[623] | 1 | Alias /__scripts/heartbeat /afs/athena.mit.edu/contrib/scripts/web_scripts/heartbeat |
---|
[2257] | 2 | Alias /__scripts/django/static/admin /usr/lib/python2.7/site-packages/django/contrib/admin/static/admin |
---|
[2676] | 3 | Alias /__scripts /etc/httpd/scripts-special |
---|
[604] | 4 | |
---|
[2703] | 5 | Alias /.well-known/acme-challenge /etc/httpd/scripts-special/.well-known/acme-challenge |
---|
| 6 | |
---|
[2676] | 7 | <Directory /etc/httpd/scripts-special> |
---|
[603] | 8 | <Files *> |
---|
| 9 | SetHandler none |
---|
| 10 | </Files> |
---|
[2675] | 11 | SSILegacyExprParser off |
---|
[603] | 12 | </Directory> |
---|
| 13 | |
---|
[2257] | 14 | <Directory /usr/lib/python2.7/site-packages/django/contrib/admin/static/admin> |
---|
[1039] | 15 | <Files *> |
---|
| 16 | SetHandler none |
---|
| 17 | </Files> |
---|
| 18 | </Directory> |
---|
| 19 | |
---|
[603] | 20 | <Location /__scripts/needcerts> |
---|
| 21 | RewriteEngine On |
---|
[708] | 22 | |
---|
[603] | 23 | RewriteCond %{HTTP_HOST} !:444$ |
---|
[708] | 24 | RewriteCond %{SERVER_NAME} ^(.*\.)?scripts$ |
---|
| 25 | RewriteCond %{THE_REQUEST} ^[^\ ]*\ (.*)\ .* |
---|
| 26 | RewriteRule ^ https://%{SERVER_NAME}.mit.edu:444%1 [L,R] |
---|
| 27 | |
---|
| 28 | RewriteCond %{HTTP_HOST} !:444$ |
---|
[603] | 29 | RewriteCond %{SERVER_NAME} !=scripts-cert.mit.edu |
---|
| 30 | RewriteCond %{SERVER_NAME} !=scripts-cert |
---|
| 31 | RewriteCond %{THE_REQUEST} ^[^\ ]*\ (.*)\ .* |
---|
| 32 | RewriteRule ^ https://%{SERVER_NAME}:444%1 [L,R] |
---|
| 33 | |
---|
[1483] | 34 | RewriteCond %{HTTP_USER_AGENT} Mac\ OS\ X.*AppleWebKit |
---|
[2676] | 35 | RewriteRule /etc/httpd/scripts-special/needcerts(.*) /__scripts/certerror$1 [L] |
---|
[1483] | 36 | |
---|
[2676] | 37 | RewriteRule /etc/httpd/scripts-special/needcerts(.+) $1 [L] |
---|
| 38 | RewriteRule /etc/httpd/scripts-special/needcerts /__scripts/unauthorized.html [L] |
---|
[603] | 39 | </Location> |
---|
[1483] | 40 | |
---|
[2591] | 41 | <IfModule ssl_module> |
---|
[2119] | 42 | <Location /__scripts/certerror> |
---|
[1483] | 43 | SSLVerifyClient require |
---|
[2676] | 44 | RewriteRule /etc/httpd/scripts-special/certerror(.+) $1 [L] |
---|
| 45 | RewriteRule /etc/httpd/scripts-special/certerror /__scripts/unauthorized.html [L] |
---|
[1483] | 46 | </Location> |
---|
[2674] | 47 | </IfModule> |
---|
| 48 | |
---|
[2675] | 49 | ErrorDocument 403 /__scripts/forbidden.shtml |
---|
[2835] | 50 | |
---|
| 51 | <Directory /disabled> |
---|
| 52 | Require all denied |
---|
| 53 | ErrorDocument 403 /__scripts/disabled.html |
---|
| 54 | </Directory> |
---|
[2839] | 55 | |
---|
[2843] | 56 | # Generated from http://kb.mit.edu/confluence/x/F4DCAg, 2017-06-27 |
---|
| 57 | SetEnvIf REMOTE_ADDR ^(10|18\.(\d\d?|1([0-2]\d|3[1-57-9]|4[0-369]|5[024-9]|6[135-9]|7[0-46-8]|8[013679]|9[02389])|2(29|3[089]|4[0-578]|5[0-245]))|128\.(3[01]|52))\. SCRIPTS_REMOTE_MITNET |
---|