debian/templates/apache-site-https.conf.in

   1 # Koha instance __KOHASITE__ Apache config.
   2
   3 # redirect http to https
   4 #<VirtualHost *:80> #nohttps
   5 #   ServerName __OPACSERVER__ #nohttps
   6 #   ServerAlias __INTRASERVER__ #nohttps
   7 #   RewriteEngine On #nohttps
   8 #   RewriteCond %{HTTPS} !=on #nohttps
   9 #   RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] #nohttps
  10 #</VirtualHost> #nohttps
  11
  12 # OPAC
  13 <VirtualHost *:80> #https
  14 #  SSLEngine on
  15 #  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
  16 #  SSLCompression off
  17 #  SSLHonorCipherOrder on
  18 #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
  19 #  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
  20 #  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
  21 #  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
  22
  23   <IfVersion >= 2.4>
  24    Define instance "__KOHASITE__"
  25   </IfVersion>
  26    Include /etc/koha/apache-shared.conf
  27 #  Include /etc/koha/apache-shared-disable.conf
  28 #  Include /etc/koha/apache-shared-opac-plack.conf
  29    Include /etc/koha/apache-shared-opac.conf
  30
  31    ServerName __OPACSERVER__
  32    SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
  33    AssignUserID __UNIXUSER__ __UNIXGROUP__
  34
  35    ErrorLog    /var/log/koha/__KOHASITE__/opac-error.log
  36 #  TransferLog /var/log/koha/__KOHASITE__/opac-access.log
  37 #  RewriteLog  /var/log/koha/__KOHASITE__/opac-rewrite.log
  38 </VirtualHost>
  39
  40 # Intranet
  41 <VirtualHost *:80> #https
  42 #  SSLEngine on
  43 #  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
  44 #  SSLCompression off
  45 #  SSLHonorCipherOrder on
  46 #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES
  47 #  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
  48 #  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
  49 #  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
  50
  51   <IfVersion >= 2.4>
  52    Define instance "__KOHASITE__"
  53   </IfVersion>
  54    Include /etc/koha/apache-shared.conf
  55 #  Include /etc/koha/apache-shared-disable.conf
  56 #  Include /etc/koha/apache-shared-intranet-plack.conf
  57    Include /etc/koha/apache-shared-intranet.conf
  58
  59    ServerName __INTRASERVER__
  60    SetEnv KOHA_CONF "/etc/koha/sites/__KOHASITE__/koha-conf.xml"
  61    AssignUserID __UNIXUSER__ __UNIXGROUP__
  62
  63    ErrorLog    /var/log/koha/__KOHASITE__/intranet-error.log
  64 #  TransferLog /var/log/koha/__KOHASITE__/intranet-access.log
  65 #  RewriteLog  /var/log/koha/__KOHASITE__/intranet-rewrite.log
  66 </VirtualHost>