SSLUseStapling should not be enabled if using self-generated certs

[packages/apache.git] / apache-mod_proxy.conf

LoadModule proxy_module			 modules/mod_proxy.so

# FIXME: enable or disable these by default?
# I'd enable if the config is secure. but i'm not sure
#LoadModule lbmethod_bybusyness_module	modules/mod_lbmethod_bybusyness.so
#LoadModule lbmethod_byrequests_module	modules/mod_lbmethod_byrequests.so
#LoadModule lbmethod_bytraffic_module	modules/mod_lbmethod_bytraffic.so
#LoadModule lbmethod_heartbeat_module	modules/mod_lbmethod_heartbeat.so
#LoadModule proxy_balancer_module	modules/mod_proxy_balancer.so
#LoadModule proxy_ajp_module		modules/mod_proxy_ajp.so
#LoadModule proxy_connect_module		modules/mod_proxy_connect.so
#LoadModule proxy_express_module		modules/mod_proxy_express.so
#LoadModule proxy_fcgi_module		modules/mod_proxy_fcgi.so
#LoadModule proxy_fdpass_module		modules/mod_proxy_fdpass.so
#LoadModule proxy_ftp_module		modules/mod_proxy_ftp.so
#LoadModule proxy_http_module		modules/mod_proxy_http.so
#LoadModule proxy_scgi_module		modules/mod_proxy_scgi.so
#LoadModule proxy_html_module		modules/mod_proxy_html.so
#LoadModule proxy_wstunnel_module		modules/mod_proxy_wstunnel.so

# Proxy Server directives. Uncomment the following lines to
# enable the proxy server:
#
<IfModule proxy_module>
ProxyRequests On
#
#
# This prevents spammers from using apache as a relay by posting to
# http://victim:25/ and sending raw data.
#
<Proxy *>
	Require all denied
#	Require host .your-domain.com
	<IfModule mod_access_compat.c>
		Order deny,allow
		Deny from all
#		Allow from .your-domain.com
	</IfModule>
</Proxy>

# enable local fcgi proxy request, e.x for php-fpm
#<Proxy fcgi://127.0.0.1:*>
#	Require all granted
#</Proxy>

#
# Enable/disable the handling of HTTP/1.1 "Via:" headers.
# ("Full" adds the server version; "Block" removes all outgoing Via: headers)
# Set to one of: Off | On | Full | Block
#
ProxyVia On

# To enable the cache as well, see mod_cache.conf

</IfModule>