dm4/roles/apache/templates/wordpress-site.conf.j2

56 lines
1.6 KiB
Django/Jinja

<VirtualHost localhost:8000>
DocumentRoot /var/www/html/wordpress
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
<Directory /var/www/html/wordpress>
Options -Indexes
AllowOverride None
</Directory>
<IfModule mod_dir.c>
DirectoryIndex index.php index.html
</IfModule>
</VirtualHost>
<VirtualHost *:10000>
DocumentRoot /var/www/html/wordpress
LogLevel info ssl:warn
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
SSLEngine on
SSLCertificateFile "{{ nginx_cert_position }}"
SSLCertificateKeyFile "{{ nginx_key_position }}"
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
SSLHonorCipherOrder on
SSLCompression off
SSLSessionTickets off
<Directory /var/www/html/wordpress/>
<RequireAny>
Require ip 127.0.0.1
Require ip 192.168.2.0/24
</RequireAny>
Options -Indexes
AuthType GSSAPI
AuthName "KERBEROS AUTHENTICATION"
GSSAPICredStore keytab:/etc/krb5.keytab
Require valid-user
AllowOverride All
</Directory>
<IfModule mod_dir.c>
DirectoryIndex index.php index.html
</IfModule>
</VirtualHost>