Marco Chiappero
e2d38a867c
Enable the use of two separate sockets for IPv4 and IPv6 when LISTEN_ALL_INTERFACES is set to true. While desirable, on Linux Apache uses IPv4-mapped IPv6 addresses by default, thus leveraging a single IPv6 socket for IPv4 connections as well. This behaviour is far from being desirable and can be disabled at compile time via the "--disable-v4-mapped" flag, so make sure both an ANY address Listen directive is present for both IPv4 and IPv6. When Apache is compiled with "--enable-v4-mapped", the IPv4 socket will be simply ignored. Please see https://httpd.apache.org/docs/2.4/bind.html for more information. Signed-off-by: Marco Chiappero <marco.chiappero@suse.com>
91 lines
2.1 KiB
Django/Jinja
91 lines
2.1 KiB
Django/Jinja
ServerRoot {{ env.HTTPD_DIR }}
|
|
{%- if env.LISTEN_ALL_INTERFACES | lower == "true" %}
|
|
Listen 0.0.0.0:{{ env.HTTP_PORT }}
|
|
Listen [::]:{{ env.HTTP_PORT }}
|
|
{% else %}
|
|
{% if env.ENABLE_IPV4 %}
|
|
Listen {{ env.IRONIC_IP }}:{{ env.HTTP_PORT }}
|
|
{% endif %}
|
|
{% if env.ENABLE_IPV6 %}
|
|
Listen [{{ env.IRONIC_IPV6 }}]:{{ env.HTTP_PORT }}
|
|
{% endif %}
|
|
{% endif %}
|
|
Include /etc/httpd/conf.modules.d/*.conf
|
|
User ironic-suse
|
|
Group ironic-suse
|
|
|
|
<Directory />
|
|
AllowOverride none
|
|
Require all denied
|
|
</Directory>
|
|
|
|
DocumentRoot "/shared/html"
|
|
|
|
<Directory "/shared/html">
|
|
Options Indexes FollowSymLinks
|
|
AllowOverride None
|
|
Require all granted
|
|
</Directory>
|
|
|
|
{%- if env.HTTPD_SERVE_NODE_IMAGES | lower == "true" %}
|
|
<Directory "/shared/html/images">
|
|
Options Indexes FollowSymLinks
|
|
AllowOverride None
|
|
Require all granted
|
|
</Directory>
|
|
{% endif %}
|
|
|
|
<IfModule dir_module>
|
|
DirectoryIndex index.html
|
|
</IfModule>
|
|
|
|
<Files ".ht*">
|
|
Require all denied
|
|
</Files>
|
|
|
|
ErrorLog "/dev/stderr"
|
|
|
|
LogLevel warn
|
|
|
|
<IfModule log_config_module>
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b" common
|
|
<IfModule logio_module>
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
|
|
</IfModule>
|
|
CustomLog "/dev/stderr" combined
|
|
</IfModule>
|
|
|
|
<IfModule mime_module>
|
|
TypesConfig /etc/mime.types
|
|
AddType application/x-compress .Z
|
|
AddType application/x-gzip .gz .tgz
|
|
AddType text/html .shtml
|
|
AddOutputFilter INCLUDES .shtml
|
|
</IfModule>
|
|
|
|
AddDefaultCharset UTF-8
|
|
|
|
<IfModule mime_magic_module>
|
|
MIMEMagicFile conf/magic
|
|
</IfModule>
|
|
|
|
PidFile /var/tmp/httpd.pid
|
|
|
|
# EnableSendfile directive could speed up deployments but it could also cause
|
|
# issues depending on the underlying file system, to learn more:
|
|
# https://httpd.apache.org/docs/current/mod/core.html#enablesendfile
|
|
{%- if env.HTTPD_ENABLE_SENDFILE | lower == "true" %}
|
|
EnableSendfile on
|
|
{% endif %}
|
|
|
|
# http TRACE can be subjected to abuse and should be disabled
|
|
TraceEnable off
|
|
|
|
# provide minimal server information
|
|
ServerTokens Prod
|
|
ServerSignature Off
|
|
|
|
IncludeOptional conf.d/*.conf
|
|
|