1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
|
# Consolidated apache2.conf, mods-enabled/* and conf-enabled/*.
ServerRoot ${APACHE_SERVER_ROOT}
DefaultRuntimeDir ${APACHE_RUN_DIR}
PidFile ${APACHE_PID_FILE}
Timeout 60
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 5
HostnameLookups Off
ErrorLog ${APACHE_LOG_DIR}/error.log
LogLevel info
# Inline load module
LoadModule access_compat_module ${APACHE_NIX_STORE}/modules/mod_access_compat.so
LoadModule alias_module ${APACHE_NIX_STORE}/modules/mod_alias.so
LoadModule auth_basic_module ${APACHE_NIX_STORE}/modules/mod_auth_basic.so
LoadModule authn_core_module ${APACHE_NIX_STORE}/modules/mod_authn_core.so
LoadModule authn_file_module ${APACHE_NIX_STORE}/modules/mod_authn_file.so
LoadModule authz_core_module ${APACHE_NIX_STORE}/modules/mod_authz_core.so
LoadModule authz_host_module ${APACHE_NIX_STORE}/modules/mod_authz_host.so
LoadModule authz_user_module ${APACHE_NIX_STORE}/modules/mod_authz_user.so
LoadModule autoindex_module ${APACHE_NIX_STORE}/modules/mod_autoindex.so
LoadModule dir_module ${APACHE_NIX_STORE}/modules/mod_dir.so
LoadModule deflate_module ${APACHE_NIX_STORE}/modules/mod_deflate.so
LoadModule env_module ${APACHE_NIX_STORE}/modules/mod_env.so
LoadModule filter_module ${APACHE_NIX_STORE}/modules/mod_filter.so
LoadModule log_config_module ${APACHE_NIX_STORE}/modules/mod_log_config.so
LoadModule mime_module ${APACHE_NIX_STORE}/modules/mod_mime.so
LoadModule mpm_event_module ${APACHE_NIX_STORE}/modules/mod_mpm_event.so
LoadModule reqtimeout_module ${APACHE_NIX_STORE}/modules/mod_reqtimeout.so
LoadModule rewrite_module ${APACHE_NIX_STORE}/modules/mod_rewrite.so
LoadModule setenvif_module ${APACHE_NIX_STORE}/modules/mod_setenvif.so
LoadModule socache_shmcb_module ${APACHE_NIX_STORE}/modules/mod_socache_shmcb.so
LoadModule ssl_module ${APACHE_NIX_STORE}/modules/mod_ssl.so
LoadModule status_module ${APACHE_NIX_STORE}/modules/mod_status.so
LoadModule unixd_module ${APACHE_NIX_STORE}/modules/mod_unixd.so
# Include list of ports to listen on
Include conf/ports.conf
<IfModule unixd_module>
User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}
</IfModule>
DocumentRoot ${APACHE_SERVER_ROOT}/www/html
<Directory />
Options FollowSymLinks
AllowOverride None
Require all denied
</Directory>
<Directory ${APACHE_SERVER_ROOT}/www/html>
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
</Directory>
AccessFileName .htaccess
LogFormat "%v:%p %h %l %u %t \"%r\" %>s \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
LogFormat "%h %l %u %t \"%r\" %>s \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s " common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined
# Include the virtual host configurations:
IncludeOptional sites-enabled/*.conf
# inline module configs
<IfModule mod_mime.c>
TypesConfig ${APACHE_NIX_STORE}/conf/mime.types
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/x-bzip2 .bz2
AddLanguage en .en
AddCharset us-ascii .ascii .us-ascii
AddCharset ISO-8859-1 .iso8859-1 .latin1
AddCharset ISO-8859-2 .iso8859-2 .latin2 .cen
AddCharset ISO-8859-3 .iso8859-3 .latin3
AddCharset ISO-8859-4 .iso8859-4 .latin4
AddCharset ISO-8859-9 .iso8859-9 .latin5 .trk
AddCharset ISO-8859-10 .iso8859-10 .latin6
AddCharset ISO-8859-13 .iso8859-13
AddCharset ISO-8859-14 .iso8859-14 .latin8
AddCharset ISO-8859-15 .iso8859-15 .latin9
AddCharset ISO-8859-16 .iso8859-16 .latin10
# For russian, more than one charset is used (depends on client, mostly):
AddCharset WINDOWS-1251 .cp-1251 .win-1251
AddCharset CP866 .cp866
AddCharset ISO-10646-UCS-2 .ucs2
AddCharset ISO-10646-UCS-4 .ucs4
AddCharset UTF-7 .utf7
AddCharset UTF-8 .utf8
AddCharset UTF-16 .utf16
AddCharset UTF-16BE .utf16be
AddCharset UTF-16LE .utf16le
AddCharset iso-10646-ucs-2 .ucs-2 .iso-10646-ucs-2
AddCharset iso-10646-ucs-4 .ucs-4 .iso-10646-ucs-4
AddCharset shift_jis .shift_jis .sjis
AddCharset BRF .brf
AddHandler type-map var
AddType text/html .shtml
<IfModule mod_include.c>
AddOutputFilter INCLUDES .shtml
</IfModule>
</IfModule>
<IfModule mod_ssl.c>
SSLRandomSeed startup builtin
SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect builtin
SSLRandomSeed connect file:/dev/urandom 512
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLSessionCache shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
SSLSessionCacheTimeout 300
SSLCipherSuite HIGH:!aNULL
SSLProtocol all -SSLv3
</IfModule>
<IfModule mod_negotiation.c>
LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv tr zh-CN zh-TW
ForceLanguagePriority Prefer Fallback
</IfModule>
<IfModule mpm_event_module>
StartServers 2
MinSpareThreads 25
MaxSpareThreads 75
ThreadLimit 64
ThreadsPerChild 25
MaxRequestWorkers 150
MaxConnectionsPerChild 0
</IfModule>
<IfModule reqtimeout_module>
RequestReadTimeout header=20-40,minrate=500
RequestReadTimeout body=10,minrate=500
</IfModule>
# === end module configs
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
