Project

General

Profile

1
# Autogenerated httpd.conf file for TWiki.
2
# Generated at http://twiki.org/cgi-bin/view/TWiki/ApacheConfigGenerator
3

    
4
# IMPORTANT NOTE: Make sure to enable mod_cgid in the primary apache configuration file.
5

    
6
# We set an environment variable called blockAccess.
7
#
8
# Setting a BrowserMatchNoCase to ^$ is important. It prevents TWiki from
9
# including its own topics as URLs and also prevents other TWikis from
10
# doing the same. This is important to prevent the most obvious
11
# Denial of Service attacks.
12
#
13
# You can expand this by adding more BrowserMatchNoCase statements to
14
# block evil browser agents trying the impossible task of mirroring a twiki
15
#
16
# Example:
17
# BrowserMatchNoCase ^SiteSucker blockAccess
18
# BrowserMatchNoCase ^$ blockAccess
19

    
20
BrowserMatchNoCase ^Accoona blockAccess
21
BrowserMatchNoCase ^ActiveAgent blockAccess
22
BrowserMatchNoCase ^Attache blockAccess
23
BrowserMatchNoCase BecomeBot blockAccess
24
BrowserMatchNoCase ^bot blockAccess
25
BrowserMatchNoCase Charlotte/ blockAccess
26
BrowserMatchNoCase ^ConveraCrawler blockAccess
27
BrowserMatchNoCase ^CrownPeak-HttpAgent blockAccess
28
BrowserMatchNoCase ^EmailCollector blockAccess
29
BrowserMatchNoCase ^EmailSiphon blockAccess
30
BrowserMatchNoCase ^e-SocietyRobot blockAccess
31
BrowserMatchNoCase ^Exabot blockAccess
32
BrowserMatchNoCase ^FAST blockAccess
33
BrowserMatchNoCase ^FDM blockAccess
34
BrowserMatchNoCase ^GetRight/6.0a blockAccess
35
BrowserMatchNoCase ^GetWebPics blockAccess
36
BrowserMatchNoCase ^Gigabot blockAccess
37
BrowserMatchNoCase ^gonzo1 blockAccess
38
BrowserMatchNoCase ^Google\sSpider blockAccess
39
BrowserMatchNoCase ^ichiro blockAccess
40
BrowserMatchNoCase ^ie_crawler blockAccess
41
BrowserMatchNoCase ^iGetter blockAccess
42
BrowserMatchNoCase ^IRLbot blockAccess
43
BrowserMatchNoCase Jakarta blockAccess
44
BrowserMatchNoCase ^Java blockAccess
45
BrowserMatchNoCase ^KrakSpider blockAccess
46
BrowserMatchNoCase ^larbin blockAccess
47
BrowserMatchNoCase ^LeechGet blockAccess
48
BrowserMatchNoCase ^LinkWalker blockAccess
49
BrowserMatchNoCase ^Lsearch blockAccess
50
BrowserMatchNoCase ^Microsoft blockAccess
51
BrowserMatchNoCase ^MJ12bot blockAccess
52
BrowserMatchNoCase MSIECrawler blockAccess
53
BrowserMatchNoCase ^MSRBOT blockAccess
54
BrowserMatchNoCase ^noxtrumbot blockAccess
55
BrowserMatchNoCase ^NutchCVS blockAccess
56
BrowserMatchNoCase ^RealDownload blockAccess
57
BrowserMatchNoCase ^Rome blockAccess
58
BrowserMatchNoCase ^Roverbot blockAccess
59
BrowserMatchNoCase ^schibstedsokbot blockAccess
60
BrowserMatchNoCase ^Seekbot blockAccess
61
BrowserMatchNoCase ^SiteSnagger blockAccess
62
BrowserMatchNoCase ^SiteSucker blockAccess
63
BrowserMatchNoCase ^Snapbot blockAccess
64
BrowserMatchNoCase ^sogou blockAccess
65
BrowserMatchNoCase ^SpiderKU blockAccess
66
BrowserMatchNoCase ^SpiderMan blockAccess
67
BrowserMatchNoCase ^Squid blockAccess
68
BrowserMatchNoCase ^Teleport blockAccess
69
BrowserMatchNoCase ^User-Agent\: blockAccess
70
BrowserMatchNoCase VoilaBot blockAccess
71
BrowserMatchNoCase ^voyager blockAccess
72
BrowserMatchNoCase ^W3C blockAccess
73
BrowserMatchNoCase ^w3search blockAccess
74
BrowserMatchNoCase ^Web\sDownloader blockAccess
75
BrowserMatchNoCase ^WebCopier blockAccess
76
BrowserMatchNoCase ^WebDevil blockAccess
77
BrowserMatchNoCase ^WebSec blockAccess
78
BrowserMatchNoCase ^WebVac blockAccess
79
BrowserMatchNoCase ^Webwhacker blockAccess
80
BrowserMatchNoCase ^Webzip blockAccess
81
BrowserMatchNoCase ^Wells blockAccess
82
BrowserMatchNoCase ^WhoWhere blockAccess
83
BrowserMatchNoCase www\.netforex\.org blockAccess
84
BrowserMatchNoCase ^WX_mail blockAccess
85
BrowserMatchNoCase ^yacybot blockAccess
86
BrowserMatchNoCase ^ZIBB blockAccess
87
BrowserMatchNoCase ^$ blockAccess
88

    
89
<IfModule mod_perl.c>
90
	# Mod_perl preloading
91
	PerlSwitches -T
92
</IfModule>
93

    
94
# The ScriptAlias defines the bin directory as a directory where CGI
95
# scripts are allowed.
96
# The first parameter will be part of the URL to your installation e.g.
97
# http://example.com/do/view/...
98
# The second parameter must point to the physical path on your disc.
99
ScriptAlias /twiki/do "/home/bien/svn/web/.twiki/bin"
100

    
101
# The Alias defines a url that points to the twiki pub directory, which
102
# is the root of file attachments.
103
Alias /twiki/pub "/home/bien/svn/web/.twiki/pub"
104
Alias /twiki "/home/bien/svn/web/.twiki"
105

    
106
# Block access to typical spam related attachments
107
# Except the TWiki directory which is read only and does have attached html files.
108
SetEnvIf Request_URI "/twiki/pub/.*\.[hH][tT][mM][lL]?$" blockAccess
109
SetEnvIf Request_URI "/twiki/pub/TWiki/.*\.[hH][tT][mM][lL]?$" !blockAccess
110

    
111
# This specifies the options on the TWiki scripts directory. The ExecCGI
112
# and SetHandler tell apache that it contains scripts. "Require all granted"
113
# lets any IP address access this URL.
114
<Directory "/home/bien/svn/web/.twiki/bin">
115
	AllowOverride None
116
	Require all granted
117
	Deny from env=blockAccess
118

    
119
	Options ExecCGI FollowSymLinks
120
	SetHandler cgi-script
121

    
122
	# Password file for TWiki users
123
	#AuthUserFile /home/bien/svn/web/.twiki/data/.htpasswd
124
	#AuthName 'Enter your WikiName: (First name and last name, no space, no dots, capitalized, e.g. JohnSmith)'
125
	#AuthType Basic
126

    
127
	# File to return on access control error (e.g. wrong password)
128
	ErrorDocument 401 /twiki/do/view/TWiki/ResetPassword
129

    
130

    
131

    
132
</Directory>
133

    
134
<Directory "/home/bien/svn/web/.twiki">
135
	Require all granted
136
	Deny from env=blockAccess
137

    
138
	RedirectMatch ^/twiki/([A-Z0-9].*)?$ /twiki/do/view/Main/$1
139

    
140
	# File to return on access control error (e.g. wrong password)
141
	ErrorDocument 401 /twiki/do/view/TWiki/ResetPassword
142
</Directory>
143

    
144
# This sets the options on the pub directory, which contains attachments and
145
# other files like CSS stylesheets and icons. AllowOverride None stops a
146
# user installing a .htaccess file that overrides these options.
147
# Note that files in pub are *not* protected by TWiki Access Controls,
148
# so if you want to control access to files attached to topics you need to
149
# block access to the specific directories same way as the ApacheConfigGenerator
150
# blocks access to the pub directory of the Trash web
151
<Directory "/home/bien/svn/web/.twiki/pub">
152
	#Options None
153
	Options FollowSymLinks
154
	AllowOverride None
155
	Require all granted
156
	Deny from env=blockAccess
157

    
158
	# Disable execusion of PHP scripts
159
	php_admin_flag engine off
160

    
161
	# This line will redefine the mime type for the most common types of scripts
162
	AddType text/plain .shtml .php .php3 .phtml .phtm .pl .py .cgi
163

    
164
#add an Expires header that is sufficiently in the future that the browser does not even ask if its uptodate
165
# reducing the load on the server significantly
166
#IF you can, you should enable this - it _will_ improve your twiki experience, even if you set it to under one day.
167
# you may need to enable expires_module in your main apache config
168
#LoadModule expires_module libexec/httpd/mod_expires.so
169
#AddModule mod_expires.c
170
#<ifmodule mod_expires.c>
171
#  <filesmatch "\.(jpg|gif|png|css|js)$">
172
#		ExpiresActive on
173
#		ExpiresDefault "access plus 11 days"
174
#	</filesmatch>
175
#</ifmodule>
176

    
177
</Directory>
178

    
179
# Spammers are known to attach their stuff and then move it to trash where it remains unnoticed.
180
# We prevent viewing any attachments directly from pub
181
<Directory "/home/bien/svn/web/.twiki/pub/Trash">
182
   deny from all
183
</Directory>
184

    
185

    
(3-3/3)