blob: 474e4989f315a73d08bb30a506e57810bd40985f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
# Apache example config for hex-zero application with ssl
<VirtualHost *:80>
ServerName 0x0.ipa.example.com
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# force https for this path
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteCond %{HTTP_HOST} !^(localhost|127.0.0.1)
RewriteRule ^/hex-zero(.*) https://%{SERVER_NAME}/hex-zero$1 [R,L]
</VirtualHost>
<VirtualHost *:443>
ServerName 0x0.ipa.example.com
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/ssl-error.log
CustomLog ${APACHE_LOG_DIR}/ssl-access.log combined
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"
SSLCertificateFile /etc/ssl/private/https-0x0.ipa.example.com.pem
SSLCertificateKeyFile /etc/ssl/private/https-0x0.ipa.example.com-nopw.key
ProxyPass /hex-zero http://localhost:3031/
ProxyPassReverse /hex-zero http://localhost:3031/
</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|