source: server/fedora/config/etc/httpd/conf/httpd.conf @ 603

Last change on this file since 603 was 603, checked in by andersk, 14 years ago
Modularize the redirect-to-certs kludge so that users just need to say 'ErrorDocument 401 /__scripts/needcerts'.
File size: 10.8 KB
Line 
1ServerRoot /etc/httpd
2PidFile run/httpd.pid
3Timeout 300
4KeepAlive On
5MaxKeepAliveRequests 1000
6KeepAliveTimeout 5
7MinSpareServers 5
8MaxSpareServers 20
9StartServers 8
10MaxClients 256
11MaxRequestsPerChild 4000
12
13LoadModule auth_basic_module modules/mod_auth_basic.so
14LoadModule auth_digest_module modules/mod_auth_digest.so
15LoadModule authn_file_module modules/mod_authn_file.so
16LoadModule authn_alias_module modules/mod_authn_alias.so
17LoadModule authn_anon_module modules/mod_authn_anon.so
18#LoadModule authn_dbm_module modules/mod_authn_dbm.so
19LoadModule authn_default_module modules/mod_authn_default.so
20LoadModule authz_host_module modules/mod_authz_host.so
21LoadModule authz_user_module modules/mod_authz_user.so
22LoadModule authz_owner_module modules/mod_authz_owner.so
23LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
24#LoadModule authz_dbm_module modules/mod_authz_dbm.so
25LoadModule authz_default_module modules/mod_authz_default.so
26LoadModule ldap_module modules/mod_ldap.so
27#LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
28LoadModule include_module modules/mod_include.so
29LoadModule log_config_module modules/mod_log_config.so
30#LoadModule logio_module modules/mod_logio.so
31LoadModule env_module modules/mod_env.so
32LoadModule ext_filter_module modules/mod_ext_filter.so
33#LoadModule mime_magic_module modules/mod_mime_magic.so
34#LoadModule expires_module modules/mod_expires.so
35#LoadModule deflate_module modules/mod_deflate.so
36LoadModule headers_module modules/mod_headers.so
37#LoadModule usertrack_module modules/mod_usertrack.so
38LoadModule setenvif_module modules/mod_setenvif.so
39LoadModule mime_module modules/mod_mime.so
40#LoadModule dav_module modules/mod_dav.so
41LoadModule status_module modules/mod_status.so
42LoadModule autoindex_module modules/mod_autoindex.so
43#LoadModule info_module modules/mod_info.so
44#LoadModule dav_fs_module modules/mod_dav_fs.so
45#LoadModule vhost_alias_module modules/mod_vhost_alias.so
46LoadModule negotiation_module modules/mod_negotiation.so
47LoadModule dir_module modules/mod_dir.so
48LoadModule actions_module modules/mod_actions.so
49#LoadModule speling_module modules/mod_speling.so
50LoadModule userdir_module modules/mod_userdir.so
51LoadModule alias_module modules/mod_alias.so
52LoadModule rewrite_module modules/mod_rewrite.so
53#LoadModule proxy_module modules/mod_proxy.so
54#LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
55#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
56#LoadModule proxy_http_module modules/mod_proxy_http.so
57#LoadModule proxy_connect_module modules/mod_proxy_connect.so
58#LoadModule cache_module modules/mod_cache.so
59LoadModule suexec_module modules/mod_suexec.so
60#LoadModule disk_cache_module modules/mod_disk_cache.so
61#LoadModule file_cache_module modules/mod_file_cache.so
62#LoadModule mem_cache_module modules/mod_mem_cache.so
63LoadModule cgi_module modules/mod_cgi.so
64LoadModule ssl_module modules/mod_ssl.so
65LoadModule vhost_ldap_module modules/mod_vhost_ldap.so
66
67User apache
68Group apache
69
70#ErrorDocument  403  /403-404.html
71#ErrorDocument  404  /403-404.html
72#ErrorDocument  500  /script_error.html
73
74UserDir disabled
75
76<Directory />
77    AllowOverride All
78    Options FollowSymLinks IncludesNoExec
79</Directory>
80
81<IfModule mod_dir.c>
82    DirectoryIndex index index.html index.htm index.cgi index.pl index.php index.py index.shtml index.exe
83</IfModule>
84
85AccessFileName .htaccess
86
87<Files ~ "^\.ht">
88    Order Allow,Deny
89    Deny from all
90</Files>
91
92UseCanonicalName Off
93TypesConfig /etc/mime.types
94DefaultType text/plain
95#MIMEMagicFile conf/magic
96
97HostnameLookups Off
98ErrorLog "/home/logview/error_log"
99LogLevel warn
100LogFormat "%V %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
101LogFormat "%h %l %u %t \"%r\" %>s %b" common
102#CustomLog /var/log/httpd/access_log combined
103ServerSignature Off
104ServerAdmin scripts@mit.edu
105ServerTokens Prod
106
107<IfModule mod_autoindex.c>
108    Alias /__scripts/icons /var/www/icons
109    <Directory /var/www/icons>
110        Options None
111        AllowOverride None
112        <Files ~ "\.(gif|png)$">
113            SetHandler default-handler
114        </Files>
115    </Directory>
116
117    IndexOptions FancyIndexing VersionSort NameWidth=* HTMLTable
118
119    AddIconByEncoding (CMP,/__scripts/icons/compressed.gif) x-compress x-gzip
120
121    AddIconByType (TXT,/__scripts/icons/text.gif) text/*
122    AddIconByType (IMG,/__scripts/icons/image2.gif) image/*
123    AddIconByType (SND,/__scripts/icons/sound2.gif) audio/*
124    AddIconByType (VID,/__scripts/icons/movie.gif) video/*
125
126    AddIcon /__scripts/icons/binary.gif .bin .exe
127    AddIcon /__scripts/icons/binhex.gif .hqx
128    AddIcon /__scripts/icons/tar.gif .tar
129    AddIcon /__scripts/icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
130    AddIcon /__scripts/icons/compressed.gif .Z .z .tgz .gz .zip
131    AddIcon /__scripts/icons/a.gif .ps .ai .eps
132    AddIcon /__scripts/icons/layout.gif .html .shtml .htm .pdf
133    AddIcon /__scripts/icons/text.gif .txt
134    AddIcon /__scripts/icons/c.gif .c
135    AddIcon /__scripts/icons/p.gif .pl .py
136    AddIcon /__scripts/icons/f.gif .for
137    AddIcon /__scripts/icons/dvi.gif .dvi
138    AddIcon /__scripts/icons/uuencoded.gif .uu
139    AddIcon /__scripts/icons/script.gif .conf .sh .shar .csh .ksh .tcl
140    AddIcon /__scripts/icons/tex.gif .tex
141    AddIcon /__scripts/icons/bomb.gif core
142    AddIcon /__scripts/icons/deb.gif .deb
143
144    AddIcon /__scripts/icons/back.gif ..
145    AddIcon /__scripts/icons/hand.right.gif README
146    AddIcon /__scripts/icons/folder.gif ^^DIRECTORY^^
147    AddIcon /__scripts/icons/blank.gif ^^BLANKICON^^
148
149    DefaultIcon /__scripts/icons/unknown.gif
150
151    ReadmeName README
152    HeaderName HEADER
153   
154    IndexIgnore .??* *~ *# RCS CVS *,v *,t
155</IfModule>
156
157<IfModule mod_mime.c>
158    AddType application/xhtml+xml         .xhtml
159    AddType application/http-index-format .hti
160    AddType text/html                     .html
161    AddType text/css                      .css
162    AddType text/xsl                      .xslt
163    AddType application/x-javascript      .js
164    AddType application/xml               .xml
165    AddType image/svg+xml                 .svg
166    AddType application/vnd.mozilla.xul+xml .xul
167    AddType application/rdf+xml             .rdf
168    AddType application/x-xpinstall         .xpi
169    AddType text/xml .xsl
170    AddType text/html .shtml
171    AddHandler server-parsed .shtml
172
173    AddEncoding x-compress Z
174    AddEncoding x-gzip gz tgz
175
176    AddLanguage da .dk
177    AddLanguage nl .nl
178    AddLanguage en .en
179    AddLanguage et .ee
180    AddLanguage fr .fr
181    AddLanguage de .de
182    AddLanguage el .el
183    AddLanguage it .it
184    AddLanguage ja .ja
185    AddCharset ISO-2022-JP .jis
186    AddLanguage pl .po
187    AddCharset ISO-8859-2 .iso-pl
188    AddLanguage pt .pt
189    AddLanguage pt-br .pt-br
190    AddLanguage ltz .lu
191    AddLanguage ca .ca
192    AddLanguage es .es
193    AddLanguage sv .se
194    AddLanguage cz .cz
195
196    <IfModule mod_negotiation.c>
197        LanguagePriority en da nl et fr de el it ja pl pt pt-br ltz ca es sv
198    </IfModule>
199
200    AddType application/x-tar .tgz
201    AddType image/bmp .bmp
202
203    AddType text/x-hdml .hdml
204</IfModule>
205
206<IfModule mod_setenvif.c>
207    BrowserMatch "Mozilla/2" nokeepalive
208    BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
209    BrowserMatch "RealPlayer 4\.0" force-response-1.0
210    BrowserMatch "Java/1\.0" force-response-1.0
211    BrowserMatch "JDK/1\.0" force-response-1.0
212    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
213</IfModule>
214
215Listen 80
216
217RLimitCPU 60 60
218RLimitMEM 536870912 536870912
219RLimitNPROC 1024 1024
220
221SetEnv REDIRECT_STATUS CGI
222SetEnv PHPRC .
223
224NameVirtualHost *:80
225NameVirtualHost *:443
226NameVirtualHost *:444
227NameVirtualHost 18.181.0.50:80
228NameVirtualHost 18.181.0.50:443
229NameVirtualHost 18.181.0.50:444
230
231ServerName localhost
232DocumentRoot /afs/athena.mit.edu/contrib/scripts/www
233
234ExtendedStatus On
235RewriteEngine Off
236
237<Location /robots.txt>
238    ErrorDocument 404 "No robots.txt.
239</Location>
240<Location /favicon.ico>
241    ErrorDocument 404 "No favicon.ico.
242</Location>
243
244<VirtualHost 18.181.0.50:80>
245    ServerName scripts-cert.mit.edu
246    ServerAlias scripts-cert
247    Include conf.d/scripts-vhost.conf
248    Include conf.d/vhosts-common.conf
249</VirtualHost>
250
251# LDAP vhost, w00t w00t
252<VirtualHost *:80>
253    Include conf.d/vhost_ldap.conf
254    Include conf.d/vhosts-common.conf
255</VirtualHost>
256
257<VirtualHost *:80>
258    Include conf.d/scripts-vhost-names.conf
259    Include conf.d/scripts-vhost.conf
260    Include conf.d/vhosts-common.conf
261</VirtualHost>
262
263<VirtualHost *:80>
264    Include conf.d/vhosts-vhost-names.conf
265    DocumentRoot /afs/athena.mit.edu/contrib/scripts/vhosts/server.php
266    Include conf.d/vhosts-common.conf
267</VirtualHost>
268
269<IfModule ssl_module>
270    Listen 443
271    Listen 444
272
273    AddType application/x-x509-ca-cert .crt
274    AddType application/x-pkcs7-crl    .crl
275
276    SSLPassPhraseDialog  builtin
277    SSLSessionCache dbm:/var/run/ssl_scache
278    SSLSessionCacheTimeout 300
279    SSLMutex file:/var/run/ssl_mutex
280    SSLRandomSeed startup builtin
281    SSLRandomSeed connect builtin
282    SSLCertificateFile /etc/pki/tls/certs/scripts.pem
283    SSLCertificateKeyFile /etc/pki/tls/private/scripts.key
284    SSLCACertificateFile /etc/pki/tls/certs/ca.pem
285    SSLVerifyClient none
286    SSLOptions +StdEnvVars
287    SSLUserName SSL_CLIENT_S_DN_Email
288    <VirtualHost 18.181.0.50:443 18.181.0.50:444>
289        ServerName scripts-cert.mit.edu
290        ServerAlias scripts-cert
291        Include conf.d/scripts-vhost.conf
292        Include conf.d/vhosts-common-ssl.conf
293        SSLCertificateFile /etc/pki/tls/certs/scripts-cert.pem
294        Include conf.d/vhosts-common-ssl-cert.conf
295    </VirtualHost>
296    # LDAP vhost, w00t w00t
297    <VirtualHost *:443>
298        Include conf.d/vhost_ldap.conf
299        Include conf.d/vhosts-common-ssl.conf
300    </VirtualHost>
301    <VirtualHost *:443>
302        Include conf.d/scripts-vhost-names.conf
303        Include conf.d/scripts-vhost.conf
304        Include conf.d/vhosts-common-ssl.conf
305    </VirtualHost>
306    <VirtualHost *:443>
307        Include conf.d/vhosts-vhost-names.conf
308        DocumentRoot /afs/athena.mit.edu/contrib/scripts/vhosts/server.php
309        Include conf.d/vhosts-common-ssl.conf
310    </VirtualHost>
311    # LDAP vhost, w00t w00t
312    <VirtualHost *:444>
313        Include conf.d/vhost_ldap.conf
314        Include conf.d/vhosts-common-ssl.conf
315        Include conf.d/vhosts-common-ssl-cert.conf
316    </VirtualHost>
317    <VirtualHost *:444>
318        Include conf.d/scripts-vhost-names.conf
319        Include conf.d/scripts-vhost.conf
320        Include conf.d/vhosts-common-ssl.conf
321        Include conf.d/vhosts-common-ssl-cert.conf
322    </VirtualHost>
323    <VirtualHost *:444>
324        Include conf.d/vhosts-vhost-names.conf
325        DocumentRoot /afs/athena.mit.edu/contrib/scripts/vhosts/server.php
326        Include conf.d/vhosts-common-ssl.conf
327        Include conf.d/vhosts-common-ssl-cert.conf
328    </VirtualHost>
329</IfModule>
330
331Include vhosts.d/*.conf
332
333LoadModule fcgid_module modules/mod_fcgid.so
334AddHandler fcgid-script fcgi
335<Files *.fcgi>
336        Options +ExecCGI
337</Files>
338SocketPath run/mod_fcgid
339
340Include conf.d/auth_sslcert.conf
341Include conf.d/execsys.conf
342Include conf.d/scripts-special.conf
Note: See TracBrowser for help on using the repository browser.