Gecko [ oric.aiou.edu.pk ]

Name	Size	Permission
aaou2024.aiou.edu.pk.conf	327 B	-rw-r--r--
aic.aiou.edu.pk.conf	312 B	-rw-r--r--
cesa2025.aiou.edu.pk.conf	315 B	-rw-r--r--
default-ssl.conf	9.93 KB	-rw-r--r--
icecd.aiou.edu.pk.conf	310 B	-rw-r--r--
icrpe.aiou.edu.pk.conf	308 B	-rw-r--r--
nacte.aiou.edu.pk.conf	230 B	-rw-r--r--
oric.aiou.edu.pk.conf	315 B	-rw-r--r--

Code Editor : default-ssl.conf

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
	        ServerName icrpe.aiou.edu.pk

DocumentRoot /var/www/html/icrpe25
				
                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined
                SSLEngine on
			SSLCertificateFile /aiou/apache/ssl/server.crt
			SSLCertificateKeyFile /aiou/apache/ssl/server.key
			SSLCertificateChainFile /aiou/apache/ssl/server-ca.crt				
                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>
	</VirtualHost>

<VirtualHost _default_:443>
    ServerAdmin webmaster@localhost
    ServerName nacte.aiou.edu.pk
    
    # SSL Configuration
    SSLEngine on
    SSLCertificateFile /aiou/apache/ssl/server.crt
    SSLCertificateKeyFile /aiou/apache/ssl/server.key
    SSLCertificateChainFile /aiou/apache/ssl/server-ca.crt
    
    # Next.js Proxy Configuration
    ProxyPreserveHost On
    ProxyPass / http://localhost:3000/
    ProxyPassReverse / http://localhost:3000/

# WebSocket Support
    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteRule /(.*) ws://localhost:3000/$1 [P,L]

# Security Headers
    Header always set Strict-Transport-Security "max-age=63072000"
    Header always set X-Frame-Options DENY
    Header always set X-Content-Type-Options nosniff

# Logs
    ErrorLog ${APACHE_LOG_DIR}/nextjs_error.log
    CustomLog ${APACHE_LOG_DIR}/nextjs_access.log combined
</VirtualHost>

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
                ServerName aaou2024.aiou.edu.pk

DocumentRoot /var/www/html/aaou2024.aiou.edu.pk

ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined
                SSLEngine on
                        SSLCertificateFile /aiou/apache/ssl/server.crt
                        SSLCertificateKeyFile /aiou/apache/ssl/server.key
                        SSLCertificateChainFile /aiou/apache/ssl/server-ca.crt
                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>
        </VirtualHost>

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
                ServerName aaou2024-test.aiou.edu.pk

DocumentRoot /var/www/html/aaou

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
                ServerName oric.aiou.edu.pk

DocumentRoot /var/www/html/oric.aiou.edu.pk

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
                ServerName aic.aiou.edu.pk

DocumentRoot /var/www/html/aic.aiou.edu.pk

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
                ServerName cesa2025.aiou.edu.pk

DocumentRoot /var/www/html/cesa2025

<VirtualHost _default_:443>
                ServerAdmin webmaster@localhost
                ServerName icecd.aiou.edu.pk

DocumentRoot /var/www/html/icecd2025

#   issuer chain before deciding the certificate is not valid.
		#SSLVerifyClient require
		#SSLVerifyDepth  10

#   SSL Engine Options:
		#   Set various options for the SSL engine.
		#   o FakeBasicAuth:
		#	 Translate the client X.509 into a Basic Authorisation.  This means that
		#	 the standard Auth/DBMAuth methods can be used for access control.  The
		#	 user name is the `one line' version of the client's X.509 certificate.
		#	 Note that no password is obtained from the user. Every entry in the user
		#	 file needs this password: `xxj31ZMTZzkVA'.
		#   o ExportCertData:
		#	 This exports two additional environment variables: SSL_CLIENT_CERT and
		#	 SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
		#	 server (always existing) and the client (only existing when client
		#	 authentication is used). This can be used to import the certificates
		#	 into CGI scripts.
		#   o StdEnvVars:
		#	 This exports the standard SSL/TLS related `SSL_*' environment variables.
		#	 Per default this exportation is switched off for performance reasons,
		#	 because the extraction step is an expensive operation and is usually
		#	 useless for serving static content. So one usually enables the
		#	 exportation for CGI and SSI requests only.
		#   o OptRenegotiate:
		#	 This enables optimized SSL connection renegotiation handling when SSL
		#	 directives are used in per-directory context.
		#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
#		<FilesMatch "\.(cgi|shtml|phtml|php)$">
#				SSLOptions +StdEnvVars
#		</FilesMatch>
#		<Directory /usr/lib/cgi-bin>
#				SSLOptions +StdEnvVars
#		</Directory>

#   SSL Protocol Adjustments:
		#   The safe and default but still SSL/TLS standard compliant shutdown
		#   approach is that mod_ssl sends the close notify alert but doesn't wait for
		#   the close notify alert from client. When you need a different shutdown
		#   approach you can use one of the following variables:
		#   o ssl-unclean-shutdown:
		#	 This forces an unclean shutdown when the connection is closed, i.e. no
		#	 SSL close notify alert is send or allowed to received.  This violates
		#	 the SSL/TLS standard but is needed for some brain-dead browsers. Use
		#	 this when you receive I/O errors because of the standard approach where
		#	 mod_ssl sends the close notify alert.
		#   o ssl-accurate-shutdown:
		#	 This forces an accurate shutdown when the connection is closed, i.e. a
		#	 SSL close notify alert is send and mod_ssl waits for the close notify
		#	 alert of the client. This is 100% SSL/TLS standard compliant, but in
		#	 practice often causes hanging connections with brain-dead browsers. Use
		#	 this only for browsers where you know that their SSL implementation
		#	 works correctly.
		#   Notice: Most problems of broken clients are also related to the HTTP
		#   keep-alive facility, so you usually additionally want to disable
		#   keep-alive for those clients, too. Use variable "nokeepalive" for this.
		#   Similarly, one has to force some clients to use HTTP/1.0 to workaround
		#   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
		#   "force-response-1.0" for this.
		# BrowserMatch "MSIE [2-6]" \
		#		nokeepalive ssl-unclean-shutdown \
		#		downgrade-1.0 force-response-1.0

#	</VirtualHost>
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

${this.title}

Code Editor : default-ssl.conf