joomla/joomla-apache.conf@c10fb90893b9 (annotated)
joomla/joomla-apache.conf
Thu, 04 Oct 2012 20:30:05 +0200
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 04 Oct 2012 20:30:05 +0200
- changeset 715
- c10fb90893b9
- permissions
- -rw-r--r--
Correct out of date build configuration, porting to Solaris 11 network
link infrastructure and new libpcap logic. This additionally allows for
device drivers in subdirectories of /dev. Correct packaged nmap
personalities and signatures to work out of the box. Finally, hack
arpd logic to properly close sockets and quit on TERM by repeating
signaling in the run command script. Sadly, all this fails to correct
the run time behaviour of honeyd which fails to bind to the IP layer.
| michael@535 | 1 | ## |
| michael@535 | 2 | ## joomla-apache.conf -- Joomla Apache Custom Configuration |
| michael@535 | 3 | ## |
| michael@535 | 4 | |
| michael@535 | 5 | ServerRoot @l_prefix@ |
| michael@535 | 6 | ServerAdmin root@@l_hostname@.@l_domainname@ |
| michael@535 | 7 | ServerName @l_hostname@.@l_domainname@ |
| michael@535 | 8 | ServerTokens Prod |
| michael@535 | 9 | User @l_rusr@ |
| michael@535 | 10 | Group @l_rgrp@ |
| michael@535 | 11 | Listen 127.0.0.1:8080 |
| michael@535 | 12 | |
| michael@535 | 13 | # runtime files |
| michael@535 | 14 | PidFile @l_prefix@/var/joomla/run/apache.pid |
| michael@535 | 15 | ScoreBoardFile @l_prefix@/var/joomla/run/apache.sb |
| michael@535 | 16 | LockFile @l_prefix@/var/joomla/run/apache.lck |
| michael@535 | 17 | |
| michael@535 | 18 | # include apache-php |
| michael@535 | 19 | Include @l_prefix@/etc/apache/apache.d/apache-php.conf |
| michael@535 | 20 | |
| michael@535 | 21 | # server behaviour |
| michael@535 | 22 | Timeout 300 |
| michael@535 | 23 | KeepAlive on |
| michael@535 | 24 | MaxKeepAliveRequests 100 |
| michael@535 | 25 | KeepAliveTimeout 15 |
| michael@535 | 26 | MinSpareServers 5 |
| michael@535 | 27 | MaxSpareServers 10 |
| michael@535 | 28 | StartServers 5 |
| michael@535 | 29 | MaxClients 15 |
| michael@535 | 30 | MaxRequestsPerChild 500 |
| michael@535 | 31 | HostnameLookups off |
| michael@535 | 32 | UseCanonicalName on |
| michael@535 | 33 | |
| michael@535 | 34 | # access logging |
| michael@535 | 35 | LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined |
| michael@535 | 36 | LogFormat "%h %l %u %t \"%r\" %>s %b" common |
| michael@535 | 37 | LogFormat "%{Referer}i -> %U" referer |
| michael@535 | 38 | LogFormat "%{User-agent}i" agent |
| michael@535 | 39 | CustomLog @l_prefix@/var/joomla/log/apache.access.log common |
| michael@535 | 40 | |
| michael@535 | 41 | # error logging |
| michael@535 | 42 | LogLevel warn |
| michael@535 | 43 | ErrorLog @l_prefix@/var/joomla/log/apache.error.log |
| michael@535 | 44 | ServerSignature on |
| michael@535 | 45 | |
| michael@535 | 46 | # secure root directory |
| michael@535 | 47 | <Directory /> |
| michael@535 | 48 | Options FollowSymLinks |
| michael@535 | 49 | AllowOverride None |
| michael@535 | 50 | </Directory> |
| michael@535 | 51 | |
| michael@535 | 52 | # browser specifics |
| michael@535 | 53 | BrowserMatch "Mozilla/2" nokeepalive |
| michael@535 | 54 | BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0 |
| michael@535 | 55 | BrowserMatch "RealPlayer 4\.0" force-response-1.0 |
| michael@535 | 56 | BrowserMatch "Java/1\.0" force-response-1.0 |
| michael@535 | 57 | BrowserMatch "JDK/1\.0" force-response-1.0 |
| michael@535 | 58 | |
| michael@535 | 59 | # SSL/TLS support |
| michael@535 | 60 | <IfModule ssl_module> |
| michael@535 | 61 | SSLRandomSeed startup builtin |
| michael@535 | 62 | SSLRandomSeed connect builtin |
| michael@535 | 63 | SSLMutex sem |
| michael@535 | 64 | SSLSessionCache shmcb:@l_prefix@/var/joomla/run/apache.scache(512000) |
| michael@535 | 65 | SSLSessionCacheTimeout 300 |
| michael@535 | 66 | SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL |
| michael@535 | 67 | SetEnvIf User-Agent ".*MSIE.*" \ |
| michael@535 | 68 | nokeepalive ssl-unclean-shutdown \ |
| michael@535 | 69 | downgrade-1.0 force-response-1.0 |
| michael@535 | 70 | <Files ~ "\.(cgi|shtml|phtml|php?)$"> |
| michael@535 | 71 | SSLOptions +StdEnvVars |
| michael@535 | 72 | </Files> |
| michael@535 | 73 | <Directory "@l_prefix@/cgi"> |
| michael@535 | 74 | SSLOptions +StdEnvVars |
| michael@535 | 75 | </Directory> |
| michael@535 | 76 | </IfModule> |
| michael@535 | 77 | |
| michael@535 | 78 | # configure PHP for Joomla! |
| michael@535 | 79 | AddType application/x-httpd-php .php |
| michael@535 | 80 | php_admin_flag register_globals off |
| michael@535 | 81 | php_admin_flag safe_mode off |
| michael@535 | 82 | php_admin_flag safe_mode_gid off |
| michael@535 | 83 | php_admin_flag allow_url_fopen off |
| michael@535 | 84 | php_admin_flag display_errors on |
| michael@535 | 85 | php_admin_value log_errors on |
| michael@535 | 86 | php_admin_value max_execution_time 60 |
| michael@535 | 87 | php_admin_value max_input_time 60 |
| michael@535 | 88 | php_admin_value memory_limit 8M |
| michael@535 | 89 | php_admin_value post_max_size 8M |
| michael@535 | 90 | php_admin_value include_path .:@l_prefix@/lib/joomla/runtime |
| michael@535 | 91 | |
| michael@535 | 92 | # configure Joomla! |
| michael@535 | 93 | RewriteEngine on |
| michael@535 | 94 | RewriteRule ^/$ /joomla/ [R,L] |
| michael@535 | 95 | Alias /joomla @l_prefix@/lib/joomla/runtime |
| michael@535 | 96 | DocumentRoot @l_prefix@/lib/joomla/runtime |
| michael@535 | 97 | DirectoryIndex index.php |
| michael@535 | 98 | ErrorDocument 404 /index.php |
| michael@535 | 99 | ExpiresByType text/html A1 |
| michael@535 | 100 | <Directory @l_prefix@/lib/joomla/runtime> |
| michael@535 | 101 | Options Indexes ExecCGI FollowSymLinks |
| michael@535 | 102 | AllowOverride None |
| michael@535 | 103 | Order allow,deny |
| michael@535 | 104 | Allow from all |
| michael@535 | 105 | RewriteEngine On |
| michael@535 | 106 | RewriteBase /joomla |
| michael@535 | 107 | RewriteCond %{REQUEST_URI} ^(/component/option,com) [NC,OR] |
| michael@535 | 108 | RewriteCond %{REQUEST_URI} (/|\.htm|\.php|\.html|/[^.]*)$ [NC] |
| michael@535 | 109 | RewriteCond %{REQUEST_FILENAME} !-f |
| michael@535 | 110 | RewriteCond %{REQUEST_FILENAME} !-d |
| michael@535 | 111 | RewriteRule (.*) index.php |
| michael@535 | 112 | </Directory> |
| michael@535 | 113 |
