# # # GLOBAL SETTINGS # # # Globally specify ServerName to satisfy requirement, will be replaced by # matching virtual host's ServerName ServerName localhost # Except where aliases are used, all URLs are relative to DocumentRoot, e.g., # https://example.com/dir1/page.html points to /var/www/html/dir1/page.html DocumentRoot /var/www/html # Deny access to everything on the server unless overridden by other Directory # directives, and allow access to the DocumentRoot Options -Indexes Require all denied Require all granted # Disallow access to .git directories and .gitignore files RedirectMatch 404 /\.git # Available loglevels: trace8, ..., trace1, debug, info, notice, warn, # error, crit, alert, emerg. # It is also possible to configure the loglevel for particular # modules, e.g. #LogLevel info ssl:warn ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined # SSL Engine Options: # Set various options for the SSL engine. # o FakeBasicAuth: # Translate the client X.509 into a Basic Authorisation. This means that # the standard Auth/DBMAuth methods can be used for access control. The # user name is the `one line' version of the client's X.509 certificate. # Note that no password is obtained from the user. Every entry in the user # file needs this password: `xxj31ZMTZzkVA'. # o ExportCertData: # This exports two additional environment variables: SSL_CLIENT_CERT and # SSL_SERVER_CERT. These contain the PEM-encoded certificates of the # server (always existing) and the client (only existing when client # authentication is used). This can be used to import the certificates # into CGI scripts. # o StdEnvVars: # This exports the standard SSL/TLS related `SSL_*' environment variables. # Per default this exportation is switched off for performance reasons, # because the extraction step is an expensive operation and is usually # useless for serving static content. So one usually enables the # exportation for CGI and SSI requests only. # o OptRenegotiate: # This enables optimized SSL connection renegotiation handling when SSL # directives are used in per-directory context. #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire SSLOptions +StdEnvVars SSLOptions +StdEnvVars # # # VIRTUAL HOSTS # # ServerName specifies what hostname must appear in the request's Host: header # to match a virtual host # # # Matches any http://* and redirects to https://* RewriteEngine On RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L] # Matches only https://dynamicshjc.case.edu ServerName dynamicshjc.case.edu SSLEngine on SSLCertificateFile /media/sf_ssl-certificates/dynamicshjc/dynamicshjc_case_edu_cert.cer SSLCertificateKeyFile /media/sf_ssl-certificates/dynamicshjc/dynamicshjc_case_edu.key SSLCertificateChainFile /media/sf_ssl-certificates/dynamicshjc/dynamicshjc_case_edu_interm.cer # Matches only https://neurowiki.case.edu ServerName neurowiki.case.edu SSLEngine on SSLCertificateFile /media/sf_ssl-certificates/neurowiki/neurowiki_case_edu_cert.cer SSLCertificateKeyFile /media/sf_ssl-certificates/neurowiki/neurowiki_case_edu.key SSLCertificateChainFile /media/sf_ssl-certificates/neurowiki/neurowiki_case_edu_interm.cer # Matches only https://neurowikidev.case.edu ServerName neurowikidev.case.edu SSLEngine on SSLCertificateFile /media/sf_ssl-certificates/neurowikidev/neurowikidev_case_edu_cert.cer SSLCertificateKeyFile /media/sf_ssl-certificates/neurowikidev/neurowikidev_case_edu.key SSLCertificateChainFile /media/sf_ssl-certificates/neurowikidev/neurowikidev_case_edu_interm.cer # Matches only https://biol300.case.edu ServerName biol300.case.edu SSLEngine on SSLCertificateFile /media/sf_ssl-certificates/biol300/biol300_case_edu_cert.cer SSLCertificateKeyFile /media/sf_ssl-certificates/biol300/biol300_case_edu.key SSLCertificateChainFile /media/sf_ssl-certificates/biol300/biol300_case_edu_interm.cer # Matches only https://biol300dev.case.edu ServerName biol300dev.case.edu SSLEngine on SSLCertificateFile /media/sf_ssl-certificates/biol300dev/biol300dev_case_edu_cert.cer SSLCertificateKeyFile /media/sf_ssl-certificates/biol300dev/biol300dev_case_edu.key SSLCertificateChainFile /media/sf_ssl-certificates/biol300dev/biol300dev_case_edu_interm.cer # Matches only https://slugwiki.case.edu ServerName slugwiki.case.edu SSLEngine on SSLCertificateFile /media/sf_ssl-certificates/slugwiki/slugwiki_case_edu_cert.cer SSLCertificateKeyFile /media/sf_ssl-certificates/slugwiki/slugwiki_case_edu.key SSLCertificateChainFile /media/sf_ssl-certificates/slugwiki/slugwiki_case_edu_interm.cer # vim: syntax=apache ts=4 sw=4 sts=4 sr noet