heuzef
/
lesspass
miroir de https://github.com/lesspass/lesspass.git
1
0
Bifurcation 0
Code Tickets 0 Versions 67 Wiki Activité
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
1895 Révisions
17 Branches
516 MiB
 
 
 
 
 
 
Aborescence: 3b19c478b8
Branches Tags
${ item.name }
Créer la branche ${ searchTerm }
de '3b19c478b8'
${ noResults }
lesspass/containers/webserver/lesspass.conf.j2

66 lignes
2.1 KiB
Brut Annotations Historique 

  1. ServerName {{ FQDN }}

  2. 

  3. <VirtualHost *:80>

  4.   ServerName www.{{ FQDN }}

  5.   ServerAlias {{ FQDN }}

  6.   # Redirect permanent / https://www.{{ FQDN }}/

  7.   Redirect / https://www.{{ FQDN }}/

  8. </VirtualHost>

  9. 

  10. <VirtualHost *:443>

  11.     ServerName {{ FQDN }}

  12.     ProxyPass /api/ http://backend:8000/api/

  13.     ProxyPassReverse /api/ http://backend:8000/api/

  14.     SSLEngine on

  15.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  16.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  17. </VirtualHost>

  18. 

  19. <VirtualHost *:443>

  20.     ServerName api.{{ FQDN }}

  21.     ProxyPass / http://backend:8000/api/

  22.     ProxyPassReverse / http://backend:8000/api/

  23.     SSLEngine on

  24.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  25.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  26. </VirtualHost>

  27. 

  28. <VirtualHost *:443>

  29.     ServerName www.{{ FQDN }}

  30.     ServerAlias {{ FQDN }}

  31.     

  32.     DocumentRoot /var/www/html

  33.     

  34.     <Directory /var/www/html/>

  35.         Options Indexes FollowSymLinks

  36.         AllowOverride None

  37.         Require all granted

  38.     </Directory>

  39. 

  40.     SSLEngine on

  41.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  42.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  43. </VirtualHost>

  44. 

  45. <VirtualHost *:443>

  46.     ServerName profiles.{{ FQDN }}

  47.     ProxyPass / http://profiles:8108/

  48.     ProxyPassReverse / http://profiles:8108/

  49.     SSLEngine on

  50.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  51.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  52. </VirtualHost>

  53. 

  54. SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1

  55. SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

  56. SSLHonorCipherOrder     on

  57. SSLCompression          off

  58. SSLSessionTickets       off

  59. {% if not DEBUG %}

  60. SSLUseStapling          on

  61. SSLStaplingResponderTimeout 5

  62. SSLStaplingReturnResponderErrors off

  63. SSLStaplingCache        shmcb:/var/run/ocsp(128000)

  64. {% endif %}

  65. ErrorLog /dev/stderr

  66. TransferLog /dev/stdout