- up to 2.4.59

[packages/apache.git] / apache-mod_proxy.conf

diff --git a/apache-mod_proxy.conf b/apache-mod_proxy.conf
index 69c212b8d437a5bc7d56bf717e0d74c7e06515db..00f9a57347bbff744e3495f670a042925b54757e 100644 (file)
--- a/apache-mod_proxy.conf
+++ b/apache-mod_proxy.conf
@@ -1,19 +1,46 @@
-LoadModule proxy_module         lib/apache/mod_proxy.so
-LoadModule proxy_connect_module lib/apache/mod_proxy_connect.so
-LoadModule proxy_ftp_module     lib/apache/mod_proxy_ftp.so
-LoadModule proxy_http_module    lib/apache/mod_proxy_http.so
+LoadModule proxy_module                         modules/mod_proxy.so
+
+# FIXME: enable or disable these by default?
+# I'd enable if the config is secure. but i'm not sure
+#LoadModule lbmethod_bybusyness_module modules/mod_lbmethod_bybusyness.so
+#LoadModule lbmethod_byrequests_module modules/mod_lbmethod_byrequests.so
+#LoadModule lbmethod_bytraffic_module  modules/mod_lbmethod_bytraffic.so
+#LoadModule lbmethod_heartbeat_module  modules/mod_lbmethod_heartbeat.so
+#LoadModule proxy_balancer_module      modules/mod_proxy_balancer.so
+#LoadModule proxy_ajp_module           modules/mod_proxy_ajp.so
+#LoadModule proxy_connect_module               modules/mod_proxy_connect.so
+#LoadModule proxy_express_module               modules/mod_proxy_express.so
+#LoadModule proxy_fcgi_module          modules/mod_proxy_fcgi.so
+#LoadModule proxy_fdpass_module                modules/mod_proxy_fdpass.so
+#LoadModule proxy_ftp_module           modules/mod_proxy_ftp.so
+#LoadModule proxy_http_module          modules/mod_proxy_http.so
+#LoadModule proxy_scgi_module          modules/mod_proxy_scgi.so
+#LoadModule proxy_html_module          modules/mod_proxy_html.so
+#LoadModule proxy_wstunnel_module              modules/mod_proxy_wstunnel.so
 
-#
 # Proxy Server directives. Uncomment the following lines to
 # enable the proxy server:
 #
-<IfModule mod_proxy.c>
+<IfModule proxy_module>
 ProxyRequests On
 #
-#<Proxy *>
-#    Order deny,allow
-#    Deny from all
-#    Allow from .your-domain.com
+#
+# This prevents spammers from using apache as a relay by posting to
+# http://victim:25/ and sending raw data.
+#
+<Proxy *>
+       Require all denied
+#      Require host .your-domain.com
+       <IfModule mod_access_compat.c>
+               Order deny,allow
+               Deny from all
+#              Allow from .your-domain.com
+       </IfModule>
+</Proxy>
+
+# enable local fcgi proxy request, e.x for php-fpm
+#<Proxy fcgi://127.0.0.1:*>
+#      Require all granted
 #</Proxy>
 
 #
@@ -23,20 +50,6 @@ ProxyRequests On
 #
 ProxyVia On
 
-#
-# To enable the cache as well, edit and uncomment the following lines:
-# (no cacheing without CacheRoot)
-#
-<IfModule mod_cache.c>
-CacheRoot "/var/cache/apache"
-CacheSize 5
-CacheGcInterval 4
-CacheMaxExpire 24
-CacheLastModifiedFactor 0.1
-CacheDefaultExpire 1
-#NoCache a-domain.com another-domain.edu joes.garage-sale.com
-</IfModule>
+# To enable the cache as well, see mod_cache.conf
 
 </IfModule>
-# End of proxy directives.
-