blob: 67896cd34facc6597e8aa639611b3a740f20697f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
#
# Apache reverse proxy configuration for the Nickserver
#
Listen 0.0.0.0:<%= @nickserver_port -%>
<VirtualHost *:<%= @nickserver_port -%>>
ServerName <%= @nickserver_domain %>
ServerAlias <%= @address_domain %>
SSLEngine on
SSLProtocol -all +SSLv3 +TLSv1
SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH
SSLHonorCipherOrder on
SSLCACertificatePath /etc/ssl/certs
SSLCertificateChainFile /etc/ssl/certs/nickserver.pem
SSLCertificateKeyFile /etc/x509/keys/nickserver.key
SSLCertificateFile /etc/x509/certs/nickserver.crt
ProxyPass / http://localhost:<%= @nickserver_local_port %>/
ProxyPreserveHost On # preserve Host header in HTTP request
</VirtualHost>
|
