Merge pull request #203 from wolfyshy/master

Update Apache configuration a bit
This commit is contained in:
Eugen Rochko 2017-05-07 00:51:34 +02:00 committed by GitHub
commit 1f202dedc1
1 changed files with 12 additions and 1 deletions

View File

@ -191,15 +191,26 @@ Setting up Mastodon behind Apache is possible as well, although you will need to
DocumentRoot /home/mastodon/live/public/ DocumentRoot /home/mastodon/live/public/
Header add Strict-Transport-Security "max-age=31536000" Header always set Referrer-Policy "strict-origin-when-cross-origin"
Header always set Strict-Transport-Security "max-age=31536000"
SSLEngine on SSLEngine on
SSLProtocol -all +TLSv1.2 SSLProtocol -all +TLSv1.2
SSLHonorCipherOrder on SSLHonorCipherOrder on
SSLCipherSuite EECDH+AESGCM:AES256+EECDH:AES128+EECDH SSLCipherSuite EECDH+AESGCM:AES256+EECDH:AES128+EECDH
SSLCompression off
SSLSessionTickets off
SSLStaplingResponderTimeout 5
SSLStaplingReturnResponderErrors off
SSLUseStapling on
SSLCertificateFile example.pem SSLCertificateFile example.pem
SSLCertificateKeyFile example.key SSLCertificateKeyFile example.key
<Location /assets>
Header always set Cache-Control "public, max-age=31536000, immutable"
</Location>
ProxyPreserveHost On ProxyPreserveHost On
RequestHeader set X-Forwarded-Proto "https" RequestHeader set X-Forwarded-Proto "https"
ProxyPass /500.html ! ProxyPass /500.html !