Kamis, 26 Desember 2024

Example Config Apache HTTPD

Redirect to https

#nano /etc/httpd/conf.d/example.conf

<VirtualHost *:80>

ProxyPreserveHost On

ProxyRequests Off

AllowEncodedSlashes NoDecode

 

ServerName example.yoniys.com

ServerAlias example.yoniys.com

 

Redirect permanent / https://example.yoniys.com

</VirtualHost>

 

<VirtualHost *:443>

DocumentRoot /var/www/html/example

ServerName example.yoniys.com

SSLEngine on

SSLProtocol all -SSLv2 -SSLv3

SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

ErrorLog logs/example.yoniys.com_error_log

TransferLog logs/example.yoniys.com_access_log

LogLevel warn

<Files ~ "\.(cgi|shtml|phtml|php3?)$">

    SSLOptions +StdEnvVars

</Files>

<Directory "/var/www/html/example">

        Options -Indexes +FollowSymLinks

        AllowOverride None

        Require all granted

</Directory>

SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

SSLCertificateFile /etc/httpd/ssl/apache/STAR_yoniys_com.crt

SSLCertificateKeyFile /etc/httpd/ssl/apache/STAR_yoniys_com.key

#Include /etc/letsencrypt/options-ssl-apache.conf

SSLCertificateChainFile /etc/httpd/ssl/apache/STAR_yoniys_com_chain.crt

</VirtualHost>


Example config container docker.

<VirtualHost *:443>

ServerName example.yoniys.com

SSLEngine on

SSLProxyEngine On

ProxyRequests Off

ProxyPreserveHost On

 

SSLProxyVerify none

SSLProxyCheckPeerCN off

SSLProxyCheckPeerName off

SSLProxyCheckPeerExpire off

 

SSLCertificateFile /etc/httpd/certificates/STAR_yoniys_com.crt

SSLCertificateKeyFile /etc/httpd/certificates/STAR_yoniys_com.key

SSLCertificateChainFile /etc/httpd/certificates/STAR_yoniys_com_chain.crt

 

ProxyPass / https://192.168.10.203:8081/         # example container running di port 8081, ip tersebut merupakan ip private vm

ProxyPassReverse / https://192.168.10.203:8081/

</VirtualHost>

Tidak ada komentar:

Posting Komentar