karim Hamza
ba2368907d
remove ng stuff ( #255 )
* remove -ng stuff
* remove ng from template
* remove -ng from readme
* manage listen directive with disabled vhosts
* add json filter
* remove hardcoded path
il y a 5 ans
karim Hamza
9662e8b4ab
Feature (rhel7/httpd 2.4) : hardening apache and code refactoring ( #251 )
* Feature (rhel7/httpd 2.4) : hardening apache and code refactoring
* remove hard returns
* Add default Listen 80 in httpd.conf
In case there no vhosts defined in pillar httpd will listen on port 80.
Without this default it will not start
* empty file autoindex.conf instead of deleting it
* explicit hardening items and references from CIS
* add #3.5 hardening rule
* explain CIS recommendations categories
* add dependencies before start service
* add recommendation #7.1 Install mod_ssl
* link in readme to hardening doc
il y a 5 ans
Niels Abspoel
dccfdf7962
add server_status state ( #250 )
Add server_status state to create a default server_status handler for localhost
il y a 6 ans
Javier Bértoli
06b1606f33
Add OCSP Stapling configuration capabilities to Debian
Document Stapling options in pillar.example
il y a 6 ans
Andreas Thienemann
79673343a5
No automatic listener for port *
The formula currently adds a Listen directive for the port '*' if
any configured vhost is configured to listen on :* which does not
work and instead prevents apache from starting.
It is possible to prevent this by setting the
exclude_listen_directive pillar to True but this is a manual
workaround.
Instead, this commit excludes :* Listeners automatically.
il y a 6 ans
Andreas Thienemann
4ed6e228f5
Improve document root fix for Red Hat ( #241 )
The docroot fix from PR#240 worked fine for default servers.
But as soon as one uses vhosts this broke as the vhosts were
created under the docroot in /var/www/html rather than the better
/var/www.
Fix this by differentiating between docroot and wwwdir.
Further allow to override both in Red Hat-style configs.
The override allows to reuse this formula for the softwarecollections
rpms.
il y a 6 ans
ardin
7bac5c7c30
mod_mpm for RedHat ( #160 )
il y a 6 ans
Arthur Lutz
a5debf58b3
207 configure ssl ( #218 )
* [ssl] [debian] manage ssl.conf with pillars
* [apache] make cyphersuite a list
* [apache/ssl] switch back to strings, lists merge is not good
il y a 6 ans
Javier Bértoli
fcb434e248
Added "Managed by Salt..." headers in template and made them unifom across the formula
il y a 6 ans
Alexander Weidinger
d3110f93f6
Manage TLS defaults
il y a 7 ans
Louis Haddrell
7e96ce8d3e
Replaced Apache 2.4 syntax in RedHat Apache 2.2 config ( fixes #115 )
il y a 7 ans
Niels Abspoel
adea6485ea
update suse config file with latest changes
il y a 7 ans
Alexander Weidinger
5fa91b7b91
Template security.conf in Debian
Including optional per-OS templates
(Solves https://github.com/saltstack-formulas/apache-formula/issues/153 )
il y a 7 ans
Javier Bértoli
475fb8347e
Add default user/group attributes as required by some states
il y a 7 ans
Bernhard M. Wiedemann
cc95c7579e
SUSE: typo fixes
il y a 7 ans
Bernhard M. Wiedemann
57690acd77
SUSE: use different global.conf
sysconfig.d/global.conf is re-written by sysconfig on openSUSE
il y a 7 ans
Patrick Chevalley
780bf3158d
Add Reverse Proxy directives, GeoIP, Certificates management, mostly for RedHat
il y a 7 ans
Alexander Weidinger
6e880d0827
FreeBSD: mod_cgi
il y a 8 ans
Alexander Weidinger
e1c55b9475
FreeBSD: apache.mod_proxy_http
il y a 8 ans
Alexander Weidinger
0590e43973
FreeBSD: apache.manage_security
il y a 8 ans
Alexander Weidinger
9f796f0b6a
apache.global for Debian and FreeBSD
il y a 8 ans
Alexander Weidinger
f03df6e2fb
FreeBSD: mod_rewrite
il y a 8 ans
Alexander Weidinger
5dbe687cda
FreeBSD: mod_perl2
il y a 8 ans
Alexander Weidinger
4e12b404a4
FreeBSD: mod_suexec
il y a 8 ans
Alexander Weidinger
bc81c6ab43
FreeBSD: mod_proxy
il y a 8 ans
Alexander Weidinger
9e3645c53c
FreeBSD: made default SSL key configurable
il y a 8 ans
Alexander Weidinger
4d94109534
FreeBSD: set correct env vars
il y a 8 ans
Alexander Weidinger
385a120590
FreeBSD: envvars
il y a 8 ans
Alexander Weidinger
9a1fb054d6
mod_php5: FreeBSD
il y a 8 ans
Alexander Weidinger
5d27226001
FreeBSD: global DocumentRoot
il y a 8 ans
Alexander Weidinger
c7e533d7e5
mod_ssl: FreeBSD support
il y a 8 ans
Alexander Weidinger
a64ee209cb
FreeBSD support
il y a 8 ans
Jeremy T. Bouse
be3215f0cd
Update Debian mpm_prefork.conf to include ServerLimit ( #152 )
If MaxRequestWorkers is greater than 256 than you also need to set the
ServerLimit value which is defaulted to 256 but has a 20000 hard maximum
il y a 8 ans
Rob Ruma
d5337836b2
Adding exclude_listen_directive option ( #151 )
* Adding exclude_listen_directive option
* Updating Debian config
il y a 8 ans
Dex Bleeker
7b7deaeb5b
Add user-defined envvars
il y a 8 ans
abehling
9aca4c35b7
RedHat: Made AddDefaultCharset Directive configurable ( #147 )
* RedHat: Made AddDefaultCharset Directive configurable
* Added description of apache:lookup:default_charset to pillar.example, sane default equals former hardcoded UTF-8
il y a 8 ans
Tibor Gemes
c7e23edf52
Add custom port to RedHat config
il y a 8 ans
Javier Bértoli
2be52db8b8
Add mod_security management
Add gitignore, kitchen-ci files
Add some tests and documentation
il y a 8 ans
Alexander Behling
3232866cc2
Added configurable variables, Fixed bug if vhostdir is something different than default value
il y a 8 ans
Dominik Menzi
d1c3463154
Add support for NameVirtualHost on Debian
il y a 8 ans
Dominik Menzi
16888bd927
Add support for Ubuntu precise
il y a 8 ans
a.genus
4d04d95b02
Manage ports.conf file on Debian
il y a 9 ans
a.genus
ba6679ef66
Remove breaking changes
il y a 9 ans
Rowcliffe Browne
2557d3d1c8
Allow global directives to be added to apache config
il y a 9 ans
a.genus
5d03deb3b5
Remove ports.conf inclusion
il y a 9 ans
Alexander Kozlov
3e650f5c48
Added ability to configure KeepAlive option
Sometimes it's necessary optimization in nginx+apache2 environment
il y a 9 ans
Alexander Kozlov
03d97659d0
Added newlines to recent files
il y a 9 ans
Alexander Kozlov
8f2308b985
Added ability to configure mod_remoteip
il y a 9 ans
Alexander Kozlov
f7940ecdc1
Added ability to replace default vhost with own version
Added example shows 503 code instead of "It works!" page.
il y a 9 ans
root
dc7970955a
Added support for different templates for the config file based on version
il y a 9 ans