diff --git a/roles/apache/templates/wordpress-site.conf.j2 b/roles/apache/templates/wordpress-site.conf.j2 index 9e7195c..b13cf47 100644 --- a/roles/apache/templates/wordpress-site.conf.j2 +++ b/roles/apache/templates/wordpress-site.conf.j2 @@ -17,3 +17,44 @@ + + DocumentRoot /var/www/html/wordpress + + LogLevel info ssl:warn + LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined + + ErrorLog ${APACHE_LOG_DIR}/error.log + CustomLog ${APACHE_LOG_DIR}/access.log combined + + SSLEngine on + SSLCertificateFile "{{ nginx_cert_position }}" + SSLCertificateKeyFile "{{ nginx_key_position }}" + SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 + SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 + SSLHonorCipherOrder on + SSLCompression off + SSLSessionTickets off + + + + Require ip 127.0.0.1 + Require ip 192.168.2.0/24 + + Options -Indexes + LoadModule auth_kerb_module /usr/lib/apache2/modules/mod_auth_kerb.so + AuthType Kerberos + AuthName "KERBEROS AUTHENTICATION" + KrbAuthRealms EPITAF.LOCAL + Krb5Keytab /etc/krb5.keytab + KrbMethodNegotiate Off + KrbSaveCredentials Off + KrbVerifyKDC Off + Require valid-user + AllowOverride All + + + + DirectoryIndex index.php index.html + + +