| Philipp Schrader | d0e33a4 | 2022-01-22 21:55:15 -0800 | [diff] [blame] | 1 | PidFile logs/httpd.pid |
| 2 | |
| 3 | ServerTokens Prod |
| 4 | UseCanonicalName On |
| 5 | TraceEnable Off |
| 6 | |
| 7 | Listen 127.0.0.1:{{ https_port }} |
| 8 | |
| 9 | LoadModule mpm_event_module modules/mod_mpm_event.so |
| 10 | LoadModule authn_core_module modules/mod_authn_core.so |
| 11 | LoadModule authz_core_module modules/mod_authz_core.so |
| 12 | LoadModule authz_user_module modules/mod_authz_user.so |
| 13 | LoadModule auth_basic_module modules/mod_auth_basic.so |
| 14 | LoadModule authnz_ldap_module modules/mod_authnz_ldap.so |
| 15 | LoadModule ldap_module modules/mod_ldap.so |
| 16 | LoadModule proxy_module modules/mod_proxy.so |
| 17 | LoadModule proxy_http_module modules/mod_proxy_http.so |
| 18 | LoadModule ssl_module modules/mod_ssl.so |
| 19 | |
| 20 | {% raw %} |
| 21 | ErrorLogFormat "[%{cu}t] [%-m:%-l] %-a %-L %M" |
| 22 | LogFormat "%h %l %u [%{%Y-%m-%d %H:%M:%S}t.%{usec_frac}t] \"%r\" %>s %b \ |
| 23 | \"%{Referer}i\" \"%{User-Agent}i\"" combined |
| 24 | {% endraw %} |
| 25 | |
| 26 | LogLevel debug |
| 27 | ErrorLog logs/error.log |
| 28 | CustomLog logs/access.log combined |
| 29 | |
| 30 | LDAPCacheEntries 1024 |
| 31 | LDAPCacheTTL 600 |
| 32 | LDAPTrustedGlobalCert CA_BASE64 "apache-selfsigned.crt" |
| 33 | LDAPTrustedMode STARTTLS |
| 34 | LDAPLibraryDebug 7 |
| 35 | LDAPVerifyServerCert OFF |
| 36 | |
| 37 | <VirtualHost *:{{ https_port }}> |
| 38 | ServerName localhost |
| 39 | ServerAdmin root@localhost |
| 40 | |
| 41 | SSLEngine on |
| 42 | SSLProxyEngine On |
| 43 | SSLCertificateFile apache-selfsigned.crt |
| 44 | SSLCertificateKeyFile apache-selfsigned.key |
| 45 | |
| 46 | ProxyPass "/" http://localhost:{{ wrapped_port }}/ |
| 47 | |
| 48 | <Location /> |
| 49 | AuthName "Enter your Robotics 971 credentials" |
| 50 | AuthType Basic |
| 51 | AuthBasicProvider ldap |
| 52 | AuthLDAPBindDN "{{ ldap_bind_dn }}" |
| 53 | AuthLDAPBindPassword {{ ldap_password }} |
| 54 | AuthLDAPURL "{{ ldap_url }}" |
| 55 | Require valid-user |
| 56 | </Location> |
| 57 | </VirtualHost> |