heuzef
/
lesspass
kopie van https://github.com/lesspass/lesspass.git
1
0
Vork 0
Code Kwesties 0 Publicaties 67 Wiki Activiteit
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2010 Commits
17 Branches
254 MiB
 
 
 
 
 
 
Tree: f712b2358c
Branches Labels
${ item.name }
Maak branch ${ searchTerm }
van 'f712b2358c'
${ noResults }
lesspass/containers/webserver/lesspass.conf.j2

62 regels
2.0 KiB
Ruw Blame Geschiedenis 

  1. ServerName {{ FQDN }}

  2. 

  3. TransferLog /dev/stdout

  4. ErrorLog /dev/stderr

  5. 

  6. <VirtualHost *:80>

  7.   ServerName www.{{ FQDN }}

  8.   ServerAlias {{ FQDN }}

  9.   # Redirect permanent / https://www.{{ FQDN }}/

  10.   Redirect / https://www.{{ FQDN }}/

  11. </VirtualHost>

  12. 

  13. <VirtualHost *:443>

  14.     ServerName {{ FQDN }}

  15.     ProxyPass /api/ http://backend:8000/api/

  16.     ProxyPassReverse /api/ http://backend:8000/api/

  17.     SSLEngine on

  18.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  19.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  20. </VirtualHost>

  21. 

  22. <VirtualHost *:443>

  23.     ServerName api.{{ FQDN }}

  24.     ProxyPass / http://backend:8000/api/

  25.     ProxyPassReverse / http://backend:8000/api/

  26.     SSLEngine on

  27.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  28.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  29. </VirtualHost>

  30. 

  31. <VirtualHost *:443>

  32.     ServerName www.{{ FQDN }}

  33.     ServerAlias {{ FQDN }}

  34.     

  35.     ProxyPass / http://frontend:8080/

  36.     ProxyPassReverse / http://frontend:8080/

  37.     SSLEngine on

  38.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  39.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  40. </VirtualHost>

  41. 

  42. <VirtualHost *:443>

  43.     ServerName profiles.{{ FQDN }}

  44.     ProxyPass / http://profiles:8108/

  45.     ProxyPassReverse / http://profiles:8108/

  46.     SSLEngine on

  47.     SSLCertificateFile      {{ SSL_CERTIFICATE_FILE }}

  48.     SSLCertificateKeyFile   {{ SSL_CERTIFICATE_KEY_FILE }}

  49. </VirtualHost>

  50. 

  51. SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1

  52. SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

  53. SSLHonorCipherOrder     on

  54. SSLCompression          off

  55. SSLSessionTickets       off

  56. {% if not DEBUG %}

  57. SSLUseStapling          on

  58. SSLStaplingResponderTimeout 5

  59. SSLStaplingReturnResponderErrors off

  60. SSLStaplingCache        shmcb:/var/run/ocsp(128000)

  61. {% endif %}