ci(nix): Startup/configure apache for renegotiate test under nix #4592
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,254 @@ | ||
| # Consolidated apache2.conf, mods-enabled/* and conf-enabled/*. | ||
| ServerRoot ${APACHE_SERVER_ROOT} | ||
| DefaultRuntimeDir ${APACHE_RUN_DIR} | ||
| PidFile ${APACHE_PID_FILE} | ||
| Timeout 60 | ||
| KeepAlive On | ||
| MaxKeepAliveRequests 100 | ||
| KeepAliveTimeout 5 | ||
| HostnameLookups Off | ||
| ErrorLog ${APACHE_LOG_DIR}/error.log | ||
| LogLevel info | ||
|
|
||
| # Inline load module | ||
| LoadModule access_compat_module ${APACHE_NIX_STORE}/modules/mod_access_compat.so | ||
| LoadModule alias_module ${APACHE_NIX_STORE}/modules/mod_alias.so | ||
| LoadModule auth_basic_module ${APACHE_NIX_STORE}/modules/mod_auth_basic.so | ||
| LoadModule authn_core_module ${APACHE_NIX_STORE}/modules/mod_authn_core.so | ||
| LoadModule authn_file_module ${APACHE_NIX_STORE}/modules/mod_authn_file.so | ||
| LoadModule authz_core_module ${APACHE_NIX_STORE}/modules/mod_authz_core.so | ||
| LoadModule authz_host_module ${APACHE_NIX_STORE}/modules/mod_authz_host.so | ||
| LoadModule authz_user_module ${APACHE_NIX_STORE}/modules/mod_authz_user.so | ||
| LoadModule autoindex_module ${APACHE_NIX_STORE}/modules/mod_autoindex.so | ||
| LoadModule dir_module ${APACHE_NIX_STORE}/modules/mod_dir.so | ||
| LoadModule deflate_module ${APACHE_NIX_STORE}/modules/mod_deflate.so | ||
| LoadModule env_module ${APACHE_NIX_STORE}/modules/mod_env.so | ||
| LoadModule filter_module ${APACHE_NIX_STORE}/modules/mod_filter.so | ||
| LoadModule log_config_module ${APACHE_NIX_STORE}/modules/mod_log_config.so | ||
| LoadModule mime_module ${APACHE_NIX_STORE}/modules/mod_mime.so | ||
| LoadModule mpm_event_module ${APACHE_NIX_STORE}/modules/mod_mpm_event.so | ||
| LoadModule reqtimeout_module ${APACHE_NIX_STORE}/modules/mod_reqtimeout.so | ||
| LoadModule rewrite_module ${APACHE_NIX_STORE}/modules/mod_rewrite.so | ||
| LoadModule setenvif_module ${APACHE_NIX_STORE}/modules/mod_setenvif.so | ||
| LoadModule socache_shmcb_module ${APACHE_NIX_STORE}/modules/mod_socache_shmcb.so | ||
| LoadModule ssl_module ${APACHE_NIX_STORE}/modules/mod_ssl.so | ||
| LoadModule status_module ${APACHE_NIX_STORE}/modules/mod_status.so | ||
| LoadModule unixd_module ${APACHE_NIX_STORE}/modules/mod_unixd.so | ||
|
|
||
| # Include list of ports to listen on | ||
| Include conf/ports.conf | ||
|
|
||
| <IfModule unixd_module> | ||
| User ${APACHE_RUN_USER} | ||
| Group ${APACHE_RUN_GROUP} | ||
| </IfModule> | ||
|
|
||
| DocumentRoot ${APACHE_SERVER_ROOT}/www/html | ||
| <Directory /> | ||
| Options FollowSymLinks | ||
| AllowOverride None | ||
| Require all denied | ||
| </Directory> | ||
|
|
||
| <Directory ${APACHE_SERVER_ROOT}/www/html> | ||
| Options Indexes FollowSymLinks | ||
| AllowOverride None | ||
| Require all granted | ||
| </Directory> | ||
|
|
||
| AccessFileName .htaccess | ||
|
|
||
| LogFormat "%v:%p %h %l %u %t \"%r\" %>s \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined | ||
| LogFormat "%h %l %u %t \"%r\" %>s \"%{Referer}i\" \"%{User-Agent}i\"" combined | ||
| LogFormat "%h %l %u %t \"%r\" %>s " common | ||
| LogFormat "%{Referer}i -> %U" referer | ||
| LogFormat "%{User-agent}i" agent | ||
| CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined | ||
|
|
||
| # Include the virtual host configurations: | ||
| IncludeOptional sites-enabled/*.conf | ||
|
|
||
| # inline module configs | ||
| <IfModule mod_mime.c> | ||
| TypesConfig ${APACHE_NIX_STORE}/conf/mime.types | ||
| AddType application/x-compress .Z | ||
| AddType application/x-gzip .gz .tgz | ||
| AddType application/x-bzip2 .bz2 | ||
| AddLanguage am .amh | ||
| AddLanguage ar .ara | ||
lrstewart marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| AddLanguage be .be | ||
| AddLanguage bg .bg | ||
| AddLanguage bn .bn | ||
| AddLanguage br .br | ||
| AddLanguage bs .bs | ||
| AddLanguage ca .ca | ||
| AddLanguage cs .cz .cs | ||
| AddLanguage cy .cy | ||
| AddLanguage da .da | ||
| AddLanguage da .dk | ||
| AddLanguage de .de | ||
| AddLanguage dz .dz | ||
| AddLanguage el .el | ||
| AddLanguage en .en | ||
| AddLanguage eo .eo | ||
| # es is ecmascript in /etc/mime.types | ||
| RemoveType es | ||
| AddLanguage es .es | ||
| AddLanguage et .et | ||
| AddLanguage eu .eu | ||
| AddLanguage fa .fa | ||
| AddLanguage fi .fi | ||
| AddLanguage fr .fr | ||
| AddLanguage ga .ga | ||
| AddLanguage gl .glg | ||
| AddLanguage gu .gu | ||
| AddLanguage he .he | ||
| AddLanguage hi .hi | ||
| AddLanguage hr .hr | ||
| AddLanguage hu .hu | ||
| AddLanguage hy .hy | ||
| AddLanguage id .id | ||
| AddLanguage is .is | ||
| AddLanguage it .it | ||
| AddLanguage ja .ja | ||
| AddLanguage ka .ka | ||
| AddLanguage kk .kk | ||
| AddLanguage km .km | ||
| AddLanguage kn .kn | ||
| AddLanguage ko .ko | ||
| AddLanguage ku .ku | ||
| AddLanguage lo .lo | ||
| AddLanguage lt .lt | ||
| AddLanguage ltz .ltz | ||
| AddLanguage lv .lv | ||
| AddLanguage mg .mg | ||
| AddLanguage mk .mk | ||
| AddLanguage ml .ml | ||
| AddLanguage mr .mr | ||
| AddLanguage ms .msa | ||
| AddLanguage nb .nob | ||
| AddLanguage ne .ne | ||
| AddLanguage nl .nl | ||
| AddLanguage nn .nn | ||
| AddLanguage no .no | ||
| AddLanguage pa .pa | ||
| AddLanguage pl .po | ||
| AddLanguage pt-BR .pt-br | ||
| AddLanguage pt .pt | ||
| AddLanguage ro .ro | ||
| AddLanguage ru .ru | ||
| AddLanguage sa .sa | ||
| AddLanguage se .se | ||
| AddLanguage si .si | ||
| AddLanguage sk .sk | ||
| AddLanguage sl .sl | ||
| AddLanguage sq .sq | ||
| AddLanguage sr .sr | ||
| AddLanguage sv .sv | ||
| AddLanguage ta .ta | ||
| AddLanguage te .te | ||
| AddLanguage th .th | ||
| AddLanguage tl .tl | ||
| RemoveType tr | ||
| # tr is troff in /etc/mime.types | ||
| AddLanguage tr .tr | ||
| AddLanguage uk .uk | ||
| AddLanguage ur .ur | ||
| AddLanguage vi .vi | ||
| AddLanguage wo .wo | ||
| AddLanguage xh .xh | ||
| AddLanguage zh-CN .zh-cn | ||
| AddLanguage zh-TW .zh-tw | ||
| AddCharset us-ascii .ascii .us-ascii | ||
| AddCharset ISO-8859-1 .iso8859-1 .latin1 | ||
| AddCharset ISO-8859-2 .iso8859-2 .latin2 .cen | ||
| AddCharset ISO-8859-3 .iso8859-3 .latin3 | ||
| AddCharset ISO-8859-4 .iso8859-4 .latin4 | ||
| AddCharset ISO-8859-5 .iso8859-5 .cyr .iso-ru | ||
| AddCharset ISO-8859-6 .iso8859-6 .arb .arabic | ||
| AddCharset ISO-8859-7 .iso8859-7 .grk .greek | ||
| AddCharset ISO-8859-8 .iso8859-8 .heb .hebrew | ||
|
There was a problem hiding this comment. I have no idea what most of these character sets are, but since we now only support english (and spanish?), why include the obviously non-english ones? There was a problem hiding this comment. Trimmed it down some more. |
||
| AddCharset ISO-8859-9 .iso8859-9 .latin5 .trk | ||
| AddCharset ISO-8859-10 .iso8859-10 .latin6 | ||
| AddCharset ISO-8859-13 .iso8859-13 | ||
| AddCharset ISO-8859-14 .iso8859-14 .latin8 | ||
| AddCharset ISO-8859-15 .iso8859-15 .latin9 | ||
| AddCharset ISO-8859-16 .iso8859-16 .latin10 | ||
| AddCharset ISO-2022-JP .iso2022-jp .jis | ||
| AddCharset ISO-2022-KR .iso2022-kr .kis | ||
| AddCharset ISO-2022-CN .iso2022-cn .cis | ||
| AddCharset Big5 .Big5 .big5 .b5 | ||
| AddCharset cn-Big5 .cn-big5 | ||
| # For russian, more than one charset is used (depends on client, mostly): | ||
| AddCharset WINDOWS-1251 .cp-1251 .win-1251 | ||
| AddCharset CP866 .cp866 | ||
| AddCharset KOI8 .koi8 | ||
| AddCharset KOI8-E .koi8-e | ||
| AddCharset KOI8-r .koi8-r .koi8-ru | ||
| AddCharset KOI8-U .koi8-u | ||
| AddCharset KOI8-ru .koi8-uk .ua | ||
| AddCharset ISO-10646-UCS-2 .ucs2 | ||
| AddCharset ISO-10646-UCS-4 .ucs4 | ||
| AddCharset UTF-7 .utf7 | ||
| AddCharset UTF-8 .utf8 | ||
| AddCharset UTF-16 .utf16 | ||
| AddCharset UTF-16BE .utf16be | ||
| AddCharset UTF-16LE .utf16le | ||
| AddCharset UTF-32 .utf32 | ||
| AddCharset UTF-32BE .utf32be | ||
| AddCharset UTF-32LE .utf32le | ||
| AddCharset euc-cn .euc-cn | ||
| AddCharset euc-gb .euc-gb | ||
| AddCharset euc-jp .euc-jp | ||
| AddCharset euc-kr .euc-kr | ||
| #Not sure how euc-tw got in - IANA doesn't list it??? | ||
| AddCharset EUC-TW .euc-tw | ||
| AddCharset gb2312 .gb2312 .gb | ||
| AddCharset iso-10646-ucs-2 .ucs-2 .iso-10646-ucs-2 | ||
| AddCharset iso-10646-ucs-4 .ucs-4 .iso-10646-ucs-4 | ||
| AddCharset shift_jis .shift_jis .sjis | ||
| AddCharset BRF .brf | ||
|
|
||
| AddHandler type-map var | ||
| AddType text/html .shtml | ||
| <IfModule mod_include.c> | ||
| AddOutputFilter INCLUDES .shtml | ||
| </IfModule> | ||
|
|
||
| </IfModule> | ||
|
|
||
| <IfModule mod_ssl.c> | ||
| SSLRandomSeed startup builtin | ||
| SSLRandomSeed startup file:/dev/urandom 512 | ||
| SSLRandomSeed connect builtin | ||
| SSLRandomSeed connect file:/dev/urandom 512 | ||
| AddType application/x-x509-ca-cert .crt | ||
| AddType application/x-pkcs7-crl .crl | ||
| SSLSessionCache shmcb:${APACHE_RUN_DIR}/ssl_scache(512000) | ||
| SSLSessionCacheTimeout 300 | ||
| SSLCipherSuite HIGH:!aNULL | ||
| SSLProtocol all -SSLv3 | ||
|
Comment on lines
+121
to
+122
There was a problem hiding this comment. Is this configuration needed? How does it interact with the site-specific configuration? s2n-tls/codebuild/bin/apache2/sites-enabled/renegotiate.conf Lines 33 to 37 in aacb0ab There was a problem hiding this comment. it should only apply to the |
||
| </IfModule> | ||
|
|
||
| <IfModule mod_negotiation.c> | ||
| LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv tr zh-CN zh-TW | ||
| ForceLanguagePriority Prefer Fallback | ||
| </IfModule> | ||
| <IfModule mpm_event_module> | ||
| StartServers 2 | ||
| MinSpareThreads 25 | ||
| MaxSpareThreads 75 | ||
| ThreadLimit 64 | ||
| ThreadsPerChild 25 | ||
| MaxRequestWorkers 150 | ||
| MaxConnectionsPerChild 0 | ||
| </IfModule> | ||
| <IfModule reqtimeout_module> | ||
| RequestReadTimeout header=20-40,minrate=500 | ||
| RequestReadTimeout body=10,minrate=500 | ||
| </IfModule> | ||
|
|
||
| # === end module configs | ||
|
|
||
|
|
||
| # vim: syntax=apache ts=4 sw=4 sts=4 sr noet | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.