Nie możesz wybrać więcej, niż 25 tematów
Tematy muszą się zaczynać od litery lub cyfry, mogą zawierać myślniki ('-') i mogą mieć do 35 znaków.
|
- ServerName {{ FQDN }}
-
- TransferLog /dev/stdout
- ErrorLog /dev/stderr
-
- <VirtualHost *:80>
- ServerName www.{{ FQDN }}
- ServerAlias {{ FQDN }}
- # Redirect permanent / https://www.{{ FQDN }}/
- Redirect / https://www.{{ FQDN }}/
- </VirtualHost>
-
- <VirtualHost *:443>
- ServerName {{ FQDN }}
- ProxyPass /api/ http://backend:8000/api/
- ProxyPassReverse /api/ http://backend:8000/api/
- SSLEngine on
- SSLCertificateFile {{ SSL_CERTIFICATE_FILE }}
- SSLCertificateKeyFile {{ SSL_CERTIFICATE_KEY_FILE }}
- </VirtualHost>
-
- <VirtualHost *:443>
- ServerName api.{{ FQDN }}
- ProxyPass / http://backend:8000/api/
- ProxyPassReverse / http://backend:8000/api/
- SSLEngine on
- SSLCertificateFile {{ SSL_CERTIFICATE_FILE }}
- SSLCertificateKeyFile {{ SSL_CERTIFICATE_KEY_FILE }}
- </VirtualHost>
-
- <VirtualHost *:443>
- ServerName www.{{ FQDN }}
- ServerAlias {{ FQDN }}
-
- ProxyPass / http://frontend:8080/
- ProxyPassReverse / http://frontend:8080/
- SSLEngine on
- SSLCertificateFile {{ SSL_CERTIFICATE_FILE }}
- SSLCertificateKeyFile {{ SSL_CERTIFICATE_KEY_FILE }}
- </VirtualHost>
-
- <VirtualHost *:443>
- ServerName profiles.{{ FQDN }}
- ProxyPass / http://profiles:8108/
- ProxyPassReverse / http://profiles:8108/
- SSLEngine on
- SSLCertificateFile {{ SSL_CERTIFICATE_FILE }}
- SSLCertificateKeyFile {{ SSL_CERTIFICATE_KEY_FILE }}
- </VirtualHost>
-
- SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
- SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
- SSLHonorCipherOrder on
- SSLCompression off
- SSLSessionTickets off
- {% if not DEBUG %}
- SSLUseStapling on
- SSLStaplingResponderTimeout 5
- SSLStaplingReturnResponderErrors off
- SSLStaplingCache shmcb:/var/run/ocsp(128000)
- {% endif %}
|