File vhost-ssl.conf of Package jsj-installtools

File vhost-ssl.conf of Package jsj-installtools (Revision 107)

Currently displaying revision 107 , Show latest

<VirtualHost *:80>
    ServerAdmin vmadmin@local
    ServerName HOSTNAME.DOMAINNAME
    DocumentRoot /srv/www/HOSTNAME/htdocs/
    ErrorLog /var/log/apache2/HOSTNAME-error_log
    CustomLog /var/log/apache2/HOSTNAME-access_log combined
    HostnameLookups Off
    UseCanonicalName Off
    ServerSignature On
    <ifmodule mod_rewrite.c>
        RewriteEngine On
        RewriteCond %{HTTPS} off
        RewriteCond %{REQUEST_URI} !^/\.well\-known/
        RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R,NE]
    </ifmodule>
    <Directory "/srv/www/HOSTNAME/htdocs">
        Options -Indexes -FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>
</VirtualHost>
<IfDefine SSL>
<IfDefine !NOSSL>
<VirtualHost *:443>
    ServerName HOSTNAME.DOMAINNAME
    DocumentRoot /srv/www/HOSTNAME/htdocs/
    ErrorLog /var/log/apache2/HOSTNAME-error_log
    CustomLog /var/log/apache2/HOSTNAME-access_log combined
    CustomLog /var/log/apache2/ssl_request_log   ssl_combined
    SSLEngine on
    SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    SSLHonorCipherOrder on
    SSLOpenSSLConfCmd DHParameters "/etc/ssl/dhparam.pem"
    <IfModule mod_headers.c>
        Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
        Header always set X-Frame-Options SAMEORIGIN
        Header always set X-Content-Type-Options nosniff
    </IfModule>
    # Requires Apache >= 2.4
    SSLCompression off
    # Requires Apache >= 2.4.11
    SSLSessionTickets Off
    SSLCertificateFile /etc/apache2/ssl.crt/HOSTNAME.DOMAINNAME.fullchain.pem
    SSLCertificateKeyFile /etc/apache2/ssl.key/HOSTNAME.DOMAINNAME.key
    <Files ~ "\.(cgi|shtml|phtml|php3?)$">
        SSLOptions +StdEnvVars
    </Files>
    <Directory "/srv/www/cgi-bin">
        AllowOverride None
        Options +ExecCGI -Includes
        SSLOptions +StdEnvVars
        Require all granted
    </Directory>
    <IfModule mod_userdir.c>
        UserDir public_html
        Include /etc/apache2/mod_userdir.conf
    </IfModule>
    <Directory "/srv/www/HOSTNAME/htdocs">
        Options -Indexes -FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>
    Alias /PM/ /srv/www/htdocs/phpMyAdmin/
</VirtualHost>                                  
</IfDefine>
</IfDefine>