marce’s blog

servero ~ # less /etc/apache2/vhosts.d/template.vhost

# %VHOST%.towershade.org configuration file/template.vhost

<VirtualHost *:80>
        ServerName %VHOST%.towershade.org
        ServerAlias %VHOST%.towershade.lan
        ServerAdmin root@%VHOST%.towershade.org
        DocumentRoot "/var/www/%VHOST%.towershade.org/htdocs"

        <IfModule mpm_peruser_module>
                ServerEnvironment apache apache
        </IfModule>

        ErrorLog /var/www/%VHOST%.towershade.org/log/error_log
        LogLevel warn

        <IfModule log_config_module>
                CustomLog /var/www/%VHOST%.towershade.org/log/access_log combined
        </IfModule>

</VirtualHost>

<IfModule ssl_module>

<VirtualHost *:443>

        DocumentRoot "/var/www/%VHOST%.towershade.org/htdocs"
        ServerName %VHOST%.towershade.org:443
        ServerAlias %VHOST%.towershade.lan:443
        ServerAdmin root@%VHOST%.towershade.org

        ErrorLog /var/www/%VHOST%.towershade.org/log/ssl_error_log

        <IfModule log_config_module>
                TransferLog /var/www/%VHOST%.towershade.org/log/ssl_access_log
        </IfModule>

        SSLEngine on

        SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+EXP:+eNULL

        SSLCertificateFile /etc/apache2/ssl/server.crt
        #SSLCertificateFile /etc/apache2/ssl/server-dsa.crt

        SSLCertificateKeyFile /etc/apache2/ssl/server.key
        #SSLCertificateKeyFile /etc/apache2/ssl/server-dsa.key

        #SSLCertificateChainFile /etc/apache2/ssl/ca.crt

        #SSLCACertificatePath /etc/apache2/ssl/ssl.crt
        #SSLCACertificateFile /etc/apache2/ssl/ca-bundle.crt

        <FilesMatch ".(cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory "/var/www/%VHOST%.towershade.org/cgi-bin">
                SSLOptions +StdEnvVars
        </Directory>

        <IfModule setenvif_module>
                BrowserMatch ".*MSIE.*"                          nokeepalive ssl-unclean-shutdown                          downgrade-1.0 force-response-1.0
        </IfModule>

        <IfModule log_config_module>
                CustomLog /var/www/%VHOST%.towershade.org/log/ssl_request_log                          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"
        </IfModule>

</VirtualHost>

</IfModule>

<Directory "/var/www/%VHOST%.towershade.org/htdocs">

    Options Indexes FollowSymLinks

    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>