mirror of
https://github.com/ansibleguy/infra_apache.git
synced 2026-10-18 01:30:41 +02:00
removed unused config, updated requirements to use ansible-galaxy
This commit is contained in:
@@ -1,9 +1,5 @@
|
||||
---
|
||||
|
||||
# main switches
|
||||
configure_anti_ddos: true # mod_evasive
|
||||
configure_security: true # https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu
|
||||
|
||||
# default config => is overwritten by provided config
|
||||
default_apache:
|
||||
sites: {}
|
||||
@@ -166,37 +162,6 @@ default_site_config:
|
||||
key_size:
|
||||
email:
|
||||
|
||||
default_modules:
|
||||
# <IfModule ${MOD}>
|
||||
# </IfModule>
|
||||
prefork: # see: https://httpd.apache.org/docs/2.4/mod/mpm_common.html
|
||||
ifname: 'prefork.c'
|
||||
settings:
|
||||
StartServers: 5
|
||||
MinSpareServers: 5
|
||||
MaxSpareServers: 10
|
||||
MaxRequestWorkers: 256
|
||||
MaxConnectionsPerChild: 0
|
||||
mod_evasive:
|
||||
ifname: 'mod_evasive20.c'
|
||||
settings:
|
||||
DOSHashTableSize: 4096
|
||||
DOSPageCount: 25
|
||||
DOSSiteCount: 100
|
||||
DOSPageInterval: 1
|
||||
DOSSiteInterval: 1
|
||||
DOSBlockingPeriod: 60
|
||||
DOSLogDir: "{{ CONFIG.log.path }}"
|
||||
# DOSSystemCommand:
|
||||
# DOSEmailNotify: mail@yourdomain.com
|
||||
DOSWhitelist: [
|
||||
'127.0.0.*', '192.168.*.*', '10.*.*.*', '172.16.*.*', '172.17.*.*', '172.18.*.*', '172.19.*.*',
|
||||
'172.20.*.*', '172.21.*.*', '172.22.*.*', '172.23.*.*', '172.24.*.*', '172.25.*.*', '172.26.*.*',
|
||||
'172.27.*.*', '172.28.*.*', '172.29.*.*', '172.30.*.*', '172.31.*.*', '172.32.*.*',
|
||||
]
|
||||
|
||||
APACHE_MODULES: "{{ default_modules | combine(modules, recursive=true) }}"
|
||||
|
||||
apache_config_graylist: [
|
||||
'SSLEngine', 'SSLCertificateKeyFile', 'SSLCertificateFile', 'SSLCertificateChainFile', 'ErrorLog', 'CustomLog', 'ServerAdmin',
|
||||
'ServerAlias', 'ServerName', 'Redirect'
|
||||
|
||||
+1
-3
@@ -10,6 +10,4 @@ collections:
|
||||
source: 'https://galaxy.ansible.com'
|
||||
|
||||
roles:
|
||||
- src: 'https://github.com/ansibleguy/infra_certs.git'
|
||||
version: 'stable'
|
||||
name: 'ansibleguy.infra_certs'
|
||||
- src: 'ansibleguy.infra_certs'
|
||||
|
||||
Reference in New Issue
Block a user