1 | ServerRoot /etc/httpd |
---|
2 | PidFile run/httpd.pid |
---|
3 | Timeout 300 |
---|
4 | KeepAlive On |
---|
5 | MaxKeepAliveRequests 1000 |
---|
6 | KeepAliveTimeout 15 |
---|
7 | |
---|
8 | <IfModule mpm_prefork_module> |
---|
9 | MinSpareServers 5 |
---|
10 | MaxSpareServers 50 |
---|
11 | StartServers 8 |
---|
12 | ServerLimit 512 |
---|
13 | MaxClients 512 |
---|
14 | MaxRequestsPerChild 10000 |
---|
15 | </IfModule> |
---|
16 | |
---|
17 | <IfModule mpm_worker_module> |
---|
18 | StartServers 3 |
---|
19 | MinSpareThreads 75 |
---|
20 | MaxSpareThreads 250 |
---|
21 | ServerLimit 64 |
---|
22 | ThreadsPerChild 32 |
---|
23 | MaxClients 1024 |
---|
24 | MaxRequestsPerChild 10000 |
---|
25 | </IfModule> |
---|
26 | |
---|
27 | <IfModule mpm_event_module> |
---|
28 | StartServers 3 |
---|
29 | MinSpareThreads 75 |
---|
30 | MaxSpareThreads 250 |
---|
31 | ServerLimit 64 |
---|
32 | ThreadsPerChild 32 |
---|
33 | MaxClients 2048 |
---|
34 | MaxRequestsPerChild 10000 |
---|
35 | </IfModule> |
---|
36 | |
---|
37 | LoadModule auth_basic_module modules/mod_auth_basic.so |
---|
38 | LoadModule auth_digest_module modules/mod_auth_digest.so |
---|
39 | LoadModule authn_file_module modules/mod_authn_file.so |
---|
40 | LoadModule authn_alias_module modules/mod_authn_alias.so |
---|
41 | LoadModule authn_anon_module modules/mod_authn_anon.so |
---|
42 | #LoadModule authn_dbm_module modules/mod_authn_dbm.so |
---|
43 | LoadModule authn_default_module modules/mod_authn_default.so |
---|
44 | LoadModule authz_host_module modules/mod_authz_host.so |
---|
45 | LoadModule authz_user_module modules/mod_authz_user.so |
---|
46 | LoadModule authz_owner_module modules/mod_authz_owner.so |
---|
47 | LoadModule authz_groupfile_module modules/mod_authz_groupfile.so |
---|
48 | #LoadModule authz_dbm_module modules/mod_authz_dbm.so |
---|
49 | LoadModule authz_default_module modules/mod_authz_default.so |
---|
50 | LoadModule ldap_module modules/mod_ldap.so |
---|
51 | #LoadModule authnz_ldap_module modules/mod_authnz_ldap.so |
---|
52 | LoadModule include_module modules/mod_include.so |
---|
53 | LoadModule log_config_module modules/mod_log_config.so |
---|
54 | #LoadModule logio_module modules/mod_logio.so |
---|
55 | LoadModule env_module modules/mod_env.so |
---|
56 | LoadModule ext_filter_module modules/mod_ext_filter.so |
---|
57 | #LoadModule mime_magic_module modules/mod_mime_magic.so |
---|
58 | LoadModule expires_module modules/mod_expires.so |
---|
59 | LoadModule deflate_module modules/mod_deflate.so |
---|
60 | LoadModule headers_module modules/mod_headers.so |
---|
61 | #LoadModule usertrack_module modules/mod_usertrack.so |
---|
62 | LoadModule setenvif_module modules/mod_setenvif.so |
---|
63 | LoadModule mime_module modules/mod_mime.so |
---|
64 | #LoadModule dav_module modules/mod_dav.so |
---|
65 | LoadModule status_module modules/mod_status.so |
---|
66 | LoadModule autoindex_module modules/mod_autoindex.so |
---|
67 | #LoadModule info_module modules/mod_info.so |
---|
68 | #LoadModule dav_fs_module modules/mod_dav_fs.so |
---|
69 | #LoadModule vhost_alias_module modules/mod_vhost_alias.so |
---|
70 | LoadModule negotiation_module modules/mod_negotiation.so |
---|
71 | LoadModule dir_module modules/mod_dir.so |
---|
72 | LoadModule actions_module modules/mod_actions.so |
---|
73 | #LoadModule speling_module modules/mod_speling.so |
---|
74 | LoadModule userdir_module modules/mod_userdir.so |
---|
75 | LoadModule alias_module modules/mod_alias.so |
---|
76 | LoadModule rewrite_module modules/mod_rewrite.so |
---|
77 | LoadModule proxy_module modules/mod_proxy.so |
---|
78 | LoadModule proxy_http_module modules/mod_proxy_http.so |
---|
79 | #LoadModule proxy_balancer_module modules/mod_proxy_balancer.so |
---|
80 | #LoadModule proxy_connect_module modules/mod_proxy_connect.so |
---|
81 | #LoadModule cache_module modules/mod_cache.so |
---|
82 | LoadModule suexec_module modules/mod_suexec.so |
---|
83 | #LoadModule disk_cache_module modules/mod_disk_cache.so |
---|
84 | #LoadModule file_cache_module modules/mod_file_cache.so |
---|
85 | #LoadModule mem_cache_module modules/mod_mem_cache.so |
---|
86 | LoadModule cgi_module modules/mod_cgi.so |
---|
87 | LoadModule ssl_module modules/mod_ssl.so |
---|
88 | LoadModule vhost_ldap_module modules/mod_vhost_ldap.so |
---|
89 | |
---|
90 | User apache |
---|
91 | Group apache |
---|
92 | |
---|
93 | #ErrorDocument 403 /403-404.html |
---|
94 | #ErrorDocument 404 /403-404.html |
---|
95 | #ErrorDocument 500 /script_error.html |
---|
96 | |
---|
97 | UserDir disabled |
---|
98 | |
---|
99 | <Directory /> |
---|
100 | AllowOverride None |
---|
101 | Options FollowSymLinks IncludesNoExec |
---|
102 | </Directory> |
---|
103 | |
---|
104 | <Directory /afs/*/*/web_scripts> |
---|
105 | AllowOverride All |
---|
106 | </Directory> |
---|
107 | <Directory /afs/*/*/*/web_scripts> |
---|
108 | AllowOverride All |
---|
109 | </Directory> |
---|
110 | <Directory /afs/*/*/*/*/web_scripts> |
---|
111 | AllowOverride All |
---|
112 | </Directory> |
---|
113 | <Directory /afs/*/*/*/*/*/web_scripts> |
---|
114 | AllowOverride All |
---|
115 | </Directory> |
---|
116 | <Directory /afs/*/*/*/*/*/*/web_scripts> |
---|
117 | AllowOverride All |
---|
118 | </Directory> |
---|
119 | <Directory /afs/*/*/*/*/*/*/*/web_scripts> |
---|
120 | AllowOverride All |
---|
121 | </Directory> |
---|
122 | <Directory /afs/*/*/*/*/*/*/*/*/web_scripts> |
---|
123 | AllowOverride All |
---|
124 | </Directory> |
---|
125 | |
---|
126 | <IfModule mod_dir.c> |
---|
127 | DirectoryIndex index index.html index.htm index.cgi index.pl index.php index.py index.shtml index.exe index.fcgi |
---|
128 | </IfModule> |
---|
129 | |
---|
130 | AccessFileName .htaccess |
---|
131 | |
---|
132 | <Files ~ "^\.ht"> |
---|
133 | Order Allow,Deny |
---|
134 | Deny from all |
---|
135 | </Files> |
---|
136 | |
---|
137 | UseCanonicalName Off |
---|
138 | TypesConfig /etc/mime.types |
---|
139 | DefaultType text/plain |
---|
140 | #MIMEMagicFile conf/magic |
---|
141 | |
---|
142 | HostnameLookups Off |
---|
143 | ErrorLog "/home/logview/error_log" |
---|
144 | LogLevel warn |
---|
145 | LogFormat "%V %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined |
---|
146 | LogFormat "%h %l %u %t \"%r\" %>s %b" common |
---|
147 | LogFormat "%a %V %U" statistics |
---|
148 | #CustomLog /var/log/httpd/access_log combined |
---|
149 | #CustomLog "|/etc/httpd/statistics_log_mitonly.sh" statistics |
---|
150 | ServerSignature Off |
---|
151 | ServerAdmin scripts@mit.edu |
---|
152 | ServerTokens Prod |
---|
153 | |
---|
154 | <IfModule mod_autoindex.c> |
---|
155 | Alias /__scripts/icons /var/www/icons |
---|
156 | <Directory /var/www/icons> |
---|
157 | Options Indexes |
---|
158 | AllowOverride None |
---|
159 | <Files ~ "\.(gif|png)$"> |
---|
160 | SetHandler default-handler |
---|
161 | </Files> |
---|
162 | </Directory> |
---|
163 | |
---|
164 | IndexOptions FancyIndexing VersionSort NameWidth=* HTMLTable |
---|
165 | |
---|
166 | AddIconByEncoding (CMP,/__scripts/icons/compressed.gif) x-compress x-gzip |
---|
167 | |
---|
168 | AddIconByType (TXT,/__scripts/icons/text.gif) text/* |
---|
169 | AddIconByType (IMG,/__scripts/icons/image2.gif) image/* |
---|
170 | AddIconByType (SND,/__scripts/icons/sound2.gif) audio/* |
---|
171 | AddIconByType (VID,/__scripts/icons/movie.gif) video/* |
---|
172 | |
---|
173 | AddIcon /__scripts/icons/binary.gif .bin .exe |
---|
174 | AddIcon /__scripts/icons/binhex.gif .hqx |
---|
175 | AddIcon /__scripts/icons/tar.gif .tar |
---|
176 | AddIcon /__scripts/icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv |
---|
177 | AddIcon /__scripts/icons/compressed.gif .Z .z .tgz .gz .zip |
---|
178 | AddIcon /__scripts/icons/a.gif .ps .ai .eps |
---|
179 | AddIcon /__scripts/icons/layout.gif .html .shtml .htm .pdf |
---|
180 | AddIcon /__scripts/icons/text.gif .txt |
---|
181 | AddIcon /__scripts/icons/c.gif .c |
---|
182 | AddIcon /__scripts/icons/p.gif .pl .py |
---|
183 | AddIcon /__scripts/icons/f.gif .for |
---|
184 | AddIcon /__scripts/icons/dvi.gif .dvi |
---|
185 | AddIcon /__scripts/icons/uuencoded.gif .uu |
---|
186 | AddIcon /__scripts/icons/script.gif .conf .sh .shar .csh .ksh .tcl |
---|
187 | AddIcon /__scripts/icons/tex.gif .tex |
---|
188 | AddIcon /__scripts/icons/bomb.gif core |
---|
189 | |
---|
190 | AddIcon /__scripts/icons/back.gif .. |
---|
191 | AddIcon /__scripts/icons/hand.right.gif README |
---|
192 | AddIcon /__scripts/icons/folder.gif ^^DIRECTORY^^ |
---|
193 | AddIcon /__scripts/icons/blank.gif ^^BLANKICON^^ |
---|
194 | |
---|
195 | DefaultIcon /__scripts/icons/unknown.gif |
---|
196 | |
---|
197 | ReadmeName README |
---|
198 | HeaderName HEADER |
---|
199 | |
---|
200 | IndexIgnore .??* *~ *# RCS CVS *,v *,t |
---|
201 | </IfModule> |
---|
202 | |
---|
203 | <IfModule mod_mime.c> |
---|
204 | AddType application/xhtml+xml .xhtml |
---|
205 | AddType application/http-index-format .hti |
---|
206 | AddType text/html .html |
---|
207 | AddType text/css .css |
---|
208 | AddType text/xsl .xslt |
---|
209 | AddType application/x-javascript .js |
---|
210 | AddType application/xml .xml |
---|
211 | AddType image/svg+xml .svg |
---|
212 | AddType application/vnd.mozilla.xul+xml .xul |
---|
213 | AddType application/rdf+xml .rdf |
---|
214 | AddType application/x-xpinstall .xpi |
---|
215 | AddType text/xml .xsl |
---|
216 | AddType text/html .shtml |
---|
217 | AddHandler server-parsed .shtml |
---|
218 | |
---|
219 | AddEncoding x-compress Z |
---|
220 | AddEncoding x-gzip gz tgz |
---|
221 | |
---|
222 | AddLanguage da .dk |
---|
223 | AddLanguage nl .nl |
---|
224 | AddLanguage en .en |
---|
225 | AddLanguage et .ee |
---|
226 | AddLanguage fr .fr |
---|
227 | AddLanguage de .de |
---|
228 | AddLanguage el .el |
---|
229 | AddLanguage it .it |
---|
230 | AddLanguage ja .ja |
---|
231 | AddCharset ISO-2022-JP .jis |
---|
232 | AddLanguage pl .po |
---|
233 | AddCharset ISO-8859-2 .iso-pl |
---|
234 | AddLanguage pt .pt |
---|
235 | AddLanguage pt-br .pt-br |
---|
236 | AddLanguage ltz .lu |
---|
237 | AddLanguage ca .ca |
---|
238 | AddLanguage es .es |
---|
239 | AddLanguage sv .se |
---|
240 | AddLanguage cz .cz |
---|
241 | |
---|
242 | <IfModule mod_negotiation.c> |
---|
243 | LanguagePriority en da nl et fr de el it ja pl pt pt-br ltz ca es sv |
---|
244 | </IfModule> |
---|
245 | |
---|
246 | AddType application/x-tar .tgz |
---|
247 | AddType image/bmp .bmp |
---|
248 | |
---|
249 | AddType text/x-hdml .hdml |
---|
250 | </IfModule> |
---|
251 | |
---|
252 | <IfModule mod_setenvif.c> |
---|
253 | BrowserMatch "Mozilla/2" nokeepalive |
---|
254 | BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0 |
---|
255 | BrowserMatch "RealPlayer 4\.0" force-response-1.0 |
---|
256 | BrowserMatch "Java/1\.0" force-response-1.0 |
---|
257 | BrowserMatch "JDK/1\.0" force-response-1.0 |
---|
258 | SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown |
---|
259 | </IfModule> |
---|
260 | |
---|
261 | Listen 80 |
---|
262 | |
---|
263 | RLimitCPU 300 300 |
---|
264 | RLimitMEM 1610612736 1610612736 |
---|
265 | RLimitNPROC 4096 4096 |
---|
266 | |
---|
267 | NameVirtualHost *:80 |
---|
268 | NameVirtualHost *:443 |
---|
269 | NameVirtualHost *:444 |
---|
270 | NameVirtualHost 18.181.0.50:80 |
---|
271 | NameVirtualHost 18.181.0.50:443 |
---|
272 | NameVirtualHost 18.181.0.50:444 |
---|
273 | |
---|
274 | ServerName localhost |
---|
275 | DocumentRoot /afs/athena.mit.edu/contrib/scripts/www |
---|
276 | |
---|
277 | ExtendedStatus On |
---|
278 | RewriteEngine Off |
---|
279 | |
---|
280 | ProxyRequests Off |
---|
281 | |
---|
282 | <Location /robots.txt> |
---|
283 | ErrorDocument 404 "No robots.txt. |
---|
284 | </Location> |
---|
285 | <Location /favicon.ico> |
---|
286 | ErrorDocument 404 "No favicon.ico. |
---|
287 | </Location> |
---|
288 | |
---|
289 | <VirtualHost 18.181.0.50:80> |
---|
290 | ServerName scripts-cert.mit.edu |
---|
291 | ServerAlias scripts-cert |
---|
292 | Include conf.d/scripts-vhost.conf |
---|
293 | Include conf.d/vhosts-common.conf |
---|
294 | </VirtualHost> |
---|
295 | |
---|
296 | # LDAP vhost, w00t w00t |
---|
297 | <VirtualHost *:80> |
---|
298 | Include conf.d/vhost_ldap.conf |
---|
299 | Include conf.d/vhosts-common.conf |
---|
300 | </VirtualHost> |
---|
301 | |
---|
302 | <VirtualHost *:80> |
---|
303 | Include conf.d/scripts-vhost-names.conf |
---|
304 | Include conf.d/scripts-vhost.conf |
---|
305 | Include conf.d/vhosts-common.conf |
---|
306 | </VirtualHost> |
---|
307 | |
---|
308 | <IfModule ssl_module> |
---|
309 | Listen 443 |
---|
310 | Listen 444 |
---|
311 | |
---|
312 | AddType application/x-x509-ca-cert .crt |
---|
313 | AddType application/x-pkcs7-crl .crl |
---|
314 | |
---|
315 | # This directive allows insecure renegotiations to succeed for browsers |
---|
316 | # that do not yet support RFC 5746. It should be removed when enough |
---|
317 | # of the world has caught up. |
---|
318 | SSLInsecureRenegotiation on |
---|
319 | |
---|
320 | SSLPassPhraseDialog builtin |
---|
321 | SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000) |
---|
322 | SSLSessionCacheTimeout 28800 |
---|
323 | SSLMutex default |
---|
324 | SSLRandomSeed startup file:/dev/urandom 256 |
---|
325 | SSLRandomSeed connect builtin |
---|
326 | SSLCryptoDevice builtin |
---|
327 | SSLCertificateFile /etc/pki/tls/certs/star.scripts.pem |
---|
328 | SSLCertificateKeyFile /etc/pki/tls/private/scripts-1024.key |
---|
329 | SSLCACertificateFile /etc/pki/tls/certs/ca.pem |
---|
330 | SSLVerifyClient none |
---|
331 | SSLOptions +StdEnvVars |
---|
332 | SSLProtocol all -SSLv2 |
---|
333 | SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW |
---|
334 | <VirtualHost 18.181.0.50:443 18.181.0.50:444> |
---|
335 | ServerName scripts-cert.mit.edu |
---|
336 | ServerAlias scripts-cert |
---|
337 | Include conf.d/scripts-vhost.conf |
---|
338 | Include conf.d/vhosts-common-ssl.conf |
---|
339 | SSLCertificateFile /etc/pki/tls/certs/scripts-cert.pem |
---|
340 | SSLCertificateKeyFile /etc/pki/tls/private/scripts.key |
---|
341 | Include conf.d/vhosts-common-ssl-cert.conf |
---|
342 | </VirtualHost> |
---|
343 | <VirtualHost 18.181.0.43:443> |
---|
344 | Include conf.d/scripts-vhost-names.conf |
---|
345 | Include conf.d/scripts-vhost.conf |
---|
346 | Include conf.d/vhosts-common-ssl.conf |
---|
347 | SSLCertificateFile /etc/pki/tls/certs/scripts.pem |
---|
348 | SSLCertificateKeyFile /etc/pki/tls/private/scripts.key |
---|
349 | SSLCertificateChainFile /etc/pki/tls/certs/scripts.pem |
---|
350 | </VirtualHost> |
---|
351 | <VirtualHost 18.181.0.43:444> |
---|
352 | Include conf.d/scripts-vhost-names.conf |
---|
353 | Include conf.d/scripts-vhost.conf |
---|
354 | Include conf.d/vhosts-common-ssl.conf |
---|
355 | Include conf.d/vhosts-common-ssl-cert.conf |
---|
356 | SSLCertificateFile /etc/pki/tls/certs/scripts.pem |
---|
357 | SSLCertificateKeyFile /etc/pki/tls/private/scripts.key |
---|
358 | SSLCertificateChainFile /etc/pki/tls/certs/scripts.pem |
---|
359 | </VirtualHost> |
---|
360 | # LDAP vhost, w00t w00t |
---|
361 | <VirtualHost *:443> |
---|
362 | ServerName localhost |
---|
363 | Include conf.d/vhost_ldap.conf |
---|
364 | Include conf.d/vhosts-common-ssl.conf |
---|
365 | </VirtualHost> |
---|
366 | # LDAP vhost, w00t w00t |
---|
367 | <VirtualHost *:444> |
---|
368 | ServerName localhost |
---|
369 | Include conf.d/vhost_ldap.conf |
---|
370 | Include conf.d/vhosts-common-ssl.conf |
---|
371 | Include conf.d/vhosts-common-ssl-cert.conf |
---|
372 | </VirtualHost> |
---|
373 | </IfModule> |
---|
374 | Include vhosts.d/*.conf |
---|
375 | <IfModule ssl_module> |
---|
376 | <VirtualHost *:443> |
---|
377 | ServerName scripts.scripts.mit.edu |
---|
378 | ServerAlias *.scripts.mit.edu *.scripts |
---|
379 | SSLCertificateFile /etc/pki/tls/certs/star.scripts.pem |
---|
380 | Include conf.d/vhost_ldap.conf |
---|
381 | Include conf.d/vhosts-common-ssl.conf |
---|
382 | </VirtualHost> |
---|
383 | <VirtualHost *:443> |
---|
384 | Include conf.d/scripts-vhost-names.conf |
---|
385 | Include conf.d/scripts-vhost.conf |
---|
386 | Include conf.d/vhosts-common-ssl.conf |
---|
387 | </VirtualHost> |
---|
388 | <VirtualHost *:444> |
---|
389 | ServerName scripts.scripts.mit.edu |
---|
390 | ServerAlias *.scripts.mit.edu *.scripts |
---|
391 | SSLCertificateFile /etc/pki/tls/certs/star.scripts.pem |
---|
392 | Include conf.d/vhost_ldap.conf |
---|
393 | Include conf.d/vhosts-common-ssl.conf |
---|
394 | Include conf.d/vhosts-common-ssl-cert.conf |
---|
395 | </VirtualHost> |
---|
396 | <VirtualHost *:444> |
---|
397 | Include conf.d/scripts-vhost-names.conf |
---|
398 | Include conf.d/scripts-vhost.conf |
---|
399 | Include conf.d/vhosts-common-ssl.conf |
---|
400 | Include conf.d/vhosts-common-ssl-cert.conf |
---|
401 | </VirtualHost> |
---|
402 | </IfModule> |
---|
403 | |
---|
404 | LoadModule fcgid_module modules/mod_fcgid.so |
---|
405 | AddHandler fcgid-script fcgi |
---|
406 | <Files *.fcgi> |
---|
407 | Options +ExecCGI |
---|
408 | </Files> |
---|
409 | SocketPath /var/run/mod_fcgid |
---|
410 | SharememPath /var/run/mod_fcgid/fcgid_shm |
---|
411 | IPCCommTimeout 300 |
---|
412 | FcgidMaxRequestLen 209715200 |
---|
413 | FcgidIdleTimeout 600 |
---|
414 | FcgidMaxProcessesPerClass 10 |
---|
415 | FcgidMinProcessesPerClass 0 |
---|
416 | FcgidMaxRequestsPerProcess 10000 |
---|
417 | |
---|
418 | Include conf.d/auth_sslcert.conf |
---|
419 | Include conf.d/execsys.conf |
---|
420 | Include conf.d/scripts-special.conf |
---|