debian/templates/apache-site-https.conf.in

   1 # Koha instance __KOHASITE__ Apache config.
   2
   3 # redirect http to https
   4 #<VirtualHost *:80> #nohttps
   5 #   ServerName __OPACSERVER__ #nohttps
   6 #   ServerAlias __INTRASERVER__ #nohttps
   7 #   RewriteEngine On #nohttps
   8 #   RewriteCond %{HTTPS} !=on #nohttps
   9 #   RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] #nohttps
  10 #</VirtualHost> #nohttps
  11
  12 # OPAC
  13 <VirtualHost *:80> #https
  14 #  SSLEngine on
  15 #  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
  16 #  SSLCompression off
  17 #  SSLHonorCipherOrder on
  18 #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
  19 #  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
  20 #  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
  21 #  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
  22
  23   <IfVersion >= 2.4>
  24    Define instance "__KOHASITE__"
  25   </IfVersion>
  26    Include /etc/koha/apache-shared.conf
  27 #  Include /etc/koha/apache-shared-disable.conf
  28 #  Include /etc/koha/apache-shared-opac-plack.conf
  29    Include /etc/koha/apache-shared-opac.conf
  30
  31    ServerName __OPACSERVER__
  32    SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
  33    SetEnv MEMCACHED_SERVERS "__MEMCACHED_SERVERS__"
  34    SetEnv MEMCACHED_NAMESPACE "__MEMCACHED_NAMESPACE__"
  35    AssignUserID __UNIXUSER__ __UNIXGROUP__
  36
  37    ErrorLog    /var/log/koha/__KOHASITE__/opac-error.log
  38 #  TransferLog /var/log/koha/__KOHASITE__/opac-access.log
  39 #  RewriteLog  /var/log/koha/__KOHASITE__/opac-rewrite.log
  40 </VirtualHost>
  41
  42 # Intranet
  43 <VirtualHost *:80> #https
  44 #  SSLEngine on
  45 #  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
  46 #  SSLCompression off
  47 #  SSLHonorCipherOrder on
  48 #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES
  49 #  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
  50 #  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
  51 #  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
  52
  53   <IfVersion >= 2.4>
  54    Define instance "__KOHASITE__"
  55   </IfVersion>
  56    Include /etc/koha/apache-shared.conf
  57 #  Include /etc/koha/apache-shared-disable.conf
  58 #  Include /etc/koha/apache-shared-intranet-plack.conf
  59    Include /etc/koha/apache-shared-intranet.conf
  60
  61    ServerName __INTRASERVER__
  62    SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
  63    SetEnv MEMCACHED_SERVERS "__MEMCACHED_SERVERS__"
  64    SetEnv MEMCACHED_NAMESPACE "__MEMCACHED_NAMESPACE__"
  65    AssignUserID __UNIXUSER__ __UNIXGROUP__
  66
  67    ErrorLog    /var/log/koha/__KOHASITE__/intranet-error.log
  68 #  TransferLog /var/log/koha/__KOHASITE__/intranet-access.log
  69 #  RewriteLog  /var/log/koha/__KOHASITE__/intranet-rewrite.log
  70 </VirtualHost>