{"type":"doc","content":[{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"outline":{"value":"true"},"style":{"value":"none"}},"macroMetadata":{"macroId":{"value":"8572d294-9d19-4cc8-8a11-ee037cd5a875"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"153cc77e-bb61-4c62-9ffc-7620ce2b71af"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"Installation","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Apache","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"yum install httpd","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Mod SSL, http2, headers","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"yum install mod_ssl mod_headers mod_http2","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"MINIMAL (REQUIRED) APACHE MODULES","type":"text"}]},{"type":"codeBlock","attrs":{"language":"plaintext"},"content":[{"text":"alias_module (shared) - ''Alias'' and ''ScriptAlias'' directives\nauthz_host_module (shared) - ''Allow'' and ''Deny'' directives\nautoindex_module (shared) - Generates directory indexes, automatically\ncore_module (static) - The core Apache module\ndir_module (shared) - ''DirectoryIndex'' directive\nenv_module (shared) - Modifies the environment\nhttp_module (static) - Handles HTTP protocol\nlog_config_module (shared) - Enables logging configuration\nlogio_module (shared) - Enables log writing/reading\nmime_module (shared) - Enables MIME (file type) alteration and interpretation\nmpm_prefork_module (static) - Implements a non-threaded, pre-forking (multiprocess) web server\nnegotiation_module (shared) - Provides for content negotiation (parsing of Headers)\nphp5_module (shared) - Enables PHP5 interpreter\nrewrite_module (shared) - Rule-based (regex) url rewriting engine\nsetenvif_module (shared) - Enables ''BrowserMatch'' and ''SetEnvIf'' directives\nso_module (static) - Enables modules\nstatus_module (shared) - Provides information on server activity and performance\nversion_module (shared) - Allows Version dependent configuration\nvhost_alias_module (shared) - Enable virtual hosts.\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Configuration","type":"text"}]},{"type":"paragraph","content":[{"text":"Apache configuration for PCR-360 is typically done with a Virtual Host and is stored in /etc/httpd/conf.d/pcr360.conf","type":"text"}]},{"type":"paragraph","content":[{"text":"Create the new apache configuration file.","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"cd /etc/httpd/conf.d\nvi pcr360.conf\n","type":"text"}]},{"type":"paragraph","content":[{"text":"This example shows standard configuration for http port 80","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"ServerName pcr360.customeraddress.com\nProtocols h2 h2c http/1.1\n\n## PROTECT FILES ##\n\n Order Allow,Deny\n Deny from all\n\n\n## HEADERS FOR MS EDGE ##\n\n Header Set X-UA-Compatible: IE=Edge\n\n\n## LIMIT UPLOAD FILE SIZE TO PROTECT AGAINST DOS ATTACK ##\nLimitRequestBody 10240000\n#bytes, 0-2147483647(2GB)\n\nRewriteEngine On\nRewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)\nRewriteRule .* - [F]\n\n# this is production\n\n ServerName pcr360.pcr.com\n DocumentRoot /var/www/pcr360/prod/public\n\nRewriteEngine On\n RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)\n RewriteRule .* - [F]\n\nSetEnv APPLICATION_ENV \"prod\"\n SetEnv APPLICATION_INI \"/var/www/pcr360/configs/pcr360.ini\"\n SetEnv APPLICATION_ENVDEBUG 0\n SetEnv APPLICATION_ENVPCR 0\n\n\n Options -Indexes\n DirectoryIndex index.php\n AllowOverride None\n Include /var/www/pcr360/prod/public/.htaccess\n Order allow,deny\n Allow from all\n \n","type":"text"}]},{"type":"paragraph","content":[{"text":"This example shows standard configuration for https port 443","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"ServerName pcr360.customeraddress.com\nProtocols h2 h2c http/1.1\nHeader always set Strict-Transport-Security max-age=31536000\n\n## PROTECT FILES ##\n\n Order Allow,Deny\n Deny from all\n\n\n## HEADERS FOR MS EDGE ##\n\n Header Set X-UA-Compatible: IE=Edge\n\n\n## LIMIT UPLOAD FILE SIZE TO PROTECT AGAINST DOS ATTACK ##\nLimitRequestBody 10240000\n#bytes, 0-2147483647(2GB)\n\nRewriteEngine On\nRewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)\nRewriteRule .* - [F]\n\n\n ServerName pcr360.pcr.com\n DocumentRoot /var/www/pcr360/prod/public\n\nRewriteEngine on\n RewriteCond %{SERVER_PORT} !^443$\n RewriteRule ^(.*) https://%{HTTP_HOST}%{REQUEST_URI}\n\n\n\n ServerName pcr360.pcr.com\n DocumentRoot /var/www/pcr360/prod/public\n\nErrorLog logs/ssl_error_log\n TransferLog logs/ssl_access_log\n LogLevel warn\n\nSSLEngine on\n # TLS 1.2 is currently considered the only secure transport type at this time\n SSLProtocol -all +TLSv1.2\n SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM\n SSLCertificateFile /etc/pki/tls/certs/pcr360.pcr.com.cert\n SSLCertificateKeyFile /etc/pki/tls/private/pcr360.pcr.com.key\n\nSetEnv APPLICATION_ENV \"prod\"\n SetEnv APPLICATION_INI \"/var/www/pcr360/configs/pcr360.ini\"\n SetEnv APPLICATION_ENVDEBUG 0\n SetEnv APPLICATION_ENVPCR 0\n\n\n Options -Indexes\n DirectoryIndex index.php\n AllowOverride None\n Include /var/www/pcr360/prod/public/.htaccess\n Order allow,deny\n Allow from all\n \n\n\n SSLOptions +StdEnvVars\n \n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Set Apache to Start on Boot","type":"text"}]},{"type":"paragraph","content":[{"text":"1. Add it to chkconfig","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"sudo /sbin/chkconfig --add httpd","type":"text"}]},{"type":"paragraph","content":[{"text":"2. Make sure it is in the chkconfig.","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"sudo /sbin/chkconfig --list httpd","type":"text"}]},{"type":"paragraph","content":[{"text":"3. Set it to autostart","type":"text"}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"sudo /sbin/chkconfig httpd on","type":"text"}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"children","parameters":{"macroParams":{"style":{"value":"h6"},"sort":{"value":"title"}},"macroMetadata":{"macroId":{"value":"49fc0618-4e3d-40c8-92c0-5e0b87f43c92"},"schemaVersion":{"value":"2"},"title":"Child pages (Children Display)"}},"localId":"12ec0ea9-0059-489b-8271-448c3cbe0970"}},{"type":"paragraph","content":[{"type":"hardBreak"}]}],"version":1}

Browser not supported