heuzef
/
lesspass
mirror of https://github.com/lesspass/lesspass.git
1
0
Fork 0
Code Issues 0 Releases 67 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1830 Commits
17 Branches
385 MiB
 
 
 
 
 
 
Tree: 4f3fb4a5bd
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '4f3fb4a5bd'
${ noResults }
lesspass/containers/webserver/lesspass.conf.j2

48 lines
1.5 KiB
Raw Blame History 

  1. ServerName {{ FQDN }}

  2. 

  3. <VirtualHost *:80>

  4.   ServerName www.{{ FQDN }}

  5.   ServerAlias {{ FQDN }}

  6.   # Redirect permanent / https://www.{{ FQDN }}/

  7.   Redirect / https://www.{{ FQDN }}/

  8. </VirtualHost>

  9. 

  10. <VirtualHost *:443>

  11.     ServerName www.{{ FQDN }}

  12.     ServerAlias {{ FQDN }}

  13.     

  14.     DocumentRoot /var/www/html

  15.     

  16.     <Directory /var/www/html/>

  17.         Options Indexes FollowSymLinks

  18.         AllowOverride None

  19.         Require all granted

  20.     </Directory>

  21. 

  22.     SSLEngine on

  23.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  24.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  25. </VirtualHost>

  26. 

  27. <VirtualHost *:443>

  28.     ServerName profiles.{{ FQDN }}

  29.     ProxyPass / http://profiles:8108/

  30.     ProxyPassReverse / http://profiles:8108/

  31.     SSLEngine on

  32.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  33.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  34. </VirtualHost>

  35. 

  36. SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1

  37. SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

  38. SSLHonorCipherOrder     on

  39. SSLCompression          off

  40. SSLSessionTickets       off

  41. {% if not DEBUG %}

  42. SSLUseStapling          on

  43. SSLStaplingResponderTimeout 5

  44. SSLStaplingReturnResponderErrors off

  45. SSLStaplingCache        shmcb:/var/run/ocsp(128000)

  46. {% endif %}

  47. ErrorLog /dev/stderr

  48. TransferLog /dev/stdout