Administrace komentářů

/etc/apache2/sites-enabled/redmine.conf

<VirtualHost *:80>
  ServerAdmin admin@devaine.cz
  ServerName bt1-ph.corp.devaine.cz
  ServerAlias helpdesk helpdesk.corp.devaine.cz helpdesk.corp.devaine.eu

  VirtualDocumentRoot /var/www/redmine/public

  LogLevel warn
  ErrorLog /var/log/apache2/redmine-error.log
  CustomLog /var/log/apache2/redmine-access.log combined

     <Location /redmine>
            RailsEnv production
            RackBaseURI /redmine
            Options -MultiViews
     </Location>

  <IfModule mod_rewrite.c>
    <IfModule mod_ssl.c>
        RewriteEngine on
        RewriteCond %{HTTPS} !^on$ [NC]
        RewriteRule . https://%{HTTP_HOST}%{REQUEST_URI}  [L]
    </IfModule>
  </IfModule>


</VirtualHost>



<VirtualHost *:443>
  ServerAdmin admin@devaine.cz
  ServerName bt1-ph.corp.devaine.cz
  ServerAlias helpdesk helpdesk.corp.devaine.cz helpdesk.corp.devaine.eu
   

  VirtualDocumentRoot /var/www/redmine/public

  Include /etc/apache2/cert.conf

  LogLevel warn
  ErrorLog /var/log/apache2/redmine-error.log
  CustomLog /var/log/apache2/redmine-access.log combined


      <Location /redmine>
              RailsEnv production
              RackBaseURI /redmine
              Options -MultiViews
      </Location>

   # zpusobuje castecnou nekompatibilitu s mode_rewrite a par dalsimi moduly apache (neco nemusi fungovat)
   PassengerHighPerformance on

   # dalsi tuning :
   PassengerMaxPoolSize 15
   PassengerMinInstances 3

   # lze nastavit jen u verze enterprise passengeru :
   #PassengerMaxInstances 30
  
   # cas v s, po kterem se app po necinnosti (neprijde zadny web pozadavek) ukonci - spawne, 0 = neukoncovat app
   PassengerPoolIdleTime 0
</VirtualHost>

/etc/apache2/cert.conf

SSLEngine On

# Here, I am allowing only "high" and "medium" security key lengths.
#SSLCipherSuite HIGH:MEDIUM

SSLHonorCipherOrder on

# Prefer PFS, allow TLS, avoid SSL, for IE8 on XP still allow 3DES
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+AESGCM EECDH EDH+AESGCM EDH+aRSA HIGH !MEDIUM !LOW !aNULL !eNULL !LOW !RC4 !MD5 !EXP !PSK !SRP !DSS"

# Here I am allowing SSLv3 and TLSv1, I am NOT allowing the old SSLv2.
SSLProtocol all -SSLv2 -SSLv3

# Prevent CRIME/BREACH compression attacks
SSLCompression Off

#   Server Certificate:
SSLCertificateFile /etc/apache2/ssl/bt1-ph.corp.devaine.cz.crt

#   Server Private Key:
SSLCertificateKeyFile /etc/apache2/ssl/bt1-ph.corp.devaine.cz.pem

#   Server Certificate Chain:
SSLCertificateChainFile /etc/apache2/ssl/DevaineRootCA-G2.crt

#   Certificate Authority (CA):
SSLCACertificateFile /etc/apache2/ssl/DevaineRootCA-G2.crt