kolla-ansible/ansible/roles/zun/templates/wsgi-zun.conf.j2
Jeffrey Zhang f8cb527f78 Security reinforce for apache server
Disable ServerSignature and Hide apache related infromation.

Change-Id: I9188ddb85988539087c922117bb9f53454b7507c
2018-03-14 18:14:26 +08:00

31 lines
1.1 KiB
Django/Jinja

{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ zun_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ zun_api_port }}>
## Vhost docroot
DocumentRoot "/var/www/cgi-bin/zun"
## Directories, there should at least be a declaration for /var/www/cgi-bin/zun
<Directory "/var/www/cgi-bin/zun">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Require all granted
</Directory>
## Logging
ErrorLog "/var/log/kolla/zun/zun_api_wsgi_error.log"
ServerSignature Off
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b %D \"%{Referer}i\" \"%{User-Agent}i\"" logformat
CustomLog "/var/log/kolla/zun/zun_api_wsgi_access.log" logformat
WSGIApplicationGroup %{GLOBAL}
WSGIDaemonProcess zun group=zun processes={{ openstack_service_workers }} threads=1 user=zun python-path={{ python_path }}
WSGIProcessGroup zun
WSGIScriptAlias / "/var/www/cgi-bin/zun/app.wsgi"
</VirtualHost>