diff --git a/gameauth-apache.conf b/gameauth-apache.conf new file mode 100644 index 0000000000000000000000000000000000000000..1883d7aaa4e450a3f95195a8aa61f39e7865c3ba --- /dev/null +++ b/gameauth-apache.conf @@ -0,0 +1,44 @@ +<VirtualHost *:80> + ServerAdmin games@sucs.org + DocumentRoot /var/www/gameauth + ServerName games.sucs.org + ServerAlias www.games.sucs.org + CustomLog /var/log/apache2/gameauth_access.log combined + ErrorLog /var/log/apache2/gameauth_error.log + AddHandler application/x-httpd-php .php + + RewriteEngine on + ReWriteCond %{SERVER_PORT} !^443$ + RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L] + + Alias /dynmap /var/www/minecraft-dynmap + Alias /tekkit-dynmap /var/www/tekkit-dynmap/ + +</VirtualHost> +<VirtualHost *:443> + ServerAdmin games@sucs.org + DocumentRoot /var/www/gameauth + ServerName games.sucs.org + ServerAlias www.games.sucs.org + CustomLog /var/log/apache2/gameauth_access.log combined + ErrorLog /var/log/apache2/gameauth_error.log + AddHandler application/x-httpd-php .php + + SSLEngine on + + SSLCipherSuite AES128+EECDH:AES128+EDH + SSLProtocol All -SSLv2 -SSLv3 + SSLHonorCipherOrder On + Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload" + Header always set X-Frame-Options DENY + Header always set X-Content-Type-Options nosniff + SSLCompression off + + SSLCertificateFile /etc/letsencrypt/live/games.sucs.org/fullchain.pem + SSLCertificateKeyFile /etc/letsencrypt/live/games.sucs.org/privkey.pem + SSLCertificateChainFile /etc/letsencrypt/live/games.sucs.org/chain.pem + + Alias /dynmap /var/www/minecraft-dynmap + Alias /tekkit-dynmap /var/www/tekkit-dynmap/ + +</VirtualHost>