Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <VirtualHost *:80>
- ServerAdmin jeda00@vse.cz
- DocumentRoot /var/www/html
- CustomLog ${APACHE_LOG_DIR}/access.log combined
- RewriteEngine on
- RewriteCond %{SERVER_NAME} =bis037.vse.cz
- RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
- </VirtualHost>
- <VirtualHost *:443>
- ServerAdmin jeda00@vse.cz
- DocumentRoot /var/www/html
- ErrorLog ${APACHE_LOG_DIR}/error.log
- CustomLog ${APACHE_LOG_DIR}/access.log combined
- ServerName bis037.vse.cz
- SSLCertificateFile /etc/letsencrypt/live/bis037.vse.cz/fullchain.pem
- SSLCertificateKeyFile /etc/letsencrypt/live/bis037.vse.cz/privkey.pem
- SSLEngine on
- SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2
- SSLHonorCipherOrder off
- SSLSessionTickets off
- SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
- SSLHonorCipherOrder on
- SSLCompression off
- SSLOptions +StrictRequire
- LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" vhost_combined
- LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
- </VirtualHost>
- SSLUseStapling On
- SSLStaplingCache "shmcb:logs/ssl_stapling(32768)"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement