cvsroot/apache2-frontend/apache2.conf

# apache2 -X -d /etc/frontend -e debug

# apt-get install apache2 libapache2-mod-perl2 libdata-dump-perl libcommon-sense-perl

#ServerRoot "/dev/null"
Mutex pthread default
PidFile /run/frontend.pid

Timeout 30
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 2

#TODO: should be it's own user id
User www-data
Group www-data

GracefulShutdownTimeout 8

AddDefaultCharset UTF-8
# EnableSendfile On

# to be sure, spell out some defaults
HostnameLookups Off
AllowEncodedSlashes Off

# LogLevel: Control the severity of messages logged to the error_log.
# Available values: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the log level for particular modules, e.g.
# "LogLevel info ssl:warn"
#
LogLevel warn

# event segfaults, hangs, creates unexplained error messages...
#LoadModule mpm_event_module /usr/lib/apache2/modules/mod_mpm_event.so
LoadModule mpm_worker_module /usr/lib/apache2/modules/mod_mpm_worker.so
#LoadModule mpm_prefork_module /usr/lib/apache2/modules/mod_mpm_prefork.so
LoadModule authz_core_module /usr/lib/apache2/modules/mod_authz_core.so
LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so

LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so
TypesConfig /etc/mime.types
LoadModule mime_magic_module /usr/lib/apache2/modules/mod_mime_magic.so
MIMEMagicFile /etc/apache2/magic

# must not be loaded
#LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so
#DirectoryIndex index.html

LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so
IndexOptions Charset=UTF-8 FancyIndexing FoldersFirst HTMLTable SuppressColumnSorting
HeaderName HEADER.html
ReadmeName FOOTER.html

LoadModule status_module /usr/lib/apache2/modules/mod_status.so

LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
#LoadModule proxy_fcgi_module /usr/lib/apache2/modules/mod_proxy_fcgi.so

LoadModule proxy_scgi_module /usr/lib/apache2/modules/mod_proxy_scgi.so
#ProxySCGIInternalRedirect Internal-Redirect apache 2.6 :/
ProxySCGIInternalRedirect On
ProxySCGISendfile On

#LoadModule proxy_fdpass_module /usr/lib/apache2/modules/mod_proxy_fdpass.so
LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
LoadModule xml2enc_module /usr/lib/apache2/modules/mod_xml2enc.so
LoadModule deflate_module /usr/lib/apache2/modules/mod_deflate.so
LoadModule proxy_html_module /usr/lib/apache2/modules/mod_proxy_html.so

LoadModule perl_module /usr/lib/apache2/modules/mod_perl.so

# Sets the default security model of the Apache2 HTTPD server. It does
# not allow access to the root filesystem outside of /usr/share and /var/www.
# The former is used by web applications packaged in Debian,
# the latter may be used for local directories served by the web server. If
# your system is serving content from a sub-directory in /srv you must allow
# access here, or in any related virtual host.
<Directory />
   Options FollowSymLinks
   AllowOverride None
   Require all denied
</Directory>

<Directory /var/www/>
   Options Indexes FollowSymLinks
   Require all granted
</Directory>

AccessFileName .htaccess

#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<FilesMatch "^\.ht">
   Require all denied
</FilesMatch>

LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\" %{Host}i" schmorp
LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %O" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

CustomLog /var/log/frontend/access.log schmorp env=!suppress-logging
ErrorLog /var/log/frontend/error.log

ListenBacklog      511
ServerLimit          1
#MaxClients         100
MaxRequestWorkers  100
StartServers         1
ThreadsPerChild    100
ThreadLimit        100
MinSpareThreads      6
MaxSpareThreads    100

MaxMemFree          64
ThreadStackSize 196608

PerlInterpStart 1
PerlInterpMax 1
PerlInterpMinSpare 0
PerlInterpMaxSpare 1
PerlInterpScope Handler

Include proxy_html.conf

# for debugging, enable reverse proxy url rewrite logging
#LogLevel warn proxy_html:trace3

ProxyHTMLDocType "<!DOCTYPE html>" SGML
ProxyHTMLExtended on

# mod_proxy_html uncompresses content, but doesn't recompress nor remove
# content-encoding header
SetOutputFilter INFLATE;DEFLATE

<Perl>
   use Apache2::ServerUtil ();
   use Apache2::Const -compile => qw(OK);
   use lib Apache2::ServerUtil::server_root;
   use proxy_impl;
</Perl>

PerlOptions None +Trans +MapToStorage +HeaderParser +Authen +Authz +Type

PerlTransHandler Apache2::Const::OK
PerlMapToStorageHandler proxy_impl::map_to_storage
PerlHeaderParserHandler Apache2::Const::OK
#PerlAccessHandler Apache2::Const::OK
PerlAuthenHandler Apache2::Const::OK
PerlAuthzHandler Apache2::Const::OK
#PerlTypeHandler Apache2::Const::OK
#PerlFixupHandler Apache2::Const::OK

# handlers run anyway
# fixup mod_proxy checks for proxy: handler strings
# fixup mod_ssl annotates with lots of ssl, or updates for ssl optional
# type mod_mime mod_mime_magic do their job

# RUN_FIRST translate_name
# RUN_FIRST map_to_storage
# RUN_FIRST check_user_id
# RUN_ALL fixups
# RUN_FIRST type_checker
# RUN_ALL access_checker
# RUN_FIRST access_checker_ex
# RUN_FIRST auth_checker
# VOID insert_filter
# RUN_ALL create_request
# RUN_ALL post_perdir_config
# RUN_FIRST dirwalk_stat

# mod_dir fixup
# mod_cgi response
# mod_autoindex response
# ap_process_request_internal() function in server/request.c

<Location />
   Options Indexes FollowSymLinks
   Require all granted
</Location>

Include local.conf

# vim: syntax=apache ts=8 sw=4

Revision:	1.10
Committed:	Fri Jun 19 13:16:06 2015 UTC (11 years, 3 months ago) by root
Branch:	MAIN
Changes since 1.9:	+1 -1 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.1	# apache2 -X -d /etc/frontend -e debug
2
3			# apt-get install apache2 libapache2-mod-perl2 libdata-dump-perl libcommon-sense-perl
4
5			#ServerRoot "/dev/null"
6			Mutex pthread default
7			PidFile /run/frontend.pid
8
9	root	1.9	Timeout 30
10	root	1.1	KeepAlive On
11			MaxKeepAliveRequests 100
12	root	1.9	KeepAliveTimeout 2
13	root	1.1
14	root	1.9	#TODO: should be it's own user id
15	root	1.1	User www-data
16			Group www-data
17
18	root	1.9	GracefulShutdownTimeout 8
19	root	1.1
20	root	1.5	AddDefaultCharset UTF-8
21	root	1.9	# EnableSendfile On
22
23			# to be sure, spell out some defaults
24			HostnameLookups Off
25			AllowEncodedSlashes Off
26	root	1.5
27	root	1.1	# LogLevel: Control the severity of messages logged to the error_log.
28			# Available values: trace8, ..., trace1, debug, info, notice, warn,
29			# error, crit, alert, emerg.
30			# It is also possible to configure the log level for particular modules, e.g.
31			# "LogLevel info ssl:warn"
32			#
33			LogLevel warn
34
35	root	1.9	# event segfaults, hangs, creates unexplained error messages...
36			#LoadModule mpm_event_module /usr/lib/apache2/modules/mod_mpm_event.so
37			LoadModule mpm_worker_module /usr/lib/apache2/modules/mod_mpm_worker.so
38			#LoadModule mpm_prefork_module /usr/lib/apache2/modules/mod_mpm_prefork.so
39	root	1.1	LoadModule authz_core_module /usr/lib/apache2/modules/mod_authz_core.so
40			LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so
41
42			LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so
43			TypesConfig /etc/mime.types
44	root	1.7	LoadModule mime_magic_module /usr/lib/apache2/modules/mod_mime_magic.so
45	root	1.8	MIMEMagicFile /etc/apache2/magic
46	root	1.1
47			# must not be loaded
48			#LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so
49			#DirectoryIndex index.html
50
51			LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so
52			IndexOptions Charset=UTF-8 FancyIndexing FoldersFirst HTMLTable SuppressColumnSorting
53			HeaderName HEADER.html
54			ReadmeName FOOTER.html
55
56	root	1.9	LoadModule status_module /usr/lib/apache2/modules/mod_status.so
57
58	root	1.1	LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
59			#LoadModule proxy_fcgi_module /usr/lib/apache2/modules/mod_proxy_fcgi.so
60	root	1.2
61	root	1.1	LoadModule proxy_scgi_module /usr/lib/apache2/modules/mod_proxy_scgi.so
62	root	1.2	#ProxySCGIInternalRedirect Internal-Redirect apache 2.6 :/
63			ProxySCGIInternalRedirect On
64			ProxySCGISendfile On
65
66	root	1.1	#LoadModule proxy_fdpass_module /usr/lib/apache2/modules/mod_proxy_fdpass.so
67			LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
68			LoadModule xml2enc_module /usr/lib/apache2/modules/mod_xml2enc.so
69			LoadModule deflate_module /usr/lib/apache2/modules/mod_deflate.so
70			LoadModule proxy_html_module /usr/lib/apache2/modules/mod_proxy_html.so
71
72			LoadModule perl_module /usr/lib/apache2/modules/mod_perl.so
73
74			# Sets the default security model of the Apache2 HTTPD server. It does
75			# not allow access to the root filesystem outside of /usr/share and /var/www.
76			# The former is used by web applications packaged in Debian,
77			# the latter may be used for local directories served by the web server. If
78			# your system is serving content from a sub-directory in /srv you must allow
79			# access here, or in any related virtual host.
80			<Directory />
81			Options FollowSymLinks
82			AllowOverride None
83			Require all denied
84			</Directory>
85
86			<Directory /var/www/>
87			Options Indexes FollowSymLinks
88			Require all granted
89			</Directory>
90
91			AccessFileName .htaccess
92
93			#
94			# The following lines prevent .htaccess and .htpasswd files from being
95			# viewed by Web clients.
96			#
97			<FilesMatch "^\.ht">
98			Require all denied
99			</FilesMatch>
100
101			LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\" %{Host}i" schmorp
102			LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
103			LogFormat "%h %l %u %t \"%r\" %>s %O" common
104			LogFormat "%{Referer}i -> %U" referer
105			LogFormat "%{User-agent}i" agent
106
107	root	1.10	CustomLog /var/log/frontend/access.log schmorp env=!suppress-logging
108	root	1.1	ErrorLog /var/log/frontend/error.log
109
110	root	1.9	ListenBacklog 511
111	root	1.1	ServerLimit 1
112	root	1.9	#MaxClients 100
113	root	1.1	MaxRequestWorkers 100
114			StartServers 1
115			ThreadsPerChild 100
116	root	1.9	ThreadLimit 100
117	root	1.1	MinSpareThreads 6
118	root	1.9	MaxSpareThreads 100
119	root	1.1
120			MaxMemFree 64
121	root	1.9	ThreadStackSize 196608
122	root	1.1
123			PerlInterpStart 1
124			PerlInterpMax 1
125			PerlInterpMinSpare 0
126			PerlInterpMaxSpare 1
127			PerlInterpScope Handler
128
129			Include proxy_html.conf
130
131			# for debugging, enable reverse proxy url rewrite logging
132			#LogLevel warn proxy_html:trace3
133
134			ProxyHTMLDocType "<!DOCTYPE html>" SGML
135			ProxyHTMLExtended on
136
137			# mod_proxy_html uncompresses content, but doesn't recompress nor remove
138			# content-encoding header
139			SetOutputFilter INFLATE;DEFLATE
140
141			<Perl>
142			use Apache2::ServerUtil ();
143			use Apache2::Const -compile => qw(OK);
144			use lib Apache2::ServerUtil::server_root;
145			use proxy_impl;
146			</Perl>
147
148			PerlOptions None +Trans +MapToStorage +HeaderParser +Authen +Authz +Type
149
150			PerlTransHandler Apache2::Const::OK
151			PerlMapToStorageHandler proxy_impl::map_to_storage
152			PerlHeaderParserHandler Apache2::Const::OK
153			#PerlAccessHandler Apache2::Const::OK
154			PerlAuthenHandler Apache2::Const::OK
155			PerlAuthzHandler Apache2::Const::OK
156			#PerlTypeHandler Apache2::Const::OK
157			#PerlFixupHandler Apache2::Const::OK
158
159			# handlers run anyway
160			# fixup mod_proxy checks for proxy: handler strings
161			# fixup mod_ssl annotates with lots of ssl, or updates for ssl optional
162	root	1.6	# type mod_mime mod_mime_magic do their job
163	root	1.1
164			# RUN_FIRST translate_name
165			# RUN_FIRST map_to_storage
166			# RUN_FIRST check_user_id
167			# RUN_ALL fixups
168			# RUN_FIRST type_checker
169			# RUN_ALL access_checker
170			# RUN_FIRST access_checker_ex
171			# RUN_FIRST auth_checker
172			# VOID insert_filter
173			# RUN_ALL create_request
174			# RUN_ALL post_perdir_config
175			# RUN_FIRST dirwalk_stat
176
177			# mod_dir fixup
178			# mod_cgi response
179			# mod_autoindex response
180			# ap_process_request_internal() function in server/request.c
181
182			<Location />
183			Options Indexes FollowSymLinks
184			Require all granted
185			</Location>
186
187			Include local.conf
188
189			# vim: syntax=apache ts=8 sw=4
190