685283006eb5ccef06a9d3ed25b3346340b183bc
[x2gobroker.git] / etc / x2gobroker-wsgi.apache.vhost
1 ###
2 ### Virtual Host configuration for an X2Go Session Broker
3 ###
4
5 #
6 # Make sure to disabled /etc/apache2/x2gobroker-wsgi completely if you
7 # prefer setting up the X2Go Session Broker as a virtual host.
8 #
9
10 <VirtualHost *:443>
11
12     ServerName localhost
13     ServerAdmin webmaster@localhost
14
15     # enable debugging
16     #SetEnv X2GOBROKER_DEBUG off
17
18     # the default user/group that this WSGI application runs as
19     #X2GOBROKER_DAEMON_USER=x2gobroker
20     #X2GOBROKER_DAEMON_GROUP=x2gobroker
21     WSGIDaemonProcess x2gobroker user=x2gobroker group=x2gobroker processes=5 threads=15
22     WSGIPassAuthorization On
23
24     # default broker backend (default: inifile)
25     #SetEnv X2GOBROKER_DEFAULT_BACKEND zeroconf
26     #SetEnv X2GOBROKER_DEFAULT_BACKEND inifile
27     #SetEnv X2GOBROKER_DEFAULT_BACKEND ldap
28     #SetEnv X2GOBROKER_DEFAULT_BACKEND <some-other-broker-backend>
29
30     # path to the X2Go Session Broker's configuration file
31     #SetEnv X2GOBROKER_CONFIG /etc/x2go/x2gobroker.conf
32
33     # path to the X2Go Session Broker's session profiles file (when using the inifile backend)
34     #SetEnv X2GOBROKER_SESSIONPROFILES /etc/x2go/broker/x2gobroker-sessionprofiles.conf
35
36     # path to the X2Go Session Broker's agent command
37     #SetEnv X2GOBROKER_AGENT_CMD /usr/lib/x2go/x2gobroker-agent
38
39     # authentication socket of the X2Go Broker's PAM Authentication Service
40     #SetEnv X2GOBROKER_AUTHSOCKET /run/x2gobroker/x2gobroker-authservice.socket
41
42     # if you have to-be-statically-served files somewhere below the broker URL
43     #Alias /x2gobroker/static /some/static/path/
44
45     WSGIScriptAlias / /usr/bin/x2gobroker
46     WSGIProcessGroup x2gobroker
47
48     <Directory /usr/bin/x2gobroker>
49
50         <IfModule mod_authz_core.c>
51             # Apache 2.4
52             Require local
53         </IfModule>
54         <IfModule !mod_authz_core.c>
55             # Apache 2.2
56             Order Deny,Allow
57             Deny from all
58             Allow from 127.0.0.1
59             Allow from ::1
60         </IfModule>
61
62         Options +FollowSymLinks
63         Options -Indexes
64
65         SSLOptions +StdEnvVars
66
67     </Directory>
68
69     SSLEngine on
70     #   SSL Cipher Suite:
71     SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
72     #   Server Certificate:
73     SSLCertificateFile /etc/x2go/broker/ssl/broker.crt
74     #   Server Private Key:
75     SSLCertificateKeyFile /etc/x2go/broker/ssl/broker.key
76     #SSLCertificateChainFile /etc/x2go/broker/ssl/cacert.key
77     #SetEnvIf User-Agent ".*MSIE.*" \
78     #    nokeepalive ssl-unclean-shutdown \
79     #    downgrade-1.0 force-response-1.0
80
81 </VirtualHost>