common document root
 183 <IfDefine BACKUPPC_VHOST>
 184
 185
 186 # Common document root
 187 DocumentRoot HTDOCSDIR
 188 # see bug #178966 why this is in here
 189
 190 # Listen: Allows you to bind Apache to specific IP addresses and/or
 191 # ports, instead of the default. See also the <VirtualHost>
 192 # directive.
 193 #
 194 # Change this to Listen on specific IP addresses as shown below to
 195 # prevent Apache from glomming onto all bound IP addresses.
 196 #
 197 #Listen 12.34.56.78:80
 198 Listen 80
 199
 200 # Use name-based virtual hosting.
 201 NameVirtualHost *:80
 202
 203 # When virtual hosts are enabled, the main host defined in the default
 204 # httpd.conf configuration will go away. We redefine it here so that it is
 205 # still available.
 206 #
 207 # If you disable this vhost by removing -D DEFAULT_VHOST from
 208 # /etc/conf.d/apache2, the first defined virtual host elsewhere will be
 209 # the default.
 210 <VirtualHost *:80>
 211         ServerName backuppc
 212
 213         # Redirect requests to "/" to the CGI script
 214         RedirectMatch "^/$" /BackupPC_Admin
 215
 216         <IfDefine SSL>
 217                 <IfModule ssl_module>
 218                         RewriteEngine On
 219                         RewriteCond %{HTTPS} !=on
 220                         RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [R,L]
 221
 222                         ## SSL Engine Switch:
 223                         # Enable/Disable SSL for this virtual host.
 224                         SSLEngine on
 225                         SSLOptions +StrictRequire
 226
 227                         ## SSL Cipher Suite:
 228                         # List the ciphers that the client is permitted to negotiate.
 229                         # See the mod_ssl documentation for a complete list.
 230                         SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
 231
 232                         ## Server Certificate:
 233                         # Point SSLCertificateFile at a PEM encoded certificate. If the certificate
 234                         # is encrypted, then you will be prompted for a pass phrase. Note that a
 235                         # kill -HUP will prompt again. Keep in mind that if you have both an RSA
 236                         # and a DSA certificate you can configure both in parallel (to also allow
 237                         # the use of DSA ciphers, etc.)
 238                         SSLCertificateFile /etc/ssl/apache2/server.crt
 239
 240                         ## Server Private Key:
 241                         # If the key is not combined with the certificate, use this directive to
 242                         # point at the key file. Keep in mind that if you've both a RSA and a DSA
 243                         # private key you can configure both in parallel (to also allow the use of
 244                         # DSA ciphers, etc.)
 245                         SSLCertificateKeyFile /etc/ssl/apache2/server.key
 246                         <FilesMatch "\.(cgi|shtml|phtml|php)$">
 247                                 SSLOptions +StdEnvVars
 248                         </FilesMatch>
 249
 250                         ## ssl-accurate-shutdown:
 251                         # This forces an accurate shutdown when the connection is closed, i.e. a
 252                         # SSL close notify alert is send and mod_ssl waits for the close notify
 253                         # alert of the client. This is 100% SSL/TLS standard compliant, but in
 254                         # practice often causes hanging connections with brain-dead browsers. Use
 255                         # this only for browsers where you know that their SSL implementation works
 256                         # correctly.
 257                         # Notice: Most problems of broken clients are also related to the HTTP
 258                         # keep-alive facility, so you usually additionally want to disable
 259                         # keep-alive for those clients, too. Use variable "nokeepalive" for this.
 260                         # Similarly, one has to force some clients to use HTTP/1.0 to workaround
 261                         # their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
 262                         # "force-response-1.0" for this.
 263                         <IfModule setenvif_module>
 264                                 BrowserMatch ".*MSIE.*" \
 265                                         nokeepalive ssl-unclean-shutdown \
 266                                                 downgrade-1.0 force-response-1.0
 267                         </IfModule>
 268
 269                         ## Per-Server Logging:
 270                         # The home of a custom SSL log file. Use this when you want a compact
 271                         # non-error SSL logfile on a virtual host basis.
 272                         <IfModule log_config_module>
 273                                 CustomLog /var/log/apache2/ssl_request_log \
 274                                         "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
 275                         </IfModule>
 276                 </IfModule>
 277         </IfDefine>
 278
 279 <Directory "HTDOCSDIR">
 280         # Possible values for the Options directive are "None", "All",
 281         # or any combination of:
 282         #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
 283         #
 284         # Note that "MultiViews" must be named *explicitly* --- "Options All"
 285         # doesn't give it to you.
 286         #
 287         # The Options directive is both complicated and important.  Please see
 288         # http://httpd.apache.org/docs/2.2/mod/core.html#options
 289         # for more information.
 290         Options Indexes FollowSymLinks
 291
 292         # AllowOverride controls what directives may be placed in .htaccess files.
 293         # It can be "All", "None", or any combination of the keywords:
 294         #   Options FileInfo AuthConfig Limit
 295         AllowOverride None
 296
 297         <IfDefine SSL>
 298         <IfModule ssl_module>
 299                 SSLOptions +StdEnvVars
 300         </IfModule>
 301         </IfDefine>
 302
 303         SetHandler perl-script
 304         PerlResponseHandler ModPerl::Registry
 305         PerlOptions +ParseHeaders
 306         Options +ExecCGI
 307
 308         Order allow,deny
 309         Allow from all
 310
 311         AuthName "Backup Admin"
 312         AuthType Basic
 313         AuthUserFile AUTHFILE
 314         Require valid-user
 315 </Directory>
 316
 317 <Directory "HTDOCSDIR/image">
 318         SetHandler None
 319         Options Indexes FollowSymLinks
 320         Order allow,deny
 321         Allow from all
 322 </Directory>
 323
 324
 325         <IfModule mpm_peruser_module>
 326                 ServerEnvironment backuppc backuppc
 327         </IfModule>
 328 </VirtualHost>
 329 </IfDefine>
 330
 331
 332 # vim: ts=4 filetype=apache