2018-02-18 21:45:33 +01:00
|
|
|
LoadModule ssl_module modules/mod_ssl.so
|
|
|
|
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
|
|
|
|
|
2020-04-26 18:45:42 +02:00
|
|
|
Listen 8443
|
2018-02-18 21:45:33 +01:00
|
|
|
|
2020-04-26 18:45:42 +02:00
|
|
|
<VirtualHost *:8443>
|
2018-09-28 12:44:57 +02:00
|
|
|
SSLEngine on
|
|
|
|
|
2018-02-18 21:45:33 +01:00
|
|
|
DocumentRoot /usr/share/zabbix/
|
|
|
|
ServerName zabbix
|
|
|
|
DirectoryIndex index.php
|
2018-09-28 12:44:57 +02:00
|
|
|
|
2018-02-18 21:45:33 +01:00
|
|
|
AddType application/x-httpd-php .php .php3 .php4 .php5 .phtml
|
|
|
|
AddType application/x-httpd-php-source .phps
|
|
|
|
|
|
|
|
# Enable/Disable SSL for this virtual host.
|
|
|
|
SSLEngine on
|
|
|
|
|
2018-09-28 12:44:57 +02:00
|
|
|
SSLProtocol all -SSLv2 -SSLv3
|
|
|
|
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
|
|
|
|
SSLHonorCipherOrder on
|
2018-02-18 21:45:33 +01:00
|
|
|
|
|
|
|
SSLCertificateFile /etc/ssl/apache2/ssl.crt
|
|
|
|
SSLCertificateKeyFile /etc/ssl/apache2/ssl.key
|
|
|
|
# SSLCACertificatePath /etc/ssl/apache2/chain/
|
2018-09-28 12:44:57 +02:00
|
|
|
|
|
|
|
# HSTS (mod_headers is required) (15768000 seconds = 6 months)
|
|
|
|
Header always set Strict-Transport-Security "max-age=15768000"
|
|
|
|
|
|
|
|
<Directory "/usr/share/zabbix">
|
|
|
|
Options FollowSymLinks
|
|
|
|
AllowOverride None
|
|
|
|
Require all granted
|
2020-04-27 21:46:25 +02:00
|
|
|
|
|
|
|
<FilesMatch \.(php|phar)$>
|
|
|
|
SetHandler "proxy:unix:/tmp/php-fpm.sock|fcgi://localhost"
|
|
|
|
</FilesMatch>
|
2018-09-28 12:44:57 +02:00
|
|
|
</Directory>
|
|
|
|
|
|
|
|
<Directory "/usr/share/zabbix/conf">
|
|
|
|
Require all denied
|
|
|
|
<files *.php>
|
|
|
|
Order deny,allow
|
|
|
|
Deny from all
|
|
|
|
</files>
|
|
|
|
</Directory>
|
|
|
|
|
|
|
|
<Directory "/usr/share/zabbix/app">
|
|
|
|
Require all denied
|
|
|
|
<files *.php>
|
|
|
|
Order deny,allow
|
|
|
|
Deny from all
|
|
|
|
</files>
|
|
|
|
</Directory>
|
|
|
|
|
|
|
|
<Directory "/usr/share/zabbix/include">
|
|
|
|
Require all denied
|
|
|
|
<files *.php>
|
|
|
|
Order deny,allow
|
|
|
|
Deny from all
|
|
|
|
</files>
|
|
|
|
</Directory>
|
|
|
|
|
|
|
|
<Directory "/usr/share/zabbix/local">
|
|
|
|
Require all denied
|
|
|
|
<files *.php>
|
|
|
|
Order deny,allow
|
|
|
|
Deny from all
|
|
|
|
</files>
|
|
|
|
</Directory>
|
2021-06-07 13:24:08 +02:00
|
|
|
|
|
|
|
<Directory "/usr/share/zabbix/vendor">
|
|
|
|
Require all denied
|
|
|
|
<files *.php>
|
|
|
|
Order deny,allow
|
|
|
|
Deny from all
|
|
|
|
</files>
|
|
|
|
</Directory>
|
2018-02-18 21:45:33 +01:00
|
|
|
</VirtualHost>
|