| Oleksii Grudev | d0be250 | 2018-05-25 14:19:43 +0300 | [diff] [blame] | 1 | apache: |
| 2 | server: |
| Dzmitry Stremkouski | fb99ea5 | 2018-10-24 10:09:18 +0200 | [diff] [blame] | 3 | bind: |
| 4 | listen_default_ports: false |
| Oleksii Grudev | d0be250 | 2018-05-25 14:19:43 +0300 | [diff] [blame] | 5 | ssl: |
| 6 | enabled: True |
| 7 | crypto_device: 'builtin' |
| 8 | fips: 'off' |
| 9 | passphrase: 'builtin' |
| 10 | random_seed: |
| 11 | seed1: |
| 12 | context: 'startup' |
| 13 | source: 'file:/dev/urandom 256' |
| 14 | enabled: True |
| 15 | seed2: |
| 16 | context: 'connect' |
| 17 | source: 'builtin' |
| 18 | enabled: True |
| 19 | session_cache: 'none' |
| 20 | stapling_cache: 'default' |
| 21 | ssl_user_name: 'SSL_CLIENT_S_DN_CN' |
| 22 | enabled: true |
| 23 | modules: |
| 24 | - cgi |
| 25 | - php |
| 26 | - auth_kerb |
| 27 | - headers |
| 28 | - rewrite |
| 29 | - authnz_ldap |
| 30 | - dav |
| 31 | - dav_fs |
| 32 | - ssl |
| Oleksandr Bryndzii | a9b5d3b | 2018-11-01 17:21:39 +0200 | [diff] [blame] | 33 | mods: |
| 34 | status: |
| 35 | enabled: True |
| Oleksandr Bryndzii | 4c1a02b | 2018-12-18 11:23:15 +0000 | [diff] [blame] | 36 | status: 'enabled' |
| 37 | host: |
| 38 | address: '127.0.0.1' |
| 39 | port: '80' |
| 40 | allow: |
| 41 | localhost: |
| 42 | enabled: True |
| 43 | value: '127.0.0.0/255.0.0.0' |
| 44 | localhost_ipv6: |
| 45 | enabled: True |
| 46 | value: '::1/128' |
| Oleksii Grudev | d0be250 | 2018-05-25 14:19:43 +0300 | [diff] [blame] | 47 | module_php: php7.0 |
| 48 | user: |
| 49 | cloudlab: |
| 50 | enabled: true |
| 51 | password: cloudlab |
| 52 | htpasswd: cloudlab.htpasswd |
| 53 | robots: |
| 54 | default: |
| 55 | all: |
| 56 | disallow: |
| 57 | - / |
| 58 | site: |
| 59 | roundcube: |
| 60 | enabled: true |
| 61 | ssl: |
| 62 | enabled: true |
| 63 | mode: strict |
| 64 | ciphers: |
| 65 | ECDHE_RSA_AES256_GCM_SHA384: |
| 66 | name: 'ECDHE-RSA-AES256-GCM-SHA384' |
| 67 | enabled: True |
| 68 | ECDHE_ECDSA_AES256_GCM_SHA384: |
| 69 | name: 'ECDHE-ECDSA-AES256-GCM-SHA384' |
| 70 | enabled: True |
| 71 | protocols: |
| 72 | TLS1: |
| 73 | name: 'TLSv1' |
| 74 | enabled: True |
| 75 | TLS1_1: |
| 76 | name: 'TLSv1.1' |
| 77 | enabled: True |
| 78 | TLS1_2: |
| 79 | name: 'TLSv1.2' |
| 80 | enabled: False |
| 81 | prefer_server_ciphers: 'on' |
| 82 | key: | |
| 83 | -----BEGIN RSA PRIVATE KEY----- |
| 84 | MIIG4wIBAAKCAYEAq5spAL9CIZbe687oudIttun6ciXynqHmVb0wqpvKF7SwwrOh |
| 85 | AMINZG7rqUYK+LAtbfk53yr8nKaIf8CfGfVPInSgKiA/cW67kXUJ9jQ9VgnE8Hlo |
| 86 | Itj3ExmYKoQpMR9zQLHVo6Qzzend1MD+LoS0Gusw2hJEM46bO3RRd6uYFt5oxiTY |
| 87 | VVll651kUURVbuTn22xZAeif7Swh4zKzn8jJ0Wha9P+oDJNo74U2k5oRnRBqUxhg |
| 88 | s7eZbpzSPZ2AobSB5d+PmlXr8oHBGHTIJ67oCJVpn8LbtE4Rfsk2/s/mhufhXRNf |
| 89 | dyj+XZ8TX2Y7mZ86F8iZdLhMEXEkagji0+lumFgtUhqYaLRU40lDr1ifwrOCmFx2 |
| 90 | q4Jkjl9bbDZ+ckua3uPar7/0JS2ZGW17mU/T6nrf2UxNa7/r6jS5XKCMRLmTH7mh |
| 91 | 21PXpDuFursnAVpOiZRks840KvjdIwX8bHVFd+E45nLDhjWNhRjsvRymZfQ3dRoO |
| 92 | MFHP/eoOuzQnxG7xAgMBAAECggGAJX8RxogD+zLsIrpjP7cdJgqaHrcL/H2Dxtg/ |
| 93 | +gdwcR2aQfDeDTxZkMhr1eDoJM7aHl2Gt6y85b29taxxF0ryr6SsGohRVIfNlEru |
| 94 | kk132YTo82KTzol580J0bVXTalhk5o31EHyglS20uvgwkhmNARTC5+N1444VfTg9 |
| 95 | VNi5ssWGP0Vtv7h4/LK3aMp1oHWD8/4ItNIPn9M01GAPv6ov7wHOXho+rgDHvQ5u |
| 96 | jnHrx1X+5Yk+GAbWD8VUawIvSSYXoHhKxDYjT8KYEtVZFgP12NIoWp+THczK6JMh |
| 97 | dYuSSXXOTlPTfec9/OmJ5eMXCWYS0Ns7J9U0/oG6unfiEVzgcKmz6hBMKQMkVwsR |
| 98 | POUbtopQqs6sdekZGq5SuuDvtDENkhwbC0DTmrr2PMinZag+F62cg0TBxQQt+RkS |
| 99 | EKJwKalOLH3svsY9bsmXKKBMsl7hIHjslVp3h5Es314q8Vqp3QhwqpD72owuARVo |
| 100 | i81S7WeQTmxKWSZquNnSHDtJn1XBAoHBANRFpCF1j9MjqLZ3tXSiT/wP6wW65GK4 |
| 101 | 8yXfRFW8pZjvMeT0IN9ClHZHB3G1kO/8H4Ksex+IJzieJnp+4UhhN97WBRf5FTXV |
| 102 | shftb7V2ZLFWbn2KwnbOSjLcT9UoEVOhwp+TCgV3QIqGHvSLj45pB0uERNoUts5I |
| 103 | 5+VnXNDzw2AFqnH3KLgKIRDTEj1okaJrkqyb2EKFDybo3lsCPcqO8qclvKvMv7y4 |
| 104 | +vqBgV17RoR6vQIXaLgdOHJYo45Z0kV2lwKBwQDO9PawowOh+rOaGOQoqWoOGDVv |
| 105 | RTe5INVQFPWm1wvsZYZ+FzP6rP6RHQB/VcNTBUfwGnk8lSulN8vyo4Zipe3UgBK1 |
| 106 | DM6LjXMhdyOjGiOw3M6BzZHMxiQD2lTvqURpTf8XYlBj/lpw6z/w2B9F1LZPzw7T |
| 107 | JTEvPFNMeH77bvy8M+lu5uucOgyU/6gUgEDxdfcVbQRSRJ+wGVrf2BVPIsMWxPcr |
| 108 | dY9ziG7WCxdCEGDVRgiAOo1YcSlvdJ6NlCauv7cCgcB70N9K0PsCijM3s525GZAU |
| 109 | E+jfn8LlvsG9Hn0KkY36JdNxm+CsuXZFg2rZLbIL+YEbxKXQn6dZBA6ntuiLQoHH |
| 110 | TgkMkbKIg0xtXoahTxyuwB6UxeJmUC/BePZr/AIXSSxvzeGzjHquEktuExW6WJLz |
| 111 | voQ2vIxgyO/SxLbD/tvAX62q6iLrLqVY3fUuspb4KU0Vt5WuP1S2OnCwnx8Rzs3F |
| 112 | J2Lkxvo0B6YFhpLBx007qygiVysy8YBiWkeUmdnnwKMCgcBoMzRFyT3Z/2UQUDoI |
| 113 | Mwxf3laBGKOuxVZBhNwOTbYGJzPpJnuYWiOuIqEOe7rlgQIwZNPn6d9Yx1gbabQO |
| 114 | 1SaC2J0SpUkVQHnYPqklxNJ1iSc8ealQJe8aNYKQTHRSZN/sASciwXz936SI+ff8 |
| 115 | 69WDJ2h6bP5vnvr9xKmCpOYBSE3e9ctpFF0jY/lXoR+Rs2hdVE9ZsI2KV6nGjIBm |
| 116 | IMWDIFamfgFlFStg/6KNM7vdhe5fyZtDDW7kXB48gHxdfc8CgcEAgnqyIL940xfG |
| 117 | BndbV0yWBI6VsmeaQdB/xaJetAMENUZlT/3CP4XecHMBDXhGv1p8nAqfLhlLfpus |
| 118 | aJUpSXB+aXz8ftR1Y7efLMKAW2IKs4+U5Fx4S99Ui71vgWYl8sJOqS+1jijSqZ0K |
| 119 | JzLO4lnAYfwV5mve8JB5NmGffOaPrBvfiY9Q6/pZ4kHEZAJBr6Nn7tFp8LyRewxM |
| 120 | FLDC6kPWlj/qE92b4zsc6DvAW3M/kIsqATRPijLuqyKDfgQ+QAYn |
| 121 | -----END RSA PRIVATE KEY----- |
| 122 | cert: | |
| 123 | -----BEGIN CERTIFICATE----- |
| 124 | MIIE3jCCA0agAwIBAgIMWQmRtQWP7bWTfSYmMA0GCSqGSIb3DQEBCwUAMEgxFTAT |
| 125 | BgNVBAMTDGNsb3VkIGRldm9wczERMA8GA1UEChMIbWlyYW50aXMxDzANBgNVBAgT |
| 126 | BlByYWd1ZTELMAkGA1UEBhMCQ1owHhcNMTcwNTAzMDgxNTQ5WhcNMjcwNTAxMDgx |
| 127 | NTQ5WjBVMREwDwYDVQQDEwh3aWxkY2FyZDEPMA0GA1UECxMGZGV2b3BzMREwDwYD |
| 128 | VQQKEwhtaXJhbnRpczEPMA0GA1UECBMGUHJhZ3VlMQswCQYDVQQGEwJDWjCCAaIw |
| 129 | DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKubKQC/QiGW3uvO6LnSLbbp+nIl |
| 130 | 8p6h5lW9MKqbyhe0sMKzoQDCDWRu66lGCviwLW35Od8q/JymiH/Anxn1TyJ0oCog |
| 131 | P3Fuu5F1CfY0PVYJxPB5aCLY9xMZmCqEKTEfc0Cx1aOkM83p3dTA/i6EtBrrMNoS |
| 132 | RDOOmzt0UXermBbeaMYk2FVZZeudZFFEVW7k59tsWQHon+0sIeMys5/IydFoWvT/ |
| 133 | qAyTaO+FNpOaEZ0QalMYYLO3mW6c0j2dgKG0geXfj5pV6/KBwRh0yCeu6AiVaZ/C |
| 134 | 27ROEX7JNv7P5obn4V0TX3co/l2fE19mO5mfOhfImXS4TBFxJGoI4tPpbphYLVIa |
| 135 | mGi0VONJQ69Yn8KzgphcdquCZI5fW2w2fnJLmt7j2q+/9CUtmRlte5lP0+p639lM |
| 136 | TWu/6+o0uVygjES5kx+5odtT16Q7hbq7JwFaTomUZLPONCr43SMF/Gx1RXfhOOZy |
| 137 | w4Y1jYUY7L0cpmX0N3UaDjBRz/3qDrs0J8Ru8QIDAQABo4G6MIG3MAwGA1UdEwEB |
| 138 | /wQCMAAwQQYDVR0RBDowOIIHKi5sb2NhbIIKKi5jaS5sb2NhbIIIKi5jaS5kZXaC |
| 139 | CSouY2kudGVzdIIMKi5jaS5zdGFnaW5nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8G |
| 140 | A1UdDwEB/wQFAwMHIAAwHQYDVR0OBBYEFGtBfuF1lejUs6Bh87nkCgrjv3UuMB8G |
| 141 | A1UdIwQYMBaAFIrt2HX5Q/vHJHZpGDTbhUoF09qfMA0GCSqGSIb3DQEBCwUAA4IB |
| 142 | gQAud7sUeG4nCAY9GaeswvRQL58GqJEkfYFXSzWcxwluyTsz/z/7CQiNG77/jHPs |
| 143 | IvJBt79uFQWL8YINrdzMIGRpHLpTT6g7hRDtx0T0tzj28bu4twayu9ePMPQIgh/3 |
| 144 | ISJBIIeJIKQ/EWCm+3ePKKZWp3OscxPUdSLNf+3dmvSWmjdazhq5F/d5i4u5Fqur |
| 145 | iHaw6P/bGd2yqSiiYC1Csr1+Rfe+ulyk1NUBtpewX/96KjWNlU7q9F3RxiTNxh7x |
| 146 | CDJf5DBHIQP/KCquq8T3uZAOV2sN+HGvO4OzelisnzmRuRm8Lk4ZYNPXFTugdysY |
| 147 | HZk3aBIfowkAbNGsGOaiLkc80GxDwXXGCvTLHUXtPYH+Dkw1PRZkP+UhxT9b70El |
| 148 | qaZkfvfWEum90BH0km+1dPB/mBMqoTRXVmRyrc2QFsxRGenDbM5RhcT4HfgxCyzC |
| 149 | J2EGz8Wzf1bn2kRR4uomSzcoLe8lCM79M+DY21dxP0V8dq2sNvHOqP/0HT62BlEq |
| 150 | XtI= |
| 151 | -----END CERTIFICATE----- |
| 152 | chain: | |
| 153 | -----BEGIN CERTIFICATE----- |
| 154 | MIIE3jCCA0agAwIBAgIMWQmRtQWP7bWTfSYmMA0GCSqGSIb3DQEBCwUAMEgxFTAT |
| 155 | BgNVBAMTDGNsb3VkIGRldm9wczERMA8GA1UEChMIbWlyYW50aXMxDzANBgNVBAgT |
| 156 | BlByYWd1ZTELMAkGA1UEBhMCQ1owHhcNMTcwNTAzMDgxNTQ5WhcNMjcwNTAxMDgx |
| 157 | NTQ5WjBVMREwDwYDVQQDEwh3aWxkY2FyZDEPMA0GA1UECxMGZGV2b3BzMREwDwYD |
| 158 | VQQKEwhtaXJhbnRpczEPMA0GA1UECBMGUHJhZ3VlMQswCQYDVQQGEwJDWjCCAaIw |
| 159 | DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKubKQC/QiGW3uvO6LnSLbbp+nIl |
| 160 | 8p6h5lW9MKqbyhe0sMKzoQDCDWRu66lGCviwLW35Od8q/JymiH/Anxn1TyJ0oCog |
| 161 | P3Fuu5F1CfY0PVYJxPB5aCLY9xMZmCqEKTEfc0Cx1aOkM83p3dTA/i6EtBrrMNoS |
| 162 | RDOOmzt0UXermBbeaMYk2FVZZeudZFFEVW7k59tsWQHon+0sIeMys5/IydFoWvT/ |
| 163 | qAyTaO+FNpOaEZ0QalMYYLO3mW6c0j2dgKG0geXfj5pV6/KBwRh0yCeu6AiVaZ/C |
| 164 | 27ROEX7JNv7P5obn4V0TX3co/l2fE19mO5mfOhfImXS4TBFxJGoI4tPpbphYLVIa |
| 165 | mGi0VONJQ69Yn8KzgphcdquCZI5fW2w2fnJLmt7j2q+/9CUtmRlte5lP0+p639lM |
| 166 | TWu/6+o0uVygjES5kx+5odtT16Q7hbq7JwFaTomUZLPONCr43SMF/Gx1RXfhOOZy |
| 167 | w4Y1jYUY7L0cpmX0N3UaDjBRz/3qDrs0J8Ru8QIDAQABo4G6MIG3MAwGA1UdEwEB |
| 168 | /wQCMAAwQQYDVR0RBDowOIIHKi5sb2NhbIIKKi5jaS5sb2NhbIIIKi5jaS5kZXaC |
| 169 | CSouY2kudGVzdIIMKi5jaS5zdGFnaW5nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8G |
| 170 | A1UdDwEB/wQFAwMHIAAwHQYDVR0OBBYEFGtBfuF1lejUs6Bh87nkCgrjv3UuMB8G |
| 171 | A1UdIwQYMBaAFIrt2HX5Q/vHJHZpGDTbhUoF09qfMA0GCSqGSIb3DQEBCwUAA4IB |
| 172 | gQAud7sUeG4nCAY9GaeswvRQL58GqJEkfYFXSzWcxwluyTsz/z/7CQiNG77/jHPs |
| 173 | IvJBt79uFQWL8YINrdzMIGRpHLpTT6g7hRDtx0T0tzj28bu4twayu9ePMPQIgh/3 |
| 174 | ISJBIIeJIKQ/EWCm+3ePKKZWp3OscxPUdSLNf+3dmvSWmjdazhq5F/d5i4u5Fqur |
| 175 | iHaw6P/bGd2yqSiiYC1Csr1+Rfe+ulyk1NUBtpewX/96KjWNlU7q9F3RxiTNxh7x |
| 176 | CDJf5DBHIQP/KCquq8T3uZAOV2sN+HGvO4OzelisnzmRuRm8Lk4ZYNPXFTugdysY |
| 177 | HZk3aBIfowkAbNGsGOaiLkc80GxDwXXGCvTLHUXtPYH+Dkw1PRZkP+UhxT9b70El |
| 178 | qaZkfvfWEum90BH0km+1dPB/mBMqoTRXVmRyrc2QFsxRGenDbM5RhcT4HfgxCyzC |
| 179 | J2EGz8Wzf1bn2kRR4uomSzcoLe8lCM79M+DY21dxP0V8dq2sNvHOqP/0HT62BlEq |
| 180 | XtI= |
| 181 | -----END CERTIFICATE----- |
| 182 | -----BEGIN CERTIFICATE----- |
| 183 | MIIEWTCCAsGgAwIBAgIMWQmRjiv/O7NwT3AxMA0GCSqGSIb3DQEBCwUAMEgxFTAT |
| 184 | BgNVBAMTDGNsb3VkIGRldm9wczERMA8GA1UEChMIbWlyYW50aXMxDzANBgNVBAgT |
| 185 | BlByYWd1ZTELMAkGA1UEBhMCQ1owHhcNMTcwNTAzMDgxNTEwWhcNMjcwNTAxMDgx |
| 186 | NTEwWjBIMRUwEwYDVQQDEwxjbG91ZCBkZXZvcHMxETAPBgNVBAoTCG1pcmFudGlz |
| 187 | MQ8wDQYDVQQIEwZQcmFndWUxCzAJBgNVBAYTAkNaMIIBojANBgkqhkiG9w0BAQEF |
| 188 | AAOCAY8AMIIBigKCAYEAyIW/3H2CIvnkflCm4bc9im8TeoE+s/W/OI80d1cgfnVY |
| 189 | VRvQMuhfKMV9Ec83qaMoT/VD2TLGoaLTKxvn05jpYd7lFf+ekZXPC1tK+Wgj5w38 |
| 190 | c/V+tux6uYMPDo9XoHkGqakqE0Y9PkiUcsiOhCXMzrr3SkkpHqLV32kEKz711ibi |
| 191 | h4ATeYou7Q0hsRqRfjRj/JAr+nVQiZM39jm1OvA7VYgIrppu2rSSJwsOhneG2dhP |
| 192 | EEhpTSWB/kMPmxMQygKGZc08noZsReC7U5F+n2+DDkhdvQtQUqN2UZ4iCWt1aMxd |
| 193 | FDYmXm0uB6utJCsxy3uf4Mkfb86RBI5owECel4ASTQcAIRQNsFcaQg408c+sXTuB |
| 194 | 44RZBgJY6re2UEGGUiZ0i7mAR07Ava3dve2Rm24t2Lg17WIuIQC+kqIbgvnj9KtS |
| 195 | w00JyXFCrbiYmxpx286X27ca7sLGZZnpSNfoGvfX1UFlmmK/89klR+kMktgGdka6 |
| 196 | pnfbGDLfS5h7AkZnjzAnAgMBAAGjQzBBMA8GA1UdEwEB/wQFMAMBAf8wDwYDVR0P |
| 197 | AQH/BAUDAwcGADAdBgNVHQ4EFgQUiu3YdflD+8ckdmkYNNuFSgXT2p8wDQYJKoZI |
| 198 | hvcNAQELBQADggGBAGkWleGTCwl5v9DyL+ReQ7cIsZp2FZCPATWjrlY69QNpa7s/ |
| 199 | h7gS0Lx1bmwSVyM/A7DrmHUz2ScUjJJeZuOAt2LaKl8rnMJMSRIj4WosIB886bOw |
| 200 | d6polbiVWRFUGEaD/X9L4AJFLE3X8ITuwd4ukwCB4IvEuPLhDVIFHFIk2ur7n0HF |
| 201 | XsE/SNmsRuULMXLEqguWmCXhHqsbFoBrmUdUIyVPav9j/XFc/3jG5kAn25Qz9LfV |
| 202 | cX1LJihPbtCrc1LtBqV0LrV6aFwcl8c9JFR3qha19za/Fk/JnKz1E6CbVWMLLSOo |
| 203 | +fTGf4nvof/jJS61vKwRE3lyxZNciiXQV4fGVRIrVkbULbNSgmQaFtNFBwQ07w61 |
| 204 | 5ks8/gGnwHKnNc9kQdPm8nNjY7Jqp9XI8RaLoLvqaTAqcempwiyPYT8qu3JE79Dl |
| 205 | 6Jw10sI4/PqU5XVTqSCrvmICOOgZbFRWgCLwJzp5rq0cWvJH0N5PyATL6FfhDGm0 |
| 206 | myUGszN7wRKeJqKa1w== |
| 207 | -----END CERTIFICATE----- |
| 208 | session_timeout: '300' |
| 209 | dhparam: |
| 210 | enabled: False |
| 211 | numbits: 1024 |
| 212 | ecdh_curve: |
| 213 | secp384r1: |
| 214 | name: 'secp384r1' |
| 215 | enabled: False |
| 216 | secp521r1: |
| 217 | name: 'secp521r1' |
| 218 | enabled: True |
| 219 | ticket_key: |
| 220 | enabled: True |
| 221 | numbytes: 48 |
| 222 | session_tickets: 'on' |
| 223 | stapling: 'off' |
| 224 | crl: |
| 225 | file: '/etc/ssl/crl/crl.pem' |
| 226 | path: '/etc/ssl/crl' |
| 227 | value: 'chain' |
| 228 | enabled: False |
| 229 | verify_client: 'none' |
| 230 | client_certificate: |
| 231 | file: '/etc/ssl/client_cert.pem' |
| 232 | enabled: False |
| 233 | compression: 'off' |
| 234 | ssl_engine: 'on' |
| 235 | insecure_renegotiation: 'off' |
| 236 | ocsp: |
| 237 | default_responder: 'http://responder.example.com:8888/responder' |
| 238 | ocsp_enable: 'off' |
| 239 | override_responder: 'off' |
| 240 | responder_timeout: '50' |
| 241 | max_age: '300' |
| 242 | time_skew: '300' |
| 243 | nonce: 'on' |
| 244 | enabled: True |
| 245 | conf_cmd: |
| 246 | sessionticket: |
| 247 | command_name: 'Options' |
| 248 | command_value: '-SessionTicket' |
| 249 | enabled: True |
| 250 | serverpreference: |
| 251 | command_name: 'Options' |
| 252 | command_value: '-ServerPreference' |
| 253 | enabled: False |
| 254 | ssl_options: |
| 255 | fakebasicauth: |
| 256 | option: '+FakeBasicAuth' |
| 257 | enabled: 'True' |
| 258 | strictrequire: |
| 259 | option: '-StrictRequire' |
| 260 | enabled: True |
| 261 | proxy: |
| 262 | crl: |
| 263 | file: '/etc/ssl/crl/crl.pem' |
| 264 | path: '/etc/ssl/crl' |
| 265 | value: 'chain' |
| 266 | enabled: False |
| 267 | check_peer_cn: 'off' |
| 268 | check_peer_expire: 'off' |
| 269 | check_peer_name: 'off' |
| 270 | ciphers: |
| 271 | ECDHE_RSA_AES256_GCM_SHA384: |
| 272 | name: 'ECDHE-RSA-AES256-GCM-SHA384' |
| 273 | enabled: True |
| 274 | ECDHE_ECDSA_AES256_GCM_SHA384: |
| 275 | name: 'ECDHE-ECDSA-AES256-GCM-SHA384' |
| 276 | enabled: False |
| 277 | ssl_engine: 'on' |
| 278 | verify: 'none' |
| 279 | verify_depth: '1' |
| 280 | ssl_stapling: |
| 281 | error_cache_timeout: '600' |
| 282 | fake_try_later: 'off' |
| 283 | stapling_responder: 'http://responder.example.com:8888/responder' |
| 284 | responder_timeout: '600' |
| 285 | response_max_age: '300' |
| 286 | response_time_skew: '300' |
| 287 | responder_errors: 'off' |
| 288 | standard_cache_timeout: '600' |
| 289 | sniv_host_check: 'off' |
| 290 | verify_depth: '1' |
| 291 | type: static |
| 292 | name: roundcube |
| 293 | root: /usr/share/roundcube |
| 294 | robots: default |
| 295 | locations: |
| 296 | - uri: /admin |
| 297 | path: /usr/share/postfixadmin |
| 298 | auth: |
| 299 | engine: kerberos |
| 300 | name: "Kerberos Authentication" |
| 301 | require: |
| 302 | - "ldap-attribute memberOf='cn=jenkins,cn=groups,cn=accounts,dc=example,dc=eu'" |
| 303 | kerberos: |
| 304 | realms: |
| 305 | - EXAMPLE.EU |
| 306 | keytab: /etc/apache2/ipa.keytab |
| 307 | service: HTTP |
| 308 | method: |
| 309 | negotiate: true |
| 310 | k5passwd: true |
| 311 | - uri: /mailman |
| 312 | path: /usr/lib/cgi-bin/mailman |
| 313 | script: true |
| 314 | auth: |
| 315 | engine: basic |
| 316 | htpasswd: cloudlab.htpasswd |
| 317 | - uri: /pipermail |
| 318 | path: /var/lib/mailman/archives/public |
| 319 | webdav: |
| 320 | enabled: true |
| 321 | - uri: /images/mailman |
| 322 | path: /usr/share/images/mailman |
| 323 | host: |
| 324 | name: mail.example.com |
| 325 | aliases: |
| 326 | - mail.example.com |
| 327 | - lists.example.com |
| 328 | - mail01.example.com |
| 329 | - mail01 |
| 330 | default_mpm: prefork |
| 331 | mpm: |
| 332 | prefork: |
| 333 | enabled: true |
| 334 | servers: |
| 335 | start: 5 |
| 336 | spare: |
| 337 | min: ${apache:server:mpm:prefork:servers:start} |
| 338 | max: 10 |
| 339 | # Avoid memory leakage by restarting workers every x requests |
| 340 | max_requests: 0 |
| 341 | # Should be 80% of server memory / average memory usage of one worker |
| 342 | max_clients: 150 |
| 343 | # Should be same or more than max clients |
| 344 | limit: ${apache:server:mpm:prefork:max_clients} |