| Oleksii Grudev | d0be250 | 2018-05-25 14:19:43 +0300 | [diff] [blame] | 1 | apache: |
| 2 | server: |
| Dzmitry Stremkouski | fb99ea5 | 2018-10-24 10:09:18 +0200 | [diff] [blame] | 3 | bind: |
| 4 | listen_default_ports: false |
| Oleksii Grudev | d0be250 | 2018-05-25 14:19:43 +0300 | [diff] [blame] | 5 | ssl: |
| 6 | enabled: True |
| 7 | crypto_device: 'builtin' |
| 8 | fips: 'off' |
| 9 | passphrase: 'builtin' |
| 10 | random_seed: |
| 11 | seed1: |
| 12 | context: 'startup' |
| 13 | source: 'file:/dev/urandom 256' |
| 14 | enabled: True |
| 15 | seed2: |
| 16 | context: 'connect' |
| 17 | source: 'builtin' |
| 18 | enabled: True |
| 19 | session_cache: 'none' |
| 20 | stapling_cache: 'default' |
| 21 | ssl_user_name: 'SSL_CLIENT_S_DN_CN' |
| 22 | enabled: true |
| 23 | modules: |
| 24 | - cgi |
| 25 | - php |
| 26 | - auth_kerb |
| 27 | - headers |
| 28 | - rewrite |
| 29 | - authnz_ldap |
| 30 | - dav |
| 31 | - dav_fs |
| 32 | - ssl |
| Oleksandr Bryndzii | a9b5d3b | 2018-11-01 17:21:39 +0200 | [diff] [blame^] | 33 | mods: |
| 34 | status: |
| 35 | enabled: True |
| 36 | status: 'disabled' |
| Oleksii Grudev | d0be250 | 2018-05-25 14:19:43 +0300 | [diff] [blame] | 37 | module_php: php7.0 |
| 38 | user: |
| 39 | cloudlab: |
| 40 | enabled: true |
| 41 | password: cloudlab |
| 42 | htpasswd: cloudlab.htpasswd |
| 43 | robots: |
| 44 | default: |
| 45 | all: |
| 46 | disallow: |
| 47 | - / |
| 48 | site: |
| 49 | roundcube: |
| 50 | enabled: true |
| 51 | ssl: |
| 52 | enabled: true |
| 53 | mode: strict |
| 54 | ciphers: |
| 55 | ECDHE_RSA_AES256_GCM_SHA384: |
| 56 | name: 'ECDHE-RSA-AES256-GCM-SHA384' |
| 57 | enabled: True |
| 58 | ECDHE_ECDSA_AES256_GCM_SHA384: |
| 59 | name: 'ECDHE-ECDSA-AES256-GCM-SHA384' |
| 60 | enabled: True |
| 61 | protocols: |
| 62 | TLS1: |
| 63 | name: 'TLSv1' |
| 64 | enabled: True |
| 65 | TLS1_1: |
| 66 | name: 'TLSv1.1' |
| 67 | enabled: True |
| 68 | TLS1_2: |
| 69 | name: 'TLSv1.2' |
| 70 | enabled: False |
| 71 | prefer_server_ciphers: 'on' |
| 72 | key: | |
| 73 | -----BEGIN RSA PRIVATE KEY----- |
| 74 | MIIG4wIBAAKCAYEAq5spAL9CIZbe687oudIttun6ciXynqHmVb0wqpvKF7SwwrOh |
| 75 | AMINZG7rqUYK+LAtbfk53yr8nKaIf8CfGfVPInSgKiA/cW67kXUJ9jQ9VgnE8Hlo |
| 76 | Itj3ExmYKoQpMR9zQLHVo6Qzzend1MD+LoS0Gusw2hJEM46bO3RRd6uYFt5oxiTY |
| 77 | VVll651kUURVbuTn22xZAeif7Swh4zKzn8jJ0Wha9P+oDJNo74U2k5oRnRBqUxhg |
| 78 | s7eZbpzSPZ2AobSB5d+PmlXr8oHBGHTIJ67oCJVpn8LbtE4Rfsk2/s/mhufhXRNf |
| 79 | dyj+XZ8TX2Y7mZ86F8iZdLhMEXEkagji0+lumFgtUhqYaLRU40lDr1ifwrOCmFx2 |
| 80 | q4Jkjl9bbDZ+ckua3uPar7/0JS2ZGW17mU/T6nrf2UxNa7/r6jS5XKCMRLmTH7mh |
| 81 | 21PXpDuFursnAVpOiZRks840KvjdIwX8bHVFd+E45nLDhjWNhRjsvRymZfQ3dRoO |
| 82 | MFHP/eoOuzQnxG7xAgMBAAECggGAJX8RxogD+zLsIrpjP7cdJgqaHrcL/H2Dxtg/ |
| 83 | +gdwcR2aQfDeDTxZkMhr1eDoJM7aHl2Gt6y85b29taxxF0ryr6SsGohRVIfNlEru |
| 84 | kk132YTo82KTzol580J0bVXTalhk5o31EHyglS20uvgwkhmNARTC5+N1444VfTg9 |
| 85 | VNi5ssWGP0Vtv7h4/LK3aMp1oHWD8/4ItNIPn9M01GAPv6ov7wHOXho+rgDHvQ5u |
| 86 | jnHrx1X+5Yk+GAbWD8VUawIvSSYXoHhKxDYjT8KYEtVZFgP12NIoWp+THczK6JMh |
| 87 | dYuSSXXOTlPTfec9/OmJ5eMXCWYS0Ns7J9U0/oG6unfiEVzgcKmz6hBMKQMkVwsR |
| 88 | POUbtopQqs6sdekZGq5SuuDvtDENkhwbC0DTmrr2PMinZag+F62cg0TBxQQt+RkS |
| 89 | EKJwKalOLH3svsY9bsmXKKBMsl7hIHjslVp3h5Es314q8Vqp3QhwqpD72owuARVo |
| 90 | i81S7WeQTmxKWSZquNnSHDtJn1XBAoHBANRFpCF1j9MjqLZ3tXSiT/wP6wW65GK4 |
| 91 | 8yXfRFW8pZjvMeT0IN9ClHZHB3G1kO/8H4Ksex+IJzieJnp+4UhhN97WBRf5FTXV |
| 92 | shftb7V2ZLFWbn2KwnbOSjLcT9UoEVOhwp+TCgV3QIqGHvSLj45pB0uERNoUts5I |
| 93 | 5+VnXNDzw2AFqnH3KLgKIRDTEj1okaJrkqyb2EKFDybo3lsCPcqO8qclvKvMv7y4 |
| 94 | +vqBgV17RoR6vQIXaLgdOHJYo45Z0kV2lwKBwQDO9PawowOh+rOaGOQoqWoOGDVv |
| 95 | RTe5INVQFPWm1wvsZYZ+FzP6rP6RHQB/VcNTBUfwGnk8lSulN8vyo4Zipe3UgBK1 |
| 96 | DM6LjXMhdyOjGiOw3M6BzZHMxiQD2lTvqURpTf8XYlBj/lpw6z/w2B9F1LZPzw7T |
| 97 | JTEvPFNMeH77bvy8M+lu5uucOgyU/6gUgEDxdfcVbQRSRJ+wGVrf2BVPIsMWxPcr |
| 98 | dY9ziG7WCxdCEGDVRgiAOo1YcSlvdJ6NlCauv7cCgcB70N9K0PsCijM3s525GZAU |
| 99 | E+jfn8LlvsG9Hn0KkY36JdNxm+CsuXZFg2rZLbIL+YEbxKXQn6dZBA6ntuiLQoHH |
| 100 | TgkMkbKIg0xtXoahTxyuwB6UxeJmUC/BePZr/AIXSSxvzeGzjHquEktuExW6WJLz |
| 101 | voQ2vIxgyO/SxLbD/tvAX62q6iLrLqVY3fUuspb4KU0Vt5WuP1S2OnCwnx8Rzs3F |
| 102 | J2Lkxvo0B6YFhpLBx007qygiVysy8YBiWkeUmdnnwKMCgcBoMzRFyT3Z/2UQUDoI |
| 103 | Mwxf3laBGKOuxVZBhNwOTbYGJzPpJnuYWiOuIqEOe7rlgQIwZNPn6d9Yx1gbabQO |
| 104 | 1SaC2J0SpUkVQHnYPqklxNJ1iSc8ealQJe8aNYKQTHRSZN/sASciwXz936SI+ff8 |
| 105 | 69WDJ2h6bP5vnvr9xKmCpOYBSE3e9ctpFF0jY/lXoR+Rs2hdVE9ZsI2KV6nGjIBm |
| 106 | IMWDIFamfgFlFStg/6KNM7vdhe5fyZtDDW7kXB48gHxdfc8CgcEAgnqyIL940xfG |
| 107 | BndbV0yWBI6VsmeaQdB/xaJetAMENUZlT/3CP4XecHMBDXhGv1p8nAqfLhlLfpus |
| 108 | aJUpSXB+aXz8ftR1Y7efLMKAW2IKs4+U5Fx4S99Ui71vgWYl8sJOqS+1jijSqZ0K |
| 109 | JzLO4lnAYfwV5mve8JB5NmGffOaPrBvfiY9Q6/pZ4kHEZAJBr6Nn7tFp8LyRewxM |
| 110 | FLDC6kPWlj/qE92b4zsc6DvAW3M/kIsqATRPijLuqyKDfgQ+QAYn |
| 111 | -----END RSA PRIVATE KEY----- |
| 112 | cert: | |
| 113 | -----BEGIN CERTIFICATE----- |
| 114 | MIIE3jCCA0agAwIBAgIMWQmRtQWP7bWTfSYmMA0GCSqGSIb3DQEBCwUAMEgxFTAT |
| 115 | BgNVBAMTDGNsb3VkIGRldm9wczERMA8GA1UEChMIbWlyYW50aXMxDzANBgNVBAgT |
| 116 | BlByYWd1ZTELMAkGA1UEBhMCQ1owHhcNMTcwNTAzMDgxNTQ5WhcNMjcwNTAxMDgx |
| 117 | NTQ5WjBVMREwDwYDVQQDEwh3aWxkY2FyZDEPMA0GA1UECxMGZGV2b3BzMREwDwYD |
| 118 | VQQKEwhtaXJhbnRpczEPMA0GA1UECBMGUHJhZ3VlMQswCQYDVQQGEwJDWjCCAaIw |
| 119 | DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKubKQC/QiGW3uvO6LnSLbbp+nIl |
| 120 | 8p6h5lW9MKqbyhe0sMKzoQDCDWRu66lGCviwLW35Od8q/JymiH/Anxn1TyJ0oCog |
| 121 | P3Fuu5F1CfY0PVYJxPB5aCLY9xMZmCqEKTEfc0Cx1aOkM83p3dTA/i6EtBrrMNoS |
| 122 | RDOOmzt0UXermBbeaMYk2FVZZeudZFFEVW7k59tsWQHon+0sIeMys5/IydFoWvT/ |
| 123 | qAyTaO+FNpOaEZ0QalMYYLO3mW6c0j2dgKG0geXfj5pV6/KBwRh0yCeu6AiVaZ/C |
| 124 | 27ROEX7JNv7P5obn4V0TX3co/l2fE19mO5mfOhfImXS4TBFxJGoI4tPpbphYLVIa |
| 125 | mGi0VONJQ69Yn8KzgphcdquCZI5fW2w2fnJLmt7j2q+/9CUtmRlte5lP0+p639lM |
| 126 | TWu/6+o0uVygjES5kx+5odtT16Q7hbq7JwFaTomUZLPONCr43SMF/Gx1RXfhOOZy |
| 127 | w4Y1jYUY7L0cpmX0N3UaDjBRz/3qDrs0J8Ru8QIDAQABo4G6MIG3MAwGA1UdEwEB |
| 128 | /wQCMAAwQQYDVR0RBDowOIIHKi5sb2NhbIIKKi5jaS5sb2NhbIIIKi5jaS5kZXaC |
| 129 | CSouY2kudGVzdIIMKi5jaS5zdGFnaW5nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8G |
| 130 | A1UdDwEB/wQFAwMHIAAwHQYDVR0OBBYEFGtBfuF1lejUs6Bh87nkCgrjv3UuMB8G |
| 131 | A1UdIwQYMBaAFIrt2HX5Q/vHJHZpGDTbhUoF09qfMA0GCSqGSIb3DQEBCwUAA4IB |
| 132 | gQAud7sUeG4nCAY9GaeswvRQL58GqJEkfYFXSzWcxwluyTsz/z/7CQiNG77/jHPs |
| 133 | IvJBt79uFQWL8YINrdzMIGRpHLpTT6g7hRDtx0T0tzj28bu4twayu9ePMPQIgh/3 |
| 134 | ISJBIIeJIKQ/EWCm+3ePKKZWp3OscxPUdSLNf+3dmvSWmjdazhq5F/d5i4u5Fqur |
| 135 | iHaw6P/bGd2yqSiiYC1Csr1+Rfe+ulyk1NUBtpewX/96KjWNlU7q9F3RxiTNxh7x |
| 136 | CDJf5DBHIQP/KCquq8T3uZAOV2sN+HGvO4OzelisnzmRuRm8Lk4ZYNPXFTugdysY |
| 137 | HZk3aBIfowkAbNGsGOaiLkc80GxDwXXGCvTLHUXtPYH+Dkw1PRZkP+UhxT9b70El |
| 138 | qaZkfvfWEum90BH0km+1dPB/mBMqoTRXVmRyrc2QFsxRGenDbM5RhcT4HfgxCyzC |
| 139 | J2EGz8Wzf1bn2kRR4uomSzcoLe8lCM79M+DY21dxP0V8dq2sNvHOqP/0HT62BlEq |
| 140 | XtI= |
| 141 | -----END CERTIFICATE----- |
| 142 | chain: | |
| 143 | -----BEGIN CERTIFICATE----- |
| 144 | MIIE3jCCA0agAwIBAgIMWQmRtQWP7bWTfSYmMA0GCSqGSIb3DQEBCwUAMEgxFTAT |
| 145 | BgNVBAMTDGNsb3VkIGRldm9wczERMA8GA1UEChMIbWlyYW50aXMxDzANBgNVBAgT |
| 146 | BlByYWd1ZTELMAkGA1UEBhMCQ1owHhcNMTcwNTAzMDgxNTQ5WhcNMjcwNTAxMDgx |
| 147 | NTQ5WjBVMREwDwYDVQQDEwh3aWxkY2FyZDEPMA0GA1UECxMGZGV2b3BzMREwDwYD |
| 148 | VQQKEwhtaXJhbnRpczEPMA0GA1UECBMGUHJhZ3VlMQswCQYDVQQGEwJDWjCCAaIw |
| 149 | DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKubKQC/QiGW3uvO6LnSLbbp+nIl |
| 150 | 8p6h5lW9MKqbyhe0sMKzoQDCDWRu66lGCviwLW35Od8q/JymiH/Anxn1TyJ0oCog |
| 151 | P3Fuu5F1CfY0PVYJxPB5aCLY9xMZmCqEKTEfc0Cx1aOkM83p3dTA/i6EtBrrMNoS |
| 152 | RDOOmzt0UXermBbeaMYk2FVZZeudZFFEVW7k59tsWQHon+0sIeMys5/IydFoWvT/ |
| 153 | qAyTaO+FNpOaEZ0QalMYYLO3mW6c0j2dgKG0geXfj5pV6/KBwRh0yCeu6AiVaZ/C |
| 154 | 27ROEX7JNv7P5obn4V0TX3co/l2fE19mO5mfOhfImXS4TBFxJGoI4tPpbphYLVIa |
| 155 | mGi0VONJQ69Yn8KzgphcdquCZI5fW2w2fnJLmt7j2q+/9CUtmRlte5lP0+p639lM |
| 156 | TWu/6+o0uVygjES5kx+5odtT16Q7hbq7JwFaTomUZLPONCr43SMF/Gx1RXfhOOZy |
| 157 | w4Y1jYUY7L0cpmX0N3UaDjBRz/3qDrs0J8Ru8QIDAQABo4G6MIG3MAwGA1UdEwEB |
| 158 | /wQCMAAwQQYDVR0RBDowOIIHKi5sb2NhbIIKKi5jaS5sb2NhbIIIKi5jaS5kZXaC |
| 159 | CSouY2kudGVzdIIMKi5jaS5zdGFnaW5nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8G |
| 160 | A1UdDwEB/wQFAwMHIAAwHQYDVR0OBBYEFGtBfuF1lejUs6Bh87nkCgrjv3UuMB8G |
| 161 | A1UdIwQYMBaAFIrt2HX5Q/vHJHZpGDTbhUoF09qfMA0GCSqGSIb3DQEBCwUAA4IB |
| 162 | gQAud7sUeG4nCAY9GaeswvRQL58GqJEkfYFXSzWcxwluyTsz/z/7CQiNG77/jHPs |
| 163 | IvJBt79uFQWL8YINrdzMIGRpHLpTT6g7hRDtx0T0tzj28bu4twayu9ePMPQIgh/3 |
| 164 | ISJBIIeJIKQ/EWCm+3ePKKZWp3OscxPUdSLNf+3dmvSWmjdazhq5F/d5i4u5Fqur |
| 165 | iHaw6P/bGd2yqSiiYC1Csr1+Rfe+ulyk1NUBtpewX/96KjWNlU7q9F3RxiTNxh7x |
| 166 | CDJf5DBHIQP/KCquq8T3uZAOV2sN+HGvO4OzelisnzmRuRm8Lk4ZYNPXFTugdysY |
| 167 | HZk3aBIfowkAbNGsGOaiLkc80GxDwXXGCvTLHUXtPYH+Dkw1PRZkP+UhxT9b70El |
| 168 | qaZkfvfWEum90BH0km+1dPB/mBMqoTRXVmRyrc2QFsxRGenDbM5RhcT4HfgxCyzC |
| 169 | J2EGz8Wzf1bn2kRR4uomSzcoLe8lCM79M+DY21dxP0V8dq2sNvHOqP/0HT62BlEq |
| 170 | XtI= |
| 171 | -----END CERTIFICATE----- |
| 172 | -----BEGIN CERTIFICATE----- |
| 173 | MIIEWTCCAsGgAwIBAgIMWQmRjiv/O7NwT3AxMA0GCSqGSIb3DQEBCwUAMEgxFTAT |
| 174 | BgNVBAMTDGNsb3VkIGRldm9wczERMA8GA1UEChMIbWlyYW50aXMxDzANBgNVBAgT |
| 175 | BlByYWd1ZTELMAkGA1UEBhMCQ1owHhcNMTcwNTAzMDgxNTEwWhcNMjcwNTAxMDgx |
| 176 | NTEwWjBIMRUwEwYDVQQDEwxjbG91ZCBkZXZvcHMxETAPBgNVBAoTCG1pcmFudGlz |
| 177 | MQ8wDQYDVQQIEwZQcmFndWUxCzAJBgNVBAYTAkNaMIIBojANBgkqhkiG9w0BAQEF |
| 178 | AAOCAY8AMIIBigKCAYEAyIW/3H2CIvnkflCm4bc9im8TeoE+s/W/OI80d1cgfnVY |
| 179 | VRvQMuhfKMV9Ec83qaMoT/VD2TLGoaLTKxvn05jpYd7lFf+ekZXPC1tK+Wgj5w38 |
| 180 | c/V+tux6uYMPDo9XoHkGqakqE0Y9PkiUcsiOhCXMzrr3SkkpHqLV32kEKz711ibi |
| 181 | h4ATeYou7Q0hsRqRfjRj/JAr+nVQiZM39jm1OvA7VYgIrppu2rSSJwsOhneG2dhP |
| 182 | EEhpTSWB/kMPmxMQygKGZc08noZsReC7U5F+n2+DDkhdvQtQUqN2UZ4iCWt1aMxd |
| 183 | FDYmXm0uB6utJCsxy3uf4Mkfb86RBI5owECel4ASTQcAIRQNsFcaQg408c+sXTuB |
| 184 | 44RZBgJY6re2UEGGUiZ0i7mAR07Ava3dve2Rm24t2Lg17WIuIQC+kqIbgvnj9KtS |
| 185 | w00JyXFCrbiYmxpx286X27ca7sLGZZnpSNfoGvfX1UFlmmK/89klR+kMktgGdka6 |
| 186 | pnfbGDLfS5h7AkZnjzAnAgMBAAGjQzBBMA8GA1UdEwEB/wQFMAMBAf8wDwYDVR0P |
| 187 | AQH/BAUDAwcGADAdBgNVHQ4EFgQUiu3YdflD+8ckdmkYNNuFSgXT2p8wDQYJKoZI |
| 188 | hvcNAQELBQADggGBAGkWleGTCwl5v9DyL+ReQ7cIsZp2FZCPATWjrlY69QNpa7s/ |
| 189 | h7gS0Lx1bmwSVyM/A7DrmHUz2ScUjJJeZuOAt2LaKl8rnMJMSRIj4WosIB886bOw |
| 190 | d6polbiVWRFUGEaD/X9L4AJFLE3X8ITuwd4ukwCB4IvEuPLhDVIFHFIk2ur7n0HF |
| 191 | XsE/SNmsRuULMXLEqguWmCXhHqsbFoBrmUdUIyVPav9j/XFc/3jG5kAn25Qz9LfV |
| 192 | cX1LJihPbtCrc1LtBqV0LrV6aFwcl8c9JFR3qha19za/Fk/JnKz1E6CbVWMLLSOo |
| 193 | +fTGf4nvof/jJS61vKwRE3lyxZNciiXQV4fGVRIrVkbULbNSgmQaFtNFBwQ07w61 |
| 194 | 5ks8/gGnwHKnNc9kQdPm8nNjY7Jqp9XI8RaLoLvqaTAqcempwiyPYT8qu3JE79Dl |
| 195 | 6Jw10sI4/PqU5XVTqSCrvmICOOgZbFRWgCLwJzp5rq0cWvJH0N5PyATL6FfhDGm0 |
| 196 | myUGszN7wRKeJqKa1w== |
| 197 | -----END CERTIFICATE----- |
| 198 | session_timeout: '300' |
| 199 | dhparam: |
| 200 | enabled: False |
| 201 | numbits: 1024 |
| 202 | ecdh_curve: |
| 203 | secp384r1: |
| 204 | name: 'secp384r1' |
| 205 | enabled: False |
| 206 | secp521r1: |
| 207 | name: 'secp521r1' |
| 208 | enabled: True |
| 209 | ticket_key: |
| 210 | enabled: True |
| 211 | numbytes: 48 |
| 212 | session_tickets: 'on' |
| 213 | stapling: 'off' |
| 214 | crl: |
| 215 | file: '/etc/ssl/crl/crl.pem' |
| 216 | path: '/etc/ssl/crl' |
| 217 | value: 'chain' |
| 218 | enabled: False |
| 219 | verify_client: 'none' |
| 220 | client_certificate: |
| 221 | file: '/etc/ssl/client_cert.pem' |
| 222 | enabled: False |
| 223 | compression: 'off' |
| 224 | ssl_engine: 'on' |
| 225 | insecure_renegotiation: 'off' |
| 226 | ocsp: |
| 227 | default_responder: 'http://responder.example.com:8888/responder' |
| 228 | ocsp_enable: 'off' |
| 229 | override_responder: 'off' |
| 230 | responder_timeout: '50' |
| 231 | max_age: '300' |
| 232 | time_skew: '300' |
| 233 | nonce: 'on' |
| 234 | enabled: True |
| 235 | conf_cmd: |
| 236 | sessionticket: |
| 237 | command_name: 'Options' |
| 238 | command_value: '-SessionTicket' |
| 239 | enabled: True |
| 240 | serverpreference: |
| 241 | command_name: 'Options' |
| 242 | command_value: '-ServerPreference' |
| 243 | enabled: False |
| 244 | ssl_options: |
| 245 | fakebasicauth: |
| 246 | option: '+FakeBasicAuth' |
| 247 | enabled: 'True' |
| 248 | strictrequire: |
| 249 | option: '-StrictRequire' |
| 250 | enabled: True |
| 251 | proxy: |
| 252 | crl: |
| 253 | file: '/etc/ssl/crl/crl.pem' |
| 254 | path: '/etc/ssl/crl' |
| 255 | value: 'chain' |
| 256 | enabled: False |
| 257 | check_peer_cn: 'off' |
| 258 | check_peer_expire: 'off' |
| 259 | check_peer_name: 'off' |
| 260 | ciphers: |
| 261 | ECDHE_RSA_AES256_GCM_SHA384: |
| 262 | name: 'ECDHE-RSA-AES256-GCM-SHA384' |
| 263 | enabled: True |
| 264 | ECDHE_ECDSA_AES256_GCM_SHA384: |
| 265 | name: 'ECDHE-ECDSA-AES256-GCM-SHA384' |
| 266 | enabled: False |
| 267 | ssl_engine: 'on' |
| 268 | verify: 'none' |
| 269 | verify_depth: '1' |
| 270 | ssl_stapling: |
| 271 | error_cache_timeout: '600' |
| 272 | fake_try_later: 'off' |
| 273 | stapling_responder: 'http://responder.example.com:8888/responder' |
| 274 | responder_timeout: '600' |
| 275 | response_max_age: '300' |
| 276 | response_time_skew: '300' |
| 277 | responder_errors: 'off' |
| 278 | standard_cache_timeout: '600' |
| 279 | sniv_host_check: 'off' |
| 280 | verify_depth: '1' |
| 281 | type: static |
| 282 | name: roundcube |
| 283 | root: /usr/share/roundcube |
| 284 | robots: default |
| 285 | locations: |
| 286 | - uri: /admin |
| 287 | path: /usr/share/postfixadmin |
| 288 | auth: |
| 289 | engine: kerberos |
| 290 | name: "Kerberos Authentication" |
| 291 | require: |
| 292 | - "ldap-attribute memberOf='cn=jenkins,cn=groups,cn=accounts,dc=example,dc=eu'" |
| 293 | kerberos: |
| 294 | realms: |
| 295 | - EXAMPLE.EU |
| 296 | keytab: /etc/apache2/ipa.keytab |
| 297 | service: HTTP |
| 298 | method: |
| 299 | negotiate: true |
| 300 | k5passwd: true |
| 301 | - uri: /mailman |
| 302 | path: /usr/lib/cgi-bin/mailman |
| 303 | script: true |
| 304 | auth: |
| 305 | engine: basic |
| 306 | htpasswd: cloudlab.htpasswd |
| 307 | - uri: /pipermail |
| 308 | path: /var/lib/mailman/archives/public |
| 309 | webdav: |
| 310 | enabled: true |
| 311 | - uri: /images/mailman |
| 312 | path: /usr/share/images/mailman |
| 313 | host: |
| 314 | name: mail.example.com |
| 315 | aliases: |
| 316 | - mail.example.com |
| 317 | - lists.example.com |
| 318 | - mail01.example.com |
| 319 | - mail01 |
| 320 | default_mpm: prefork |
| 321 | mpm: |
| 322 | prefork: |
| 323 | enabled: true |
| 324 | servers: |
| 325 | start: 5 |
| 326 | spare: |
| 327 | min: ${apache:server:mpm:prefork:servers:start} |
| 328 | max: 10 |
| 329 | # Avoid memory leakage by restarting workers every x requests |
| 330 | max_requests: 0 |
| 331 | # Should be 80% of server memory / average memory usage of one worker |
| 332 | max_clients: 150 |
| 333 | # Should be same or more than max clients |
| 334 | limit: ${apache:server:mpm:prefork:max_clients} |