cvsroot/apache2-frontend/apache2.conf

# apache2 -X -d /etc/frontend -e debug

# apt-get install apache2 libapache2-mod-perl2 libdata-dump-perl libcommon-sense-perl

#ServerRoot "/dev/null"
Mutex pthread default
PidFile /run/frontend.pid

Timeout 60
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 30

User www-data
Group www-data

HostnameLookups Off

AddDefaultCharset UTF-8

# LogLevel: Control the severity of messages logged to the error_log.
# Available values: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the log level for particular modules, e.g.
# "LogLevel info ssl:warn"
#
LogLevel warn

LoadModule mpm_event_module /usr/lib/apache2/modules/mod_mpm_event.so
LoadModule authz_core_module /usr/lib/apache2/modules/mod_authz_core.so
LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so

LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so
TypesConfig /etc/mime.types

# must not be loaded
#LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so
#DirectoryIndex index.html

LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so
IndexOptions Charset=UTF-8 FancyIndexing FoldersFirst HTMLTable SuppressColumnSorting
HeaderName HEADER.html
ReadmeName FOOTER.html

LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
#LoadModule proxy_fcgi_module /usr/lib/apache2/modules/mod_proxy_fcgi.so

LoadModule proxy_scgi_module /usr/lib/apache2/modules/mod_proxy_scgi.so
#ProxySCGIInternalRedirect Internal-Redirect apache 2.6 :/
ProxySCGIInternalRedirect On
ProxySCGISendfile On

#LoadModule proxy_fdpass_module /usr/lib/apache2/modules/mod_proxy_fdpass.so
LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
LoadModule xml2enc_module /usr/lib/apache2/modules/mod_xml2enc.so
LoadModule deflate_module /usr/lib/apache2/modules/mod_deflate.so
LoadModule proxy_html_module /usr/lib/apache2/modules/mod_proxy_html.so

LoadModule perl_module /usr/lib/apache2/modules/mod_perl.so

# Sets the default security model of the Apache2 HTTPD server. It does
# not allow access to the root filesystem outside of /usr/share and /var/www.
# The former is used by web applications packaged in Debian,
# the latter may be used for local directories served by the web server. If
# your system is serving content from a sub-directory in /srv you must allow
# access here, or in any related virtual host.
<Directory />
   Options FollowSymLinks
   AllowOverride None
   Require all denied
</Directory>

<Directory /var/www/>
   Options Indexes FollowSymLinks
   Require all granted
</Directory>

AccessFileName .htaccess

#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<FilesMatch "^\.ht">
   Require all denied
</FilesMatch>

LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\" %{Host}i" schmorp
LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %O" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

CustomLog /var/log/frontend/access.log schmorp
ErrorLog /var/log/frontend/error.log

ServerLimit          1
MaxClients         100
MaxRequestWorkers  100
StartServers         1
ThreadsPerChild    100
ThreadLimit        200
MinSpareThreads      6
MaxSpareThreads     16

MaxMemFree          64
#ThreadStackSize  65536 # basically gets ignored

PerlInterpStart 1
PerlInterpMax 1
PerlInterpMinSpare 0
PerlInterpMaxSpare 1
PerlInterpScope Handler

Include proxy_html.conf

# for debugging, enable reverse proxy url rewrite logging
#LogLevel warn proxy_html:trace3

ProxyHTMLDocType "<!DOCTYPE html>" SGML
ProxyHTMLExtended on

# mod_proxy_html uncompresses content, but doesn't recompress nor remove
# content-encoding header
SetOutputFilter INFLATE;DEFLATE

<Perl>
   use Apache2::ServerUtil ();
   use Apache2::Const -compile => qw(OK);
   use lib Apache2::ServerUtil::server_root;
   use proxy_impl;
</Perl>

PerlOptions None +Trans +MapToStorage +HeaderParser +Authen +Authz +Type

PerlTransHandler Apache2::Const::OK
PerlMapToStorageHandler proxy_impl::map_to_storage
PerlHeaderParserHandler Apache2::Const::OK
#PerlAccessHandler Apache2::Const::OK
PerlAuthenHandler Apache2::Const::OK
PerlAuthzHandler Apache2::Const::OK
#PerlTypeHandler Apache2::Const::OK
#PerlFixupHandler Apache2::Const::OK

# handlers run anyway
# fixup mod_proxy checks for proxy: handler strings
# fixup mod_ssl annotates with lots of ssl, or updates for ssl optional
# type mod_mime does its job

# RUN_FIRST translate_name
# RUN_FIRST map_to_storage
# RUN_FIRST check_user_id
# RUN_ALL fixups
# RUN_FIRST type_checker
# RUN_ALL access_checker
# RUN_FIRST access_checker_ex
# RUN_FIRST auth_checker
# VOID insert_filter
# RUN_ALL create_request
# RUN_ALL post_perdir_config
# RUN_FIRST dirwalk_stat

# mod_dir fixup
# mod_cgi response
# mod_autoindex response
# ap_process_request_internal() function in server/request.c

<Location />
   Options Indexes FollowSymLinks
   Require all granted
</Location>

Include local.conf

# vim: syntax=apache ts=8 sw=4

Revision:	1.5
Committed:	Fri Jun 19 08:37:04 2015 UTC (11 years, 3 months ago) by root
Branch:	MAIN
Changes since 1.4:	+2 -1 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.1	# apache2 -X -d /etc/frontend -e debug
2
3			# apt-get install apache2 libapache2-mod-perl2 libdata-dump-perl libcommon-sense-perl
4
5			#ServerRoot "/dev/null"
6			Mutex pthread default
7			PidFile /run/frontend.pid
8
9			Timeout 60
10			KeepAlive On
11			MaxKeepAliveRequests 100
12			KeepAliveTimeout 30
13
14			User www-data
15			Group www-data
16
17			HostnameLookups Off
18
19	root	1.5	AddDefaultCharset UTF-8
20
21	root	1.1	# LogLevel: Control the severity of messages logged to the error_log.
22			# Available values: trace8, ..., trace1, debug, info, notice, warn,
23			# error, crit, alert, emerg.
24			# It is also possible to configure the log level for particular modules, e.g.
25			# "LogLevel info ssl:warn"
26			#
27			LogLevel warn
28
29			LoadModule mpm_event_module /usr/lib/apache2/modules/mod_mpm_event.so
30			LoadModule authz_core_module /usr/lib/apache2/modules/mod_authz_core.so
31			LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so
32
33			LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so
34			TypesConfig /etc/mime.types
35
36			# must not be loaded
37			#LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so
38			#DirectoryIndex index.html
39
40			LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so
41			IndexOptions Charset=UTF-8 FancyIndexing FoldersFirst HTMLTable SuppressColumnSorting
42			HeaderName HEADER.html
43			ReadmeName FOOTER.html
44
45			LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
46			#LoadModule proxy_fcgi_module /usr/lib/apache2/modules/mod_proxy_fcgi.so
47	root	1.2
48	root	1.1	LoadModule proxy_scgi_module /usr/lib/apache2/modules/mod_proxy_scgi.so
49	root	1.2	#ProxySCGIInternalRedirect Internal-Redirect apache 2.6 :/
50			ProxySCGIInternalRedirect On
51			ProxySCGISendfile On
52
53	root	1.1	#LoadModule proxy_fdpass_module /usr/lib/apache2/modules/mod_proxy_fdpass.so
54			LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
55			LoadModule xml2enc_module /usr/lib/apache2/modules/mod_xml2enc.so
56			LoadModule deflate_module /usr/lib/apache2/modules/mod_deflate.so
57			LoadModule proxy_html_module /usr/lib/apache2/modules/mod_proxy_html.so
58
59			LoadModule perl_module /usr/lib/apache2/modules/mod_perl.so
60
61			# Sets the default security model of the Apache2 HTTPD server. It does
62			# not allow access to the root filesystem outside of /usr/share and /var/www.
63			# The former is used by web applications packaged in Debian,
64			# the latter may be used for local directories served by the web server. If
65			# your system is serving content from a sub-directory in /srv you must allow
66			# access here, or in any related virtual host.
67			<Directory />
68			Options FollowSymLinks
69			AllowOverride None
70			Require all denied
71			</Directory>
72
73			<Directory /var/www/>
74			Options Indexes FollowSymLinks
75			Require all granted
76			</Directory>
77
78			AccessFileName .htaccess
79
80			#
81			# The following lines prevent .htaccess and .htpasswd files from being
82			# viewed by Web clients.
83			#
84			<FilesMatch "^\.ht">
85			Require all denied
86			</FilesMatch>
87
88			LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\" %{Host}i" schmorp
89			LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
90			LogFormat "%h %l %u %t \"%r\" %>s %O" common
91			LogFormat "%{Referer}i -> %U" referer
92			LogFormat "%{User-agent}i" agent
93
94			CustomLog /var/log/frontend/access.log schmorp
95			ErrorLog /var/log/frontend/error.log
96
97			ServerLimit 1
98			MaxClients 100
99			MaxRequestWorkers 100
100			StartServers 1
101			ThreadsPerChild 100
102	root	1.3	ThreadLimit 200
103	root	1.1	MinSpareThreads 6
104			MaxSpareThreads 16
105
106			MaxMemFree 64
107			#ThreadStackSize 65536 # basically gets ignored
108
109			PerlInterpStart 1
110			PerlInterpMax 1
111			PerlInterpMinSpare 0
112			PerlInterpMaxSpare 1
113			PerlInterpScope Handler
114
115			Include proxy_html.conf
116
117			# for debugging, enable reverse proxy url rewrite logging
118			#LogLevel warn proxy_html:trace3
119
120			ProxyHTMLDocType "<!DOCTYPE html>" SGML
121			ProxyHTMLExtended on
122
123			# mod_proxy_html uncompresses content, but doesn't recompress nor remove
124			# content-encoding header
125			SetOutputFilter INFLATE;DEFLATE
126
127			<Perl>
128			use Apache2::ServerUtil ();
129			use Apache2::Const -compile => qw(OK);
130			use lib Apache2::ServerUtil::server_root;
131			use proxy_impl;
132			</Perl>
133
134			PerlOptions None +Trans +MapToStorage +HeaderParser +Authen +Authz +Type
135
136			PerlTransHandler Apache2::Const::OK
137			PerlMapToStorageHandler proxy_impl::map_to_storage
138			PerlHeaderParserHandler Apache2::Const::OK
139			#PerlAccessHandler Apache2::Const::OK
140			PerlAuthenHandler Apache2::Const::OK
141			PerlAuthzHandler Apache2::Const::OK
142			#PerlTypeHandler Apache2::Const::OK
143			#PerlFixupHandler Apache2::Const::OK
144
145			# handlers run anyway
146			# fixup mod_proxy checks for proxy: handler strings
147			# fixup mod_ssl annotates with lots of ssl, or updates for ssl optional
148			# type mod_mime does its job
149
150			# RUN_FIRST translate_name
151			# RUN_FIRST map_to_storage
152			# RUN_FIRST check_user_id
153			# RUN_ALL fixups
154			# RUN_FIRST type_checker
155			# RUN_ALL access_checker
156			# RUN_FIRST access_checker_ex
157			# RUN_FIRST auth_checker
158			# VOID insert_filter
159			# RUN_ALL create_request
160			# RUN_ALL post_perdir_config
161			# RUN_FIRST dirwalk_stat
162
163			# mod_dir fixup
164			# mod_cgi response
165			# mod_autoindex response
166			# ap_process_request_internal() function in server/request.c
167
168			<Location />
169			Options Indexes FollowSymLinks
170			Require all granted
171			</Location>
172
173			Include local.conf
174
175			# vim: syntax=apache ts=8 sw=4
176