File 0000-default.conf of Package vicibox-install

<VirtualHost _default_:80>
	ServerAdmin support@vicibox.local
	ServerName vicibox.local
	DocumentRoot /srv/www/htdocs
	ErrorLog /var/log/apache2/error_log
	CustomLog /var/log/apache2/access_log combined
	#CustomLog /dev/null combined
	HostnameLookups Off
	UseCanonicalName Off
	ServerSignature Off
	TraceEnable Off
	Include /etc/apache2/conf.d/*.conf
	DirectoryIndex index.html index.php index.htm

	<Files ~ "^\.ht">
		Require all denied
	</Files>
	<Files ~ "opcache.php">
		Require ip 192.168.0.0/16 10.0.0.0/8 172.16.0.0/12 127.0.0.1
	</Files>

	<Directory "/srv/www/htdocs">
		Options -Indexes +FollowSymLinks
		AllowOverride None
		Require all granted
	</Directory>

	### To force everything to SSL uncomment the following, but make sure SSL works first!!!
	#RewriteEngine On
	#RewriteCond %{HTTPS} off
	#RewriteRule (.*) https://%{SERVER_NAME}/$1 [R,L]

	### Below is for PCI WebDSS scans, but will likely break ViciDial
	#<IfModule mod_headers.c>
	#	Header always set X-Frame-Options: DENY
	#	Header always set X-XSS-Protection "1; mode=block"
	#	Header always set X-Content-Type-Options: nosniff
	#	Header always set Content-Security-Policy "script-src 'self'; object-src 'self'"
	#	Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
	#</IfModule>

</VirtualHost>

openSUSE Build Service is sponsored by