- rel 3; follow https://wiki.mozilla.org/Security/Server_Side_TLS

[packages/apache.git] / apache-httpd.conf

diff --git a/apache-httpd.conf b/apache-httpd.conf
index 6c7b35cfdf38630efc43766de1aff9d944cf1dec..eaec1ea171a99b537610535d5b942170bc21d310 100644 (file)
--- a/apache-httpd.conf
+++ b/apache-httpd.conf
@@ -1,5 +1,3 @@
-# $Id$
-#
 # This is the main Apache HTTP server configuration file.
 # It contains the configuration directives that give the server its instructions.
 #
@@ -11,10 +9,12 @@
 
 ServerRoot "/etc/httpd"
 
+LoadModule unixd_module   modules/mod_unixd.so
+
+
 # User/Group: The name (or #number) of the user/group to run httpd as.
 # It is usually good practice to create a dedicated user and group for
 # running httpd, as with most system services.
-LoadModule unixd_module   modules/mod_unixd.so
 User http
 Group http
 
@@ -53,7 +53,7 @@ ErrorLog logs/error_log
 # alert, emerg.
 LogLevel warn
 
-Timeout 300
+Timeout 60
 KeepAlive On
 MaxKeepAliveRequests 100
 KeepAliveTimeout 5
@@ -72,6 +72,21 @@ IncludeOptional conf.d/*.conf
 # Include webapps config
 IncludeOptional webapps.d/*.conf
 
+#
+# Set a timeout for how long the client may take to send the request header
+# and body.
+# The default for the headers is header=20-40,MinRate=500, which means wait
+# for the first byte of headers for 20 seconds. If some data arrives,
+# increase the timeout corresponding to a data rate of 500 bytes/s, but not
+# above 40 seconds.
+# The default for the request body is body=20,MinRate=500, which is the same
+# but has no upper limit for the timeout.
+# To disable, set to header=0 body=0
+#
+<IfModule reqtimeout_module>
+  RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500
+</IfModule>
+
 <IfModule alias_module>
        # ScriptAlias: This controls which directories contain server scripts.
        # ScriptAliases are essentially the same as Aliases, except that
@@ -88,6 +103,10 @@ IncludeOptional webapps.d/*.conf
                <IfModule mod_authz_host.c>
                        Require all granted
                </IfModule>
+               <IfModule mod_access_compat.c>
+                       Order allow,deny
+                       Allow from all
+               </IfModule>
        </Directory>
 </IfModule>