Changes

Jump to navigation Jump to search
117 bytes removed ,  09:45, 24 February 2020
m
Line 28: Line 28:  
to the public ip of this server<br />
 
to the public ip of this server<br />
   −
Basic SSL VirtualHost:
+
Basic SSL VirtualHost:<syntaxhighlight lang="apache">
<nowiki><VirtualHost *:80>
+
<VirtualHost *:80>  
            ServerName home.rra.lan
+
    ServerName home.rra.lan  
            ServerAdmin webmaster@rra.lan
+
    ServerAdmin webmaster@rra.lan  
            DocumentRoot /var/www/home.rra.lan
+
    DocumentRoot /var/www/home.rra.lan  
           
+
    Redirect permanent / https://home.rra.lan  
            Redirect permanent / https://home.rra.lan
+
    ErrorLog ${APACHE_LOG_DIR}/error.log  
            ErrorLog ${APACHE_LOG_DIR}/error.log
+
    CustomLog ${APACHE_LOG_DIR}/access.log combined  
            CustomLog ${APACHE_LOG_DIR}/access.log combined
+
</VirtualHost>  
    </VirtualHost>
+
<VirtualHost *:443>  
    <VirtualHost *:443>
+
    ServerName home.rra.lan  
            ServerName home.rra.lan
+
    ServerAdmin webmaster@rra.lan  
            ServerAdmin webmaster@rra.lan
+
    DocumentRoot /var/www/home.rra.lan  
            DocumentRoot /var/www/home.rra.lan
+
    ErrorLog ${APACHE_LOG_DIR}/error.log  
            ErrorLog ${APACHE_LOG_DIR}/error.log
+
    CustomLog ${APACHE_LOG_DIR}/access.log combined  
            CustomLog ${APACHE_LOG_DIR}/access.log combined
+
    SSLEngine on  
           
+
    SSLCertificateKeyFile /etc/ssl/private/home.rra.lan.key  
            SSLEngine on
+
    SSLCertificateFile /etc/ssl/certs/home.rra.lan.crt  
            SSLCertificateKeyFile /etc/ssl/private/home.rra.lan.key
+
    SSLCertificateChainFile /etc/ssl/certs/FreeIPA-CA.crt  
            SSLCertificateFile /etc/ssl/certs/home.rra.lan.crt
+
</VirtualHost>
            SSLCertificateChainFile /etc/ssl/certs/FreeIPA-CA.crt
+
</syntaxhighlight>
    </VirtualHost>
+
    </nowiki>
+
     
    
==Redirect HTTP to HTTPS==
 
==Redirect HTTP to HTTPS==
Line 77: Line 77:  
Protect with the directory directive:
 
Protect with the directory directive:
 
  <nowiki><Directory "/usr/local/apache/htdocs/secret">
 
  <nowiki><Directory "/usr/local/apache/htdocs/secret">
        AuthType Basic
+
          AuthType Basic
        AuthName "Restricted Files"
+
          AuthName "Restricted Files"
        # (Following line optional)
+
          # (Following line optional)
        AuthBasicProvider file
+
          AuthBasicProvider file
        AuthUserFile "/usr/local/apache/passwd/passwords"
+
          AuthUserFile "/usr/local/apache/passwd/passwords"
        # Require user rbowen
+
          # Require user rbowen
        Require valid-user
+
          Require valid-user
    </Directory></nowiki>
+
      </Directory></nowiki>
    
==Reverse Proxy==
 
==Reverse Proxy==

Navigation menu