# 
# This configuration file enables the default "Welcome"
# page if there is no default index page present for
# the root URL.  To disable the Welcome page, comment
# out all the lines below.
#
<LocationMatch "^/+$">
	Options -Indexes
	ErrorDocument 403 /error/noindex.html
</LocationMatch>
ErrorDocument 404 /error/404.html
ErrorDocument 500 /error/500.html
ErrorDocument 502 /error/50x.html
ErrorDocument 503 /error/50x.html
ErrorDocument 504 /error/50x.html

Listen 80

###############################
######## Enable SSL ###########
<IfModule ssl_module>
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl	.crl
SSLPassPhraseDialog  builtin
SSLSessionCache shmcb:/usr/local/apps/apache2/logs/ssl_gcache_data(512000) 
SSLSessionCacheTimeout  300
SSLProtocol All -SSLv2 -SSLv3 -TLSv1
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS:!3DES:!RC4
SSLHonorCipherOrder	 on
SSLCompression		  off
SSLSessionTickets	   off
Mutex default
</IfModule>

<IfModule socache_shmcb_module>
	SSLUseStapling On
	SSLStaplingCache shmcb:/run/apache2/stapling_cache_shmcb(256000)

	# Prevent browsers from failing if an OCSP server is temporarily broken.
	SSLStaplingReturnResponderErrors off
	SSLStaplingErrorCacheTimeout 60
	SSLStaplingFakeTryLater off
	SSLStaplingResponderTimeout 3
	SSLSessionCache shmcb:/run/apache2/ssl_gcache_data_shmcb(1024000)
</IfModule>
###############################

# webmail access from user domain
ProxyPass "/webmail" "http://127.0.0.1:2002/mail"
ProxyPassReverse "/webmail" "http://127.0.0.1:2002/mail"


# Webuzo panel access from user domain
<Location /webuzo>
    Redirect "https://%{HTTP_HOST}:2003%{env:MATCH_PATH}"
</Location>

# Webuzo panel access from user domain
<Location /cpanel>
    Redirect "https://%{HTTP_HOST}:2003%{env:MATCH_PATH}"
</Location>

# Webuzo panel access from user domain
<Location /whm>
	Redirect "https://%{HTTP_HOST}:2005%{env:MATCH_PATH}"
</Location>

ExtendedStatus On
LogLevel warn
TraceEnable Off
ServerSignature Off
ServerTokens ProductOnly
FileETag None

KeepAlive Off
KeepAliveTimeout 15
MaxKeepAliveRequests 100
Timeout 120

StartServers 2
ServerLimit 256
MaxConnectionsPerChild 10000
MaxRequestWorkers 256
<IfModule prefork.c>
	MinSpareServers 5
	MaxSpareServers 10
</IfModule>
LoadModule mpm_prefork_module modules/mod_mpm_prefork.so

LoadModule cgi_module modules/mod_cgi.so

		
<Directory /home/*/public_html>	 
	AllowOverride All	
	Require all granted
</Directory>

		
	
<Directory "/">
	AllowOverride All
	Options ExecCGI FollowSymLinks IncludesNOEXEC
</Directory>

<IfModule mod_log_config.c>
	LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
	LogFormat "%h %l %u %t \"%r\" %>s %b" common
</IfModule>

######################		
# gzip configuration #
######################

LoadModule deflate_module modules/mod_deflate.so

<IfModule mod_deflate.c>
	# Compression Level
	DeflateCompressionLevel 5	

	# Compress HTML, CSS, JavaScript, Text and XML 
	AddOutputFilterByType DEFLATE application/javascript
	AddOutputFilterByType DEFLATE application/x-javascript
	AddOutputFilterByType DEFLATE application/xml
	AddOutputFilterByType DEFLATE application/json
	AddOutputFilterByType DEFLATE text/css
	AddOutputFilterByType DEFLATE text/html
	AddOutputFilterByType DEFLATE text/javascript
	AddOutputFilterByType DEFLATE text/plain
	AddOutputFilterByType DEFLATE text/xml

</IfModule>

##################
# PHP Config
##################

AddType application/x-httpd-php .php .phtml
AddType application/x-httpd-php-source .phps
AddHandler x-httpd-php .php .phtml

#
# Add index.php to the list of files that will be served as directory
# indexes.
#
DirectoryIndex index.php index.php8 index.php7 index.php5 index.perl index.pl index.plx index.ppl index.cgi index.jsp index.jp index.phtml index.shtml index.xhtml index.html index.htm index.js


######################
# Perl configuration #
######################
LoadModule ruid2_module /usr/local/apps/perl/apache2/modules/mod_ruid2.so
<IfModule mod_ruid2.c>
	RMode config   
	RUidGid nobody nobody	
</IfModule>