2012-05-07 18:44:01 +00:00
|
|
|
WSGIPythonHome /opt/regluit/ENV
|
|
|
|
|
WSGISocketPrefix /opt/regluit
|
|
|
|
|
|
|
|
|
|
<VirtualHost *:80>
|
|
|
|
|
|
2013-01-08 01:53:43 +00:00
|
|
|
ServerName just.unglue.it
|
2012-05-07 18:44:01 +00:00
|
|
|
ServerAdmin info@gluejar.com
|
|
|
|
|
|
2014-12-12 21:47:25 +00:00
|
|
|
Redirect permanent / https://just.unglue.it/
|
2012-05-07 18:44:01 +00:00
|
|
|
|
|
|
|
|
</VirtualHost>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<VirtualHost _default_:443>
|
|
|
|
|
|
|
|
|
|
SSLEngine on
|
2014-05-24 00:57:40 +00:00
|
|
|
ServerName just.unglue.it:443
|
2015-03-04 18:53:54 +00:00
|
|
|
|
2015-03-10 22:48:02 +00:00
|
|
|
# generated using https://mozilla.github.io/server-side-tls/ssl-config-generator/
|
2015-03-10 23:07:15 +00:00
|
|
|
# modern mode
|
|
|
|
|
# 2015.03.10 (with Apache v 2.2.22 and OpenSSL 1.0.1 and HSTS enabled)
|
2015-03-04 19:35:25 +00:00
|
|
|
|
2015-03-10 23:07:15 +00:00
|
|
|
|
|
|
|
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1
|
|
|
|
|
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
|
2015-03-10 22:48:02 +00:00
|
|
|
SSLHonorCipherOrder on
|
2015-03-04 19:35:25 +00:00
|
|
|
|
|
|
|
|
# HSTS (mod_headers is required) (15768000 seconds = 6 months)
|
|
|
|
|
Header always add Strict-Transport-Security "max-age=15768000"
|
2015-03-04 18:53:54 +00:00
|
|
|
|
2012-05-07 18:44:01 +00:00
|
|
|
SSLCertificateFile /etc/ssl/certs/server.crt
|
|
|
|
|
SSLCertificateKeyFile /etc/ssl/private/server.key
|
2013-01-08 01:53:43 +00:00
|
|
|
SSLCertificateChainFile /etc/ssl/certs/STAR_unglue_it.ca-bundle
|
2012-05-07 18:44:01 +00:00
|
|
|
|
|
|
|
|
WSGIDaemonProcess regluit-ssl processes=4 threads=4 python-eggs=/tmp/regluit-python-eggs
|
|
|
|
|
WSGIScriptAlias / /opt/regluit/deploy/just.wsgi
|
|
|
|
|
|
|
|
|
|
<Directory /opt/regluit/static>
|
|
|
|
|
Options Indexes FollowSymLinks
|
|
|
|
|
AllowOverride None
|
|
|
|
|
|
|
|
|
|
Order allow,deny
|
|
|
|
|
Allow from all
|
|
|
|
|
</Directory>
|
|
|
|
|
|
|
|
|
|
Alias /static /var/www/static
|
|
|
|
|
|
|
|
|
|
BrowserMatch "MSIE [2-6]" \
|
|
|
|
|
nokeepalive ssl-unclean-shutdown \
|
|
|
|
|
downgrade-1.0 force-response-1.0
|
|
|
|
|
# MSIE 7 and newer should be able to use keepalive
|
|
|
|
|
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
|
|
|
|
|
|
|
|
|
|
</VirtualHost>
|
