EbookFoundation
/
regluit
mirror of https://github.com/EbookFoundation/regluit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
regluit/deploy/localvm.conf

60 lines
2.1 KiB
Plaintext
Raw Normal View History

first pass at localvm
2015-05-26 17:44:35 +00:00
WSGIPythonHome /opt/regluit/ENV
WSGISocketPrefix /opt/regluit
<VirtualHost *:80>
forgot localvm.wsgi fix apache config file to hopefully do redirect correctly -- hardcoding localvm as a name for the address for localvm vm.
2015-05-26 22:10:04 +00:00
ServerName localvm
first pass at localvm
2015-05-26 17:44:35 +00:00
ServerAdmin info@gluejar.com
using xip.io to map a test server URL. specifically 192.168.33.10.xip.io
2015-05-26 23:54:53 +00:00
Redirect permanent / https://192.168.33.10.xip.io:443/
first pass at localvm
2015-05-26 17:44:35 +00:00
</VirtualHost>
<VirtualHost _default_:443>
SSLEngine on
forgot localvm.wsgi fix apache config file to hopefully do redirect correctly -- hardcoding localvm as a name for the address for localvm vm.
2015-05-26 22:10:04 +00:00
ServerName localvm:443
first pass at localvm
2015-05-26 17:44:35 +00:00
# generated using https://mozilla.github.io/server-side-tls/ssl-config-generator/
# intermediate mode
# 2015.03.04 (with Apache v 2.2.22 and OpenSSL 1.0.1 and HSTS enabled)
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
SSLHonorCipherOrder on
# HSTS (mod_headers is required) (15768000 seconds = 6 months)
Header always add Strict-Transport-Security "max-age=15768000"
SSLCertificateFile /etc/ssl/certs/server.crt
SSLCertificateKeyFile /etc/ssl/private/server.key
WSGIDaemonProcess regluit-ssl processes=4 threads=4 python-eggs=/tmp/regluit-python-eggs
forgot localvm.wsgi fix apache config file to hopefully do redirect correctly -- hardcoding localvm as a name for the address for localvm vm.
2015-05-26 22:10:04 +00:00
WSGIScriptAlias / /opt/regluit/deploy/localvm.wsgi
first pass at localvm
2015-05-26 17:44:35 +00:00
changes to make things work for trusty64 on localvm
2015-05-27 05:38:14 +00:00
<Directory /opt/regluit>
Options Indexes FollowSymLinks
AllowOverride None
make apache config 2.2 and 2.4 compatible
2015-05-27 06:04:17 +00:00
Order allow,deny
Allow from all
changes to make things work for trusty64 on localvm
2015-05-27 05:38:14 +00:00
</Directory>
first pass at localvm
2015-05-26 17:44:35 +00:00
<Directory /opt/regluit/static>
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>
Alias /static /var/www/static
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
# MSIE 7 and newer should be able to use keepalive
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
</VirtualHost>