Apache config

[myslice.git] / apache / sp-fibre / myslice-django

diff --git a/apache/sp-fibre/myslice-django b/apache/sp-fibre/myslice-django
new file mode 100644 (file)
index 0000000..bafed8f
--- /dev/null
+++ b/apache/sp-fibre/myslice-django
@@ -0,0 +1,56 @@
+NameVirtualHost *:443
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
+    ServerAdmin support-myslice@myslice.info
+    ServerName portal.fibre.br
+
+    DocumentRoot /var/www/myslice
+    WSGIScriptAlias / /var/www/myslice/apache/unfold.wsgi 
+
+    <Directory /var/www/myslice>
+        Options Indexes FollowSymLinks MultiViews
+        AllowOverride All
+        Order allow,deny
+        allow from all
+    </Directory>
+
+    Alias /static/ /var/www/myslice/static/
+    <Directory /var/www/myslice/static>
+        Order deny,allow
+        Allow from all
+    </Directory>
+
+    #Alias /certificates/ /var/certificates-f4f/
+    ErrorLog ${APACHE_LOG_DIR}/error.log
+
+    LogLevel warn
+
+    CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
+
+    # SSL
+    SSLEngine on
+    SSLProtocol all -SSLv2
+    SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
+    SSLCertificateKeyFile   /etc/ssl/private/fibre.key
+    SSLCertificateFile      /etc/ssl/certs/fibre.crt
+    SSLOptions +StdEnvVars +ExportCertData
+    SSLCACertificatePath /etc/sfa/trusted_roots
+    SSLVerifyClient optional_no_ca
+    #SSLVerifyClient require
+    SSLVerifyDepth 5
+    ServerSignature On
+
+    <FilesMatch "\.(cgi|shtml|phtml|php)$">
+        SSLOptions +StdEnvVars
+    </FilesMatch>
+    <Directory /usr/lib/cgi-bin>
+        SSLOptions +StdEnvVars
+    </Directory>
+
+    BrowserMatch "MSIE [2-6]" \
+        nokeepalive ssl-unclean-shutdown \
+        downgrade-1.0 force-response-1.0
+    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
+
+</VirtualHost>
+</IfModule>