db89ab8204
This adds an apache reverse proxy to the nagios chart, similar to elasticsearch and kibana. It also adds authentication to nagios via ldap Change-Id: I7b17703b5d4c1e041691ffceb984a9f5951cbeb9
190 lines
6.7 KiB
Smarty
190 lines
6.7 KiB
Smarty
#
|
|
# This is the main Apache HTTP server configuration file. It contains the
|
|
# configuration directives that give the server its instructions.
|
|
# See <URL:http://httpd.apache.org/docs/2.4/> for detailed information.
|
|
# In particular, see
|
|
# <URL:http://httpd.apache.org/docs/2.4/mod/directives.html>
|
|
# for a discussion of each configuration directive.
|
|
#
|
|
# Do NOT simply read the instructions in here without understanding
|
|
# what they do. They're here only as hints or reminders. If you are unsure
|
|
# consult the online docs. You have been warned.
|
|
#
|
|
# Configuration and logfile names: If the filenames you specify for many
|
|
# of the server's control files begin with "/" (or "drive:/" for Win32), the
|
|
# server will use that explicit path. If the filenames do *not* begin
|
|
# with "/", the value of ServerRoot is prepended -- so "logs/access_log"
|
|
# with ServerRoot set to "/usr/local/apache2" will be interpreted by the
|
|
# server as "/usr/local/apache2/logs/access_log", whereas "/logs/access_log"
|
|
# will be interpreted as '/logs/access_log'.
|
|
|
|
ServerRoot "/usr/local/apache2"
|
|
|
|
#
|
|
# Listen: Allows you to bind Apache to specific IP addresses and/or
|
|
# ports, instead of the default. See also the <VirtualHost>
|
|
# directive.
|
|
#
|
|
# Change this to Listen on specific IP addresses as shown below to
|
|
# prevent Apache from glomming onto all bound IP addresses.
|
|
#
|
|
#Listen 12.34.56.78:80
|
|
Listen 80
|
|
|
|
#
|
|
# Dynamic Shared Object (DSO) Support
|
|
#
|
|
# To be able to use the functionality of a module which was built as a DSO you
|
|
# have to place corresponding `LoadModule' lines at this location so the
|
|
# directives contained in it are actually available _before_ they are used.
|
|
# Statically compiled modules (those listed by `httpd -l') do not need
|
|
# to be loaded here.
|
|
#
|
|
# Example:
|
|
# LoadModule foo_module modules/mod_foo.so
|
|
#
|
|
LoadModule mpm_event_module modules/mod_mpm_event.so
|
|
LoadModule authn_file_module modules/mod_authn_file.so
|
|
LoadModule authn_core_module modules/mod_authn_core.so
|
|
LoadModule authz_host_module modules/mod_authz_host.so
|
|
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
|
|
LoadModule authz_user_module modules/mod_authz_user.so
|
|
LoadModule authz_core_module modules/mod_authz_core.so
|
|
LoadModule access_compat_module modules/mod_access_compat.so
|
|
LoadModule auth_basic_module modules/mod_auth_basic.so
|
|
LoadModule ldap_module modules/mod_ldap.so
|
|
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
|
|
LoadModule reqtimeout_module modules/mod_reqtimeout.so
|
|
LoadModule filter_module modules/mod_filter.so
|
|
LoadModule proxy_html_module modules/mod_proxy_html.so
|
|
LoadModule log_config_module modules/mod_log_config.so
|
|
LoadModule env_module modules/mod_env.so
|
|
LoadModule headers_module modules/mod_headers.so
|
|
LoadModule setenvif_module modules/mod_setenvif.so
|
|
LoadModule version_module modules/mod_version.so
|
|
LoadModule proxy_module modules/mod_proxy.so
|
|
LoadModule proxy_connect_module modules/mod_proxy_connect.so
|
|
LoadModule proxy_http_module modules/mod_proxy_http.so
|
|
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
|
|
LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
|
|
LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
|
|
LoadModule unixd_module modules/mod_unixd.so
|
|
LoadModule status_module modules/mod_status.so
|
|
LoadModule autoindex_module modules/mod_autoindex.so
|
|
|
|
<IfModule unixd_module>
|
|
#
|
|
# If you wish httpd to run as a different user or group, you must run
|
|
# httpd as root initially and it will switch.
|
|
#
|
|
# User/Group: The name (or #number) of the user/group to run httpd as.
|
|
# It is usually good practice to create a dedicated user and group for
|
|
# running httpd, as with most system services.
|
|
#
|
|
User daemon
|
|
Group daemon
|
|
|
|
</IfModule>
|
|
|
|
# 'Main' server configuration
|
|
#
|
|
# The directives in this section set up the values used by the 'main'
|
|
# server, which responds to any requests that aren't handled by a
|
|
# <VirtualHost> definition. These values also provide defaults for
|
|
# any <VirtualHost> containers you may define later in the file.
|
|
#
|
|
# All of these directives may appear inside <VirtualHost> containers,
|
|
# in which case these default settings will be overridden for the
|
|
# virtual host being defined.
|
|
#
|
|
|
|
#
|
|
# Deny access to the entirety of your server's filesystem. You must
|
|
# explicitly permit access to web content directories in other
|
|
# <Directory> blocks below.
|
|
#
|
|
<Directory />
|
|
AllowOverride none
|
|
Require all denied
|
|
</Directory>
|
|
|
|
#
|
|
# The following lines prevent .htaccess and .htpasswd files from being
|
|
# viewed by Web clients.
|
|
#
|
|
<Files ".ht*">
|
|
Require all denied
|
|
</Files>
|
|
|
|
#
|
|
# ErrorLog: The location of the error log file.
|
|
# If you do not specify an ErrorLog directive within a <VirtualHost>
|
|
# container, error messages relating to that virtual host will be
|
|
# logged here. If you *do* define an error logfile for a <VirtualHost>
|
|
# container, that host's errors will be logged there and not here.
|
|
#
|
|
ErrorLog /dev/stderr
|
|
|
|
#
|
|
# LogLevel: Control the number of messages logged to the error_log.
|
|
# Possible values include: debug, info, notice, warn, error, crit,
|
|
# alert, emerg.
|
|
#
|
|
LogLevel warn
|
|
|
|
<IfModule log_config_module>
|
|
#
|
|
# The following directives define some format nicknames for use with
|
|
# a CustomLog directive (see below).
|
|
#
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b" common
|
|
|
|
<IfModule logio_module>
|
|
# You need to enable mod_logio.c to use %I and %O
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
|
|
</IfModule>
|
|
|
|
#
|
|
# The location and format of the access logfile (Common Logfile Format).
|
|
# If you do not define any access logfiles within a <VirtualHost>
|
|
# container, they will be logged here. Contrariwise, if you *do*
|
|
# define per-<VirtualHost> access logfiles, transactions will be
|
|
# logged therein and *not* in this file.
|
|
#
|
|
CustomLog /dev/stdout common
|
|
|
|
#
|
|
# If you prefer a logfile with access, agent, and referer information
|
|
# (Combined Logfile Format) you can use the following directive.
|
|
#
|
|
CustomLog /dev/stdout combined
|
|
</IfModule>
|
|
|
|
#
|
|
# "/usr/local/apache2/cgi-bin" should be changed to whatever your ScriptAliased
|
|
# CGI directory exists, if you have that configured.
|
|
#
|
|
<Directory "/usr/local/apache2/cgi-bin">
|
|
AllowOverride None
|
|
Options None
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<IfModule headers_module>
|
|
#
|
|
# Avoid passing HTTP_PROXY environment to CGI's on this or any proxied
|
|
# backend servers which have lingering "httpoxy" defects.
|
|
# 'Proxy' request header is undefined by the IETF, not listed by IANA
|
|
#
|
|
RequestHeader unset Proxy early
|
|
</IfModule>
|
|
|
|
# Virtual hosts
|
|
Include conf/sites-enabled/*.conf
|
|
|
|
# Configure mod_proxy_html to understand HTML4/XHTML1
|
|
<IfModule proxy_html_module>
|
|
Include conf/extra/proxy-html.conf
|
|
</IfModule>
|