|
Lines 1-25
Link Here
|
| 1 |
# Koha instance __KOHASITE__ Apache config. |
1 |
# Koha instance __KOHASITE__ Apache config. |
| 2 |
|
2 |
|
| 3 |
<IfDefine DisabledOption> #https |
3 |
# redirect http to https |
| 4 |
<VirtualHost *:80> |
4 |
#<VirtualHost *:80> #nohttps |
| 5 |
RewriteEngine On |
5 |
# RewriteEngine On #nohttps |
| 6 |
RewriteCond %{HTTPS} !=on |
6 |
# RewriteCond %{HTTPS} !=on #nohttps |
| 7 |
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] |
7 |
# RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] #nohttps |
| 8 |
</VirtualHost> |
8 |
#</VirtualHost> #nohttps |
| 9 |
</IfDefine> #https |
|
|
| 10 |
|
9 |
|
| 11 |
# OPAC |
10 |
# OPAC |
| 12 |
<VirtualHost *:80> #https |
11 |
<VirtualHost *:80> #https |
| 13 |
<IfDefine DisabledOption> #https |
12 |
# SSLEngine on |
| 14 |
SSLEngine on |
13 |
# SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 |
| 15 |
SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 |
14 |
# SSLCompression off |
| 16 |
SSLCompression off |
15 |
# SSLHonorCipherOrder on |
| 17 |
SSLHonorCipherOrder on |
16 |
# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA- |
| 18 |
SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-AES128-SHA256:ECDHE-RSA-AES256-SHA" |
17 |
# SSLCertificateKeyFile /etc/letsencrypt/live/__OPACSERVER__/privkey.pem |
| 19 |
SSLCertificateKeyFile /etc/letsencrypt/live/__OPACSERVER__/privkey.pem |
18 |
# SSLCertificateFile /etc/letsencrypt/live/__OPACSERVER__/cert.pem |
| 20 |
SSLCertificateFile /etc/letsencrypt/live/__OPACSERVER__/cert.pem |
19 |
# SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem |
| 21 |
SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem |
|
|
| 22 |
</IfDefine> #https |
| 23 |
|
20 |
|
| 24 |
<IfVersion >= 2.4> |
21 |
<IfVersion >= 2.4> |
| 25 |
Define instance "__KOHASITE__" |
22 |
Define instance "__KOHASITE__" |
|
Lines 42-57
Link Here
|
| 42 |
|
39 |
|
| 43 |
# Intranet |
40 |
# Intranet |
| 44 |
<VirtualHost *:80> #https |
41 |
<VirtualHost *:80> #https |
| 45 |
<IfDefine DisabledOption> #https |
42 |
# SSLEngine on |
| 46 |
SSLEngine on |
43 |
# SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 |
| 47 |
SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1 |
44 |
# SSLCompression off |
| 48 |
SSLCompression off |
45 |
# SSLHonorCipherOrder on |
| 49 |
SSLHonorCipherOrder on |
46 |
# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES |
| 50 |
SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA" |
47 |
# SSLCertificateKeyFile /etc/letsencrypt/live/__OPACSERVER__/privkey.pem |
| 51 |
SSLCertificateKeyFile /etc/letsencrypt/live/__OPACSERVER__/privkey.pem |
48 |
# SSLCertificateFile /etc/letsencrypt/live/__OPACSERVER__/cert.pem |
| 52 |
SSLCertificateFile /etc/letsencrypt/live/__OPACSERVER__/cert.pem |
49 |
# SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem |
| 53 |
SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem |
50 |
|
| 54 |
</IfDefine> #https |
|
|
| 55 |
<IfVersion >= 2.4> |
51 |
<IfVersion >= 2.4> |
| 56 |
Define instance "__KOHASITE__" |
52 |
Define instance "__KOHASITE__" |
| 57 |
</IfVersion> |
53 |
</IfVersion> |
| 58 |
- |
|
|