sync default conf avec notre rôle Ansible
This commit is contained in:
parent
99e3c9614d
commit
39c0abf5da
|
@ -127,16 +127,47 @@ MaxRequestWorkers 250
|
||||||
StartServers 50
|
StartServers 50
|
||||||
MinSpareServers 20
|
MinSpareServers 20
|
||||||
MaxSpareServers 30
|
MaxSpareServers 30
|
||||||
MaxRequestsPerChild 100
|
MaxConnectionsPerChild 100
|
||||||
|
|
||||||
|
LimitUIDRange 0 6000
|
||||||
|
LimitGIDRange 0 6000
|
||||||
|
|
||||||
|
<IfModule mod_ssl.c>
|
||||||
|
SSLProtocol all -SSLv2 -SSLv3
|
||||||
|
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
|
||||||
|
</IfModule>
|
||||||
|
|
||||||
|
<IfModule status_module>
|
||||||
|
ExtendedStatus On
|
||||||
|
<IfModule proxy_module>
|
||||||
|
ProxyStatus On
|
||||||
|
</IfModule>
|
||||||
|
</IfModule>
|
||||||
|
|
||||||
|
# Go away bad bots (define "bad bots" in zzz-evolinux-custom.conf)
|
||||||
<If "reqenv('GoAway') -eq 1">
|
<If "reqenv('GoAway') -eq 1">
|
||||||
Require all denied
|
Require all denied
|
||||||
</If>
|
</If>
|
||||||
|
|
||||||
<IfModule mod_ssl.c>
|
<DirectoryMatch "/\.git">
|
||||||
SSLProtocol all -SSLv2 -SSLv3
|
# We don't want to let the client know a file exist on the server,
|
||||||
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
|
# so we return 404 "Not found" instead of 403 "Forbidden".
|
||||||
</IfModule>
|
Redirect 404
|
||||||
|
</DirectoryMatch>
|
||||||
|
|
||||||
|
# File names starting with
|
||||||
|
<FilesMatch "^\.(git|env)">
|
||||||
|
Redirect 404
|
||||||
|
</FilesMatch>
|
||||||
|
|
||||||
|
# File names ending with
|
||||||
|
<FilesMatch "\.(inc|bak)$">
|
||||||
|
Redirect 404
|
||||||
|
</FilesMatch>
|
||||||
|
|
||||||
|
<LocationMatch "^/evolinux_fpm_status-.*">
|
||||||
|
Require all denied
|
||||||
|
</LocationMatch>
|
||||||
~~~
|
~~~
|
||||||
|
|
||||||
et nos optimisations spécifiques dans `/etc/apache2/conf-available/zzz-evolinux-custom.conf` :
|
et nos optimisations spécifiques dans `/etc/apache2/conf-available/zzz-evolinux-custom.conf` :
|
||||||
|
|
Loading…
Reference in a new issue