ServerName www
ServerRoot /usr/lib/apache2
ServerTokens Prod
ServerSignature Off
TraceEnable off

StartServers 1
MinSpareThreads 4
MaxSpareThreads 8
GracefulShutdownTimeout 1

KeepAliveTimeout 1800

DefaultRuntimeDir /tmp
ErrorLog stderr

TypesConfig /etc/mime.types

# very often required
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule autoindex_module modules/mod_autoindex.so

# Accept remote ip announced by reverse proxy
LoadModule remoteip_module modules/mod_remoteip.so
RemoteIPHeader X-Forwarded-For
RemoteIPInternalProxy 127.255.255.254
RemoteIPInternalProxy 192.168.254.0/24
RemoteIPInternalProxy 10.71.56.0/24
RemoteIPInternalProxy 10.71.57.0/24
RemoteIPInternalProxyInterface service

<Directory />
  Options None
  AllowOverride None
  Require all denied
</Directory>

<Directory /home/www>
  Options +ExecCGI +FollowSymlinks
  Require all granted
</Directory>

<Directory /home/www/etc>
  Options None
  AllowOverride None
  Require all denied
</Directory>

<Directory /home/www/temp>
  Options None
  AllowOverride None
  Require all denied
</Directory>

<FilesMatch "^(\.ht|\.access$|cgi_error\.log$|php\.ini$|\.user\.ini$)">
  Require all denied
</FilesMatch>

DirectoryIndex index.php index.pl index.cgi index.html index.html.var index.htm index.htm.var home.html home.html.var default.html default.html.var

LoadModule fcgid_module modules/mod_fcgid.so
MaxRequestLen 15728640
FcgidProcessTableFile /tmp/fcgid.shm
FcgidIPCDir /tmp
FcgidMaxProcesses 16
FcgidIOTimeout 120

FcgidWrapper "/usr/bin/python /usr/lib/cm4all/launcher/fcgi.py" .py
FcgidWrapper "/usr/bin/python /usr/lib/cm4all/launcher/fcgi.py" .pyc
FcgidWrapper "/usr/bin/python3 /usr/lib/cm4all/launcher/fcgi.py" .py3
FcgidWrapper "/usr/bin/python3 /usr/lib/cm4all/launcher/fcgi.py" .py3c
AddHandler fcgid-script .py .pyc .py3 .py3c

<IfDefine proxy_php_fastcgi>
<FilesMatch \.php$>
SetHandler "proxy:unix:/run/cm4all/fastcgi/php.socket|fcgi://localhost"
ProxyFCGIBackendType GENERIC
CGIPassAuth On
</FilesMatch>
</IfDefine>

<IfDefine !proxy_php_fastcgi>
FcgidWrapper /usr/bin/php-cgi .php
</IfDefine>

AddHandler fcgid-script .php

LoadModule cgid_module modules/mod_cgid.so
AddHandler cgi-script .cgi .pl .sh .rb

<IfDefine wordpress>
  Define I_AddDeflateModule
  Define I_AddFilterModule
  Define I_AccessCompatModule
</IfDefine>

<IfDefine standard>
  Define I_AddDeflateModule
  Define I_AddFilterModule
  Define I_AccessCompatModule
</IfDefine>

<IfDefine I_AddDeflateModule>
  LoadModule deflate_module modules/mod_deflate.so
</IfDefine>
<IfDefine I_AddFilterModule>
  LoadModule filter_module modules/mod_filter.so
</IfDefine>
<IfDefine I_AccessCompatModule>
  LoadModule access_compat_module modules/mod_access_compat.so
</IfDefine>

<IfDefine standard>
<Directory /home/www>
  AllowOverride All
  <IfModule mod_headers.c>
    Header append Vary: Cookie
  </IfModule>
</Directory>
</IfDefine>

<IfDefine wordpress>
<Directory /home/www/public>
  AllowOverride All
  <IfModule mod_headers.c>
    Header append Vary: Cookie
  </IfModule>
</Directory>
<Files wp-config.php>
  Require all denied
</Files>
</IfDefine>

<IfDefine !noinclude>
IncludeOptional /home/www/et[c]/httpd.con[f]
IncludeOptional /home/www/et[c]/httpd-*.conf
</IfDefine>