forked from pool/roundcubemail
Aeneas Jaißle
bd0e5a2bd9
- Enigma: Add possibility to configure gpg-agent binary location (enigma_pgp_agent) - Enigma: Fix signature verification with some IMAP servers, e.g. Gmail, DBMail (#5371) - Enigma: Make recipient key searches case-insensitive (#5434) - Fix regression in resizing JPEG images with Imagick (#5376) - Managesieve: Fix parsing of vacation date-time with non-default date_format (#5372) - Use SymLinksIfOwnerMatch in .htaccess instead of FollowSymLinks disabled on some hosts for security reasons (#5370) - Wash position:fixed style in HTML mail for better security (#5264) - Fix bug where memcache_debug didn't work for session operations - Fix bug where Message-ID domain part was tied to username instead of current identity (#5385) - Fix bug where blocked.gif couldn't be attached to reply/forward with insecure content - Fix E_DEPRECATED warning when using Auth_SASL::factory() (#5401) - Fix bug where names of downloaded files could be malformed when derived from the message subject (#5404) - Fix so "All" messages selection is resetted on search reset (#5413) - Fix bug where folder creation could fail if personal namespace contained more than one entry (#5403) - Fix error causing empty INBOX listing in Firefox when using an URL with user:password specified (#5400) - Fix PHP warning when handling shared namespace with empty prefix (#5420) - Fix so folders list is scrolled to the selected folder on page load (#5424) - Fix so when moving to Trash we make sure the folder exists (#5192) - Fix displaying size of attachments with zero size - Fix so "Action disabled" error uses more appropriate 404 code (#5440) OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=104
303 lines
8.4 KiB
Plaintext
303 lines
8.4 KiB
Plaintext
# You might want to set up a virtual host for the server, but it is
|
|
# not a requirement. You can as well reach the server under its
|
|
# common name under https://yourroundcubeserver.example.com/
|
|
#
|
|
# NameVirtualHost *
|
|
# <VirtualHost *>
|
|
# ServerName yourroundcubeserver.example.com
|
|
# DocumentRoot __ROUNDCUBEPATH__
|
|
|
|
|
|
<IfModule mod_alias.c>
|
|
Alias /roundcubemail "__ROUNDCUBEPATH__/public_html"
|
|
</IfModule>
|
|
|
|
# AddDefaultCharset UTF-8
|
|
AddType text/x-component .htc
|
|
|
|
<Directory "__ROUNDCUBEPATH__/public_html">
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order allow,deny
|
|
Allow from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all granted
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order allow,deny
|
|
Allow from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order allow,deny
|
|
Allow from all
|
|
</IfModule>
|
|
|
|
# WARNING: For PHP 7 the module name in the line below need to be modified!
|
|
<IfModule mod_php5.c>
|
|
php_flag display_errors Off
|
|
php_flag log_errors On
|
|
#php_value error_log logs/errors
|
|
|
|
php_value upload_max_filesize 5M
|
|
php_value post_max_size 6M
|
|
php_value memory_limit 64M
|
|
|
|
php_flag register_globals Off
|
|
php_flag zlib.output_compression Off
|
|
php_flag magic_quotes_gpc Off
|
|
php_flag magic_quotes_runtime Off
|
|
php_flag suhosin.session.encrypt Off
|
|
|
|
#php_value session.cookie_path /
|
|
#php_value session.hash_function sha256
|
|
php_flag session.auto_start Off
|
|
php_value session.gc_maxlifetime 21600
|
|
php_value session.gc_divisor 500
|
|
php_value session.gc_probability 1
|
|
</IfModule>
|
|
|
|
<IfModule mod_rewrite.c>
|
|
Options +SymLinksIfOwnerMatch
|
|
RewriteEngine On
|
|
RewriteRule ^favicon\.ico$ skins/larry/images/favicon.ico
|
|
|
|
# security rules:
|
|
# - deny access to files not containing a dot or starting with a dot
|
|
# in all locations except installer directory
|
|
RewriteRule ^(?!installer|\.well-known\/|[a-f0-9]{16})(\.?[^\.]+)$ - [F]
|
|
# - deny access to some locations
|
|
RewriteRule ^/?(\.git|\.tx|SQL|bin|config|logs|temp|tests|program\/(include|lib|localization|steps)) - [F]
|
|
# - deny access to some documentation files
|
|
RewriteRule /?(README\.md|composer\.json-dist|composer\.json|package\.xml|Dockerfile)$ - [F]
|
|
# security rules
|
|
</IfModule>
|
|
|
|
<IfModule mod_deflate.c>
|
|
SetOutputFilter DEFLATE
|
|
</IfModule>
|
|
|
|
<IfModule mod_headers.c>
|
|
#Header merge Cache-Control public env=!NO_CACHE
|
|
# for better privacy/security ask browsers to not set the Referer
|
|
#Header set Content-Security-Policy "referrer no-referrer"
|
|
</IfModule>
|
|
|
|
<IfModule mod_expires.c>
|
|
ExpiresActive On
|
|
ExpiresDefault "access plus 1 month"
|
|
</IfModule>
|
|
|
|
FileETag MTime Size
|
|
|
|
<IfModule mod_autoindex.c>
|
|
Options -Indexes
|
|
</ifModule>
|
|
</Directory>
|
|
|
|
#
|
|
# Special directories
|
|
#
|
|
|
|
<Directory "__ROUNDCUBEPATH__">
|
|
Options -FollowSymLinks
|
|
AllowOverride None
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/bin">
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/config">
|
|
Options -FollowSymLinks
|
|
AllowOverride None
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/logs">
|
|
Options -FollowSymLinks
|
|
AllowOverride None
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/migration">
|
|
Options -FollowSymLinks
|
|
AllowOverride None
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/migrated">
|
|
Options -FollowSymLinks
|
|
AllowOverride None
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/plugins/enigma/home">
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/program">
|
|
<IfModule mod_rewrite.c>
|
|
RewriteEngine On
|
|
RewriteRule !^js|.*\.gif$ - [F]
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
<Directory "__ROUNDCUBEPATH__/temp">
|
|
Options -FollowSymLinks
|
|
AllowOverride None
|
|
<IfModule mod_version.c>
|
|
<IfVersion < 2.4>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfVersion>
|
|
<IfVersion >= 2.4>
|
|
<IfModule mod_authz_core.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</IfVersion>
|
|
</IfModule>
|
|
<IfModule !mod_version.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
#
|
|
# </VirtualHost>
|
|
|