nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-06-03 10:50:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Changes Apache conf files to use new mod_authz_host syntax instead of Allow/Deny

Browse Source 
Resolves Issue https://github.com/freedombox/Plinth/issues/171
"Update Apache auth config directives"
This commit is contained in:
Sean Alexandre 2015-09-29 19:28:50 -04:00
parent 45fd4f2a53
commit 1f183bf997
2 changed files with 26 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
data/etc/apache2/conf-available/jwchat-plinth.conf
View File

@ -8,5 +8,5 @@ Alias /jwchat /usr/share/jwchat/www
ProxyPass /http-bind/ http://localhost:5280/http-bind/
ProxyPassReverse /http-bind/ http://localhost:5280/http-bind/
<Proxy http://localhost:5280/http-bind/*>
Allow from all
Require all granted
</Proxy>

35
data/etc/apache2/sites-available/plinth.conf
View File

@ -13,14 +13,29 @@
RequestHeader set X-Forwarded-Proto 'https' env=HTTPS
## Allow traffic only from private networks
Order Deny,Allow
Deny from All
Allow from 127.0.0.0/8 # IPv4 local addresses
Allow from 169.254.0.0/16 # IPv4 link local addresses
Allow from 10.0.0.0/8 # IPv4 class A private addresses
Allow from 172.16.0.0/12 # IPv4 class B private addresses
Allow from 192.168.0.0/16 # IPv4 class C private addresses
Allow from ::1 # IPv6 local address
Allow from fe80::/10 # IPv6 link local addresses
Allow from fc00::/7 # IPv6 private addresses
<RequireAny>
## IPv4 local addresses
Require ip 127.0.0.0/8
## IPv4 link local addresses
Require ip 169.254.0.0/16
## IPv4 class A private addresses
Require ip 10.0.0.0/8
## IPv4 class B private addresses
Require ip 172.16.0.0/12
## IPv4 class C private addresses
Require ip 192.168.0.0/16
## IPv6 local address
Require ip ::1
## IPv6 link local addresses
Require ip fe80::/10
## IPv6 private addresses
Require ip fc00::/7
</RequireAny>
</Location>