diff --git a/install/tpl/apache_ispconfig.vhost.master b/install/tpl/apache_ispconfig.vhost.master
index ffbb7c03deaf616f99a769e04b635b459ac954be..7ef59e23a5e5dc9ba19a02579842962713f0532f 100644
--- a/install/tpl/apache_ispconfig.vhost.master
+++ b/install/tpl/apache_ispconfig.vhost.master
@@ -7,120 +7,120 @@
NameVirtualHost *:
>
- ServerAdmin webmaster@localhost
+ ServerAdmin webmaster@localhost
+
+
+
+ SetHandler None
+
+
+
+
+ SetHandler None
+
+
+
+
+ DocumentRoot /var/www/ispconfig/
+ SuexecUserGroup ispconfig ispconfig
+
+ Options -Indexes +FollowSymLinks +MultiViews +ExecCGI
+ AllowOverride AuthConfig Indexes Limit Options FileInfo
+
+ SetHandler fcgid-script
+
+ FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php
+
+ Require all granted
+
+ Order allow,deny
+ Allow from all
+
+
+ IPCCommTimeout 7200
+ MaxRequestLen 15728640
+
-
-
- SetHandler None
-
-
-
-
- SetHandler None
-
-
+
+ DocumentRoot /usr/local/ispconfig/interface/web/
+ AssignUserId ispconfig ispconfig
+ AddType application/x-httpd-php .php
+
+ # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp"
+ Options +FollowSymLinks
+ AllowOverride None
+
+ Require all granted
+
+ Order allow,deny
+ Allow from all
+
+ php_value magic_quotes_gpc 0
+
+
+
+ # ErrorLog /var/log/apache2/error.log
+ # CustomLog /var/log/apache2/access.log combined
+ ServerSignature Off
+
+
+ SecRuleEngine Off
+
+
+ # SSL Configuration
+ SSLEngine On
+
+ SSLProtocol All -SSLv3
+
+ SSLProtocol All -SSLv2 -SSLv3
+
+ SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt
+ SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key
+ SSLCertificateChainFile /usr/local/ispconfig/interface/ssl/ispserver.bundle
-
- DocumentRoot /var/www/ispconfig/
- SuexecUserGroup ispconfig ispconfig
-
- Options -Indexes +FollowSymLinks +MultiViews +ExecCGI
- AllowOverride AuthConfig Indexes Limit Options FileInfo
-
- SetHandler fcgid-script
-
- FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php
-
- Require all granted
-
- Order allow,deny
- Allow from all
-
-
- IPCCommTimeout 7200
- MaxRequestLen 15728640
-
+ SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+ SSLHonorCipherOrder On
+
+ SSLCompression Off
+
+
+ SSLSessionTickets Off
+
-
- DocumentRoot /usr/local/ispconfig/interface/web/
- AssignUserId ispconfig ispconfig
- AddType application/x-httpd-php .php
-
- # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp"
- Options +FollowSymLinks
- AllowOverride None
-
- Require all granted
-
- Order allow,deny
- Allow from all
-
- php_value magic_quotes_gpc 0
-
-
-
- # ErrorLog /var/log/apache2/error.log
- # CustomLog /var/log/apache2/access.log combined
- ServerSignature Off
-
-
- SecRuleEngine Off
-
-
- # SSL Configuration
- SSLEngine On
-
- SSLProtocol All -SSLv3
-
- SSLProtocol All -SSLv2 -SSLv3
-
- SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt
- SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key
- SSLCertificateChainFile /usr/local/ispconfig/interface/ssl/ispserver.bundle
-
- SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
- SSLHonorCipherOrder On
-
- SSLCompression Off
-
-
- SSLSessionTickets Off
-
-
-
- Header always add Strict-Transport-Security "max-age=15768000"
+
+ Header always add Strict-Transport-Security "max-age=15768000"
RequestHeader unset Proxy early
-
+
-
- SSLUseStapling On
- SSLStaplingResponderTimeout 5
- SSLStaplingReturnResponderErrors Off
-
+
+ SSLUseStapling On
+ SSLStaplingResponderTimeout 5
+ SSLStaplingReturnResponderErrors Off
+
- SSLStaplingCache shmcb:/var/run/ocsp(128000)
+ SSLStaplingCache shmcb:/var/run/ocsp(128000)
- AllowOverride None
-
- Require all denied
-
- Order Deny,Allow
- Deny from all
-
+ AllowOverride None
+
+ Require all denied
+
+ Order Deny,Allow
+ Deny from all
+
- AllowOverride None
-
- Require all denied
-
- Order Deny,Allow
- Deny from all
-
+ AllowOverride None
+
+ Require all denied
+
+ Order Deny,Allow
+ Deny from all
+