apache.conf
# Apache configuration highlighting unit test
# comment with alters TODOFIXME###
<IfModule mod_dav_fs.c>
DAVLockDB /var/lock/apache/DAVLock
</IfModule>
<VirtualHost *:443>
Include something_else.inc
SSLEngineon
# exclude insecure protocols
SSLProtocolall-SSLv2-SSLv3
SSLHonorCipherOrderon
# exclude insecure ciphers
SSLCipherSuite "HIGH !EXP !eNULL !aNULL !LOW !RC4 !3DES !MD5 !EXP !PSK !SRP !DSS !DES !aECDH"
SSLCertificateFile /etc/letsencrypt/live/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/chain.pem
CustomLog /var/log/apache2/ssl_request_log ssl_combined
</VirtualHost>
<Proxy "http://localhost:10000/">
SSLRequireSSL
</Proxy>
<Directory "/some/quoted/path">
Options-Indexes-FollowSymLinks
DirectoryIndex index.php
AllowOverrideNone
Orderallow,deny
Allow from all
OptionsFollowSymLinks
AllowOverrideFileInfoOptionsAll
<LimitExcept GET>
Require valid-user
</LimitExcept>
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
ForceType text/plain
</Files>
</Directory>
Alias /foo/ "/srv/www/htdocs/foo/"
AuthTypeBasic
AuthName "KDE"
AuthUserFile /srv/www/htpasswd.db
Require user konqui
<VirtualHost _default_:80>
ServerName www.kde.org
ServerAlias kde.org
RewriteEngineOn
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [L,QSA,R=permanent]
</VirtualHost>
AuthBasicProvider ldap
AuthLDAPBindDN uid=ldapproxy,ou=people,dc=kde,dc=org
AuthLDAPBindPassword top_secret
AuthLDAPURL ldap://localhost:389/ou=people,dc=kde,dc=org?uid?sub?(objectClass=posixAccount)
AuthLDAPGroupAttributeIsDNon
AuthLDAPGroupAttribute member
Require ldap-group cn=sysadmin,ou=Group,dc=kde,dc=org