Changes Apache conf files to use new mod_authz_host syntax instead of Allow/Deny

Resolves Issue https://github.com/freedombox/Plinth/issues/171
"Update Apache auth config directives"
This commit is contained in:
Sean Alexandre 2015-09-29 19:28:50 -04:00
parent 45fd4f2a53
commit 1f183bf997
2 changed files with 26 additions and 11 deletions

View File

@ -8,5 +8,5 @@ Alias /jwchat /usr/share/jwchat/www
ProxyPass /http-bind/ http://localhost:5280/http-bind/ ProxyPass /http-bind/ http://localhost:5280/http-bind/
ProxyPassReverse /http-bind/ http://localhost:5280/http-bind/ ProxyPassReverse /http-bind/ http://localhost:5280/http-bind/
<Proxy http://localhost:5280/http-bind/*> <Proxy http://localhost:5280/http-bind/*>
Allow from all Require all granted
</Proxy> </Proxy>

View File

@ -13,14 +13,29 @@
RequestHeader set X-Forwarded-Proto 'https' env=HTTPS RequestHeader set X-Forwarded-Proto 'https' env=HTTPS
## Allow traffic only from private networks ## Allow traffic only from private networks
Order Deny,Allow <RequireAny>
Deny from All ## IPv4 local addresses
Allow from 127.0.0.0/8 # IPv4 local addresses Require ip 127.0.0.0/8
Allow from 169.254.0.0/16 # IPv4 link local addresses
Allow from 10.0.0.0/8 # IPv4 class A private addresses ## IPv4 link local addresses
Allow from 172.16.0.0/12 # IPv4 class B private addresses Require ip 169.254.0.0/16
Allow from 192.168.0.0/16 # IPv4 class C private addresses
Allow from ::1 # IPv6 local address ## IPv4 class A private addresses
Allow from fe80::/10 # IPv6 link local addresses Require ip 10.0.0.0/8
Allow from fc00::/7 # IPv6 private addresses
## IPv4 class B private addresses
Require ip 172.16.0.0/12
## IPv4 class C private addresses
Require ip 192.168.0.0/16
## IPv6 local address
Require ip ::1
## IPv6 link local addresses
Require ip fe80::/10
## IPv6 private addresses
Require ip fc00::/7
</RequireAny>
</Location> </Location>