Subversion Repositories ALCASAR

Rev

Rev 2814 | Rev 2923 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
2592 rexy 1
$HTTP["url"] =~ ".*" {
2
    # Disabling directory listing as default setting
3
    dir-listing.activate = "disable"
4
}
5
 
6
# If a wrong url is used, displaying homepage for unprivileged users
7
$HTTP["url"] !~ "^/(acc|save)/" {
8
    server.error-handler-404 = "/"
9
}
10
 
11
# Error pages
12
server.errorfile-prefix = "/var/www/html/errors/error-" 
13
 
14
$SERVER["socket"] == "alcasar.localdomain:443" {
15
    ssl.engine = "enable"
16
    ssl.pemfile = "/etc/pki/tls/private/alcasar.pem"
2814 rexy 17
    ssl.ca-file = "/etc/pki/tls/certs/server-chain.pem"
2592 rexy 18
    ssl.use-sslv2 = "disable"
19
    ssl.use-sslv3 = "disable"
20
    ssl.use-compression = "disable"
21
    ssl.honor-cipher-order = "enable"
22
    ssl.cipher-list = "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
23
    var.server_name = "alcasar.localdomain"
24
    server.name = server_name
25
    server.document-root = "/var/www/html"
26
}
27
 
28
$HTTP["scheme"] == "https" {
29
    alias.url = (
30
        "/save" => "/var/Save"
31
    )
32
 
33
    # Digest authentication configuration
34
    auth.backend = "htdigest"
35
    auth.debug = 1
36
    auth.require = (
37
        "/acc/" => 
38
        (
39
            "method"  => "digest",
40
            "realm"   => "ALCASAR Control Center (ACC)",
41
            "require" => "valid-user"
42
        ),
43
        "/save/" => 
44
        (
45
            "method"  => "digest",
46
            "realm"   => "ALCASAR Control Center (ACC)",
47
            "require" => "valid-user"
48
        )
49
 
50
    )
51
 
52
    $HTTP["url"] =~ "^/(acc|save)/" {
53
        # Setting digest files according access permissions
54
        $HTTP["url"] =~ "^/acc/" {
55
            auth.backend.htdigest.userfile = "/usr/local/etc/digest/key_all"
56
 
57
            $HTTP["url"] =~ "^/acc/admin" {
58
                auth.backend.htdigest.userfile = "/usr/local/etc/digest/key_admin"
59
            }
60
 
61
            $HTTP["url"] =~ "^/acc/manager/" {
62
                auth.backend.htdigest.userfile = "/usr/local/etc/digest/key_manager"
63
            }
64
 
65
            $HTTP["url"] =~ "^/acc/backup/" {
66
                auth.backend.htdigest.userfile = "/usr/local/etc/digest/key_backup"
67
            }
68
        }
69
 
70
        $HTTP["url"] =~ "^/save" {
71
            auth.backend.htdigest.userfile = "/usr/local/etc/digest/key_backup"
72
 
73
            # Enabling directory listing
74
            dir-listing.activate = "enable"
75
        }
76
    }
77
}
78
 
79
$HTTP["scheme"] == "http" {
2920 rexy 80
	# Force HTTPS on all pages
81
	url.redirect = ("" => "https://${url.authority}${url.path}${qsa}")
2592 rexy 82
}