Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-04-19 | remove unnecessary new lines | mh | |
2014-04-18 | address puppet 3.x deprecation warnings | mh | |
2014-04-14 | more identation fixing | mh | |
2012-06-08 | fix dynamic scope variables, function access | mh | |
2011-10-08 | introduce a new template style, less duplicated things, more handy options | mh | |
2011-10-08 | migrating a first part over to the new partial style | mh | |
2011-05-18 | we need to set the var also vor http parts | mh | |
2011-05-18 | move header to partials | mh | |
2011-05-17 | this is now in the include file | mh | |
2011-05-17 | migrate authentication to partials | mh | |
2011-05-17 | switching logs over to partials | mh | |
2011-05-17 | improve mod_security rules | mh | |
* handled now by a partial * possibility to add rules that should be removed * possibility to add custom mod_sec options" * use new infrastructure for existing mod_sec tweaks | |||
2010-12-12 | enable HTS everywhere | mh | |
2010-12-06 | add STS header for enforced SSL sites | mh | |
* http://en.wikipedia.org/wiki/Strict_Transport_Security This will tell browsers to interact with that site only per HTTPS. | |||
2010-10-25 | improve redirect, so we don't stick on the servername | mh | |
2010-08-11 | introduce logmode feature | mh | |
We are now able to select how apache should log accesses. These modes are: * default: as you would use it * semianonym: no ips are logged for CustomLog, ErrorLog still logs ips * anonym: no ips are logged for CustomLog, ErrorLog is sent to /dev/null * nologs: all logs are sent to /dev/null | |||
2010-01-04 | add $mod_security_relevantonly flag, enabled by default, logs only on ↵ | Jerome Charaoui | |
suspicious requests, set to 'false' to log all requests (as before) | |||
2009-12-23 | introduce config::global for global configs in conf.d and config::include ↵ | Jerome Charaoui | |
for vhost snippets in include.d | |||
2009-12-23 | change OS-specific vhost templates into links, add Debian (though not all ↵ | Jerome Charaoui | |
are tested on Debian) | |||
2009-06-24 | unified mod_sec stuff, turn audit engine off as well | mh | |
2009-06-21 | fixing if then end block | mh | |
2009-06-16 | set mod_sec block as well for static hostings | Marcel Haerry | |
2009-06-13 | introcuded ssl_mode only | mh | |
2009-05-19 | removing double add default charset, adding where it have been missing | Marcel Haerry | |
2009-05-17 | whitespace cleanup | Marcel Haerry | |
2009-04-26 | fixing ServerAdmin stuff | mh | |
ServerAdmin was missing for ssl vhosts ServerAdmin was set if the variable have been set to 'absent' | |||
2009-04-25 | server_admin variable for ServerAdmin line in vhosts | andreas | |
2008-12-06 | fixing ssl_mode decision, still set the directory stuff | mh | |
2008-12-06 | - added default charset possiblity | mh | |
- enabled ssl on all 3 vhost modes | |||
2008-12-05 | ignore absent | mh | |
2008-12-05 | correct decision and made it more logical | mh | |
2008-12-05 | correct test | mh | |
2008-12-05 | fixed option decision, centos static is now link of openbsd, as we can use ↵ | mh | |
the same | |||
2008-12-05 | - add index.shtml to default index if we do includ | mh | |
es, as well add +Includes to the directory options if not yet done - removed the security rewrite as it is already in the defaults.inc! - removed the enforcement of mod_security | |||
2008-12-05 | merged with puzzle | mh | |
2008-12-02 | fix typo | mh | |
2008-11-30 | correct passwd file path | mh | |
2008-11-30 | disallow trace and track on vhosts -> security | mh | |
2008-11-30 | merged with puzzle | mh | |
2008-11-08 | only set directory options if we don't redirect | mh | |
2008-11-08 | fixing some typos | mh | |
2008-11-08 | make vhost template output nicier | mh | |
2008-11-08 | added htpasswd deploy capability | mh | |
2008-11-08 | added options for vhosts | mh | |
2008-11-07 | added additional options | mh | |
2008-11-07 | added template for static hosting | mh | |