debian/templates/apache-site-https.conf.in

   1 # Koha instance __KOHASITE__ Apache config.
   2
   3 # redirect http to https
   4 #<VirtualHost *:80> #nohttps
   5 #   ServerName __OPACSERVER__ #nohttps
   6 #   ServerAlias __INTRASERVER__ #nohttps
   7 #   RewriteEngine On #nohttps
   8 #   RewriteCond %{HTTPS} !=on #nohttps
   9 #   RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] #nohttps
  10 #</VirtualHost> #nohttps
  11
  12 # OPAC
  13 <VirtualHost *:80> #https
  14 #  SSLEngine on
  15 #  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
  16 #  SSLCompression off
  17 #  SSLHonorCipherOrder on
  18 #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
  19 #  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
  20 #  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
  21 #  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
  22
  23   <IfVersion >= 2.4>
  24    Define instance "__KOHASITE__"
  25   </IfVersion>
  26    Include /etc/koha/apache-shared.conf
  27 #  Include /etc/koha/apache-shared-disable.conf
  28 #  Include /etc/koha/apache-shared-opac-plack.conf
  29    Include /etc/koha/apache-shared-opac.conf
  30
  31    ServerName __OPACSERVER__
  32    SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
  33    AssignUserID __UNIXUSER__ __UNIXGROUP__
  34
  35    ErrorLog    /var/log/koha/__KOHASITE__/opac-error.log
  36 #  TransferLog /var/log/koha/__KOHASITE__/opac-access.log
  37 </VirtualHost>
  38
  39 # Intranet
  40 <VirtualHost *:80> #https
  41 #  SSLEngine on
  42 #  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
  43 #  SSLCompression off
  44 #  SSLHonorCipherOrder on
  45 #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES
  46 #  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
  47 #  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
  48 #  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
  49
  50   <IfVersion >= 2.4>
  51    Define instance "__KOHASITE__"
  52   </IfVersion>
  53    Include /etc/koha/apache-shared.conf
  54 #  Include /etc/koha/apache-shared-disable.conf
  55 #  Include /etc/koha/apache-shared-intranet-plack.conf
  56    Include /etc/koha/apache-shared-intranet.conf
  57
  58    ServerName __INTRASERVER__
  59    SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
  60    AssignUserID __UNIXUSER__ __UNIXGROUP__
  61
  62    ErrorLog    /var/log/koha/__KOHASITE__/intranet-error.log
  63 #  TransferLog /var/log/koha/__KOHASITE__/intranet-access.log
  64 </VirtualHost>