User Tools

Site Tools


configurations:apache

Apache

Simple dynamic content serving, without needing PHP etc.

<VirtualHost *:80>
    #ServerName www.example.com
    #ServerAdmin webmaster@localhost
    DocumentRoot /var/www
    <Directory "/var/www">
        Options +ExecCGI
        AddHandler cgi-script .sh
    </Directory>
    #ErrorLog ${APACHE_LOG_DIR}/error.log
    #CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

#!/bin/bash
echo "Content-type: text/plain"
echo ""
echo "Hello world!"
exit 0

#!/bin/bash
echo "Content-type: text/html"
#echo "Refresh: 10"
echo ""
echo "<title>Mail Queue</title><pre>"
date
echo ""
/usr/bin/mailq
echo "</pre><a href='?'>Reload</a>"
exit 0

SSL

With the following, I scored an A on ssllabs 8th Dec. 2015

SSLEngine on

SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"

SSLCertificateKeyFile /etc/letsencrypt/live/domain.tld/privkey.pem
SSLCertificateFile /etc/letsencrypt/live/domain.tld/cert.pem
SSLCertificateChainFile /etc/letsencrypt/live/domain.tld/chain.pem

Source: https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy

Crontab

just a suggestion to myself

MAILTO="[email protected]"
45 9 23 */2 * echo Hello
configurations/apache.txt · Last modified: 2020/01/30 14:46 by mathias