-
Notifications
You must be signed in to change notification settings - Fork 0
/
apache.conf.example
62 lines (50 loc) · 2.29 KB
/
apache.conf.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
<VirtualHost *:80>
ServerName ngw
Redirect permanent / https://ngw
</VirtualHost>
WSGIPythonPath /usr/lib
<VirtualHost *:443>
ServerName ngw
SSLEngine on
SSLCertificateFile /etc/ssl/certs/ngw.crt
SSLCertificateKeyFile /etc/ssl/private/ngw.key
#SSLCertificateChainFile ...
#SSLCACertificateFile ...
AddDefaultCharset UTF-8
ServerSignature Off
#CustomLog "/dev/null" " "
Alias /static/ /usr/lib/ngw/static/
<Location "/">
AuthType Basic
AuthName "ngw"
AuthBasicProvider wsgi
WSGIAuthUserScript /usr/lib/ngw/core/wsgi.py
WSGIAuthGroupScript /usr/lib/ngw/core/wsgi.py
</Location>
# We want HTTP_AUTHORIZATION to go to python for now:
WSGIPassAuthorization On
# Use HTTP Strict Transport Security to force client to use secure connections only
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
WSGIScriptAliasMatch ^(/login)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/logout)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/session_security/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/jsi18n/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/logs)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/contacts/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/contactgroups/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/events/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/media/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/pks/.*)$ /usr/lib/ngw/core/wsgi.py$1
WSGIScriptAliasMatch ^(/matrix/.*)$ /usr/lib/ngw/core/wsgi.py$1
#WSGIScriptAliasMatch ^(/test)$ /usr/lib/ngw/core/wsgi.py$1
#WSGIScriptAliasMatch ^(/hook_change_password)$ /usr/lib/ngw/core/wsgi.py$1
#<LocationMatch "^/hook_change_password$">
# require valid-user
#</LocationMatch>
# We want the mime-type icons to be available without extensions
<Location "/icons">
Options +MultiViews
</Location>
</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet