From 0596c605843eb09a20e1758b4eb5d8d3565117aa Mon Sep 17 00:00:00 2001 From: Simon L Date: Mon, 27 Nov 2023 17:19:58 +0100 Subject: [PATCH] disable trace method and improve apache ssl conf Signed-off-by: Simon L --- Containers/apache/nextcloud.conf | 3 +++ Containers/mastercontainer/mastercontainer.conf | 6 ++++++ 2 files changed, 9 insertions(+) diff --git a/Containers/apache/nextcloud.conf b/Containers/apache/nextcloud.conf index c7f986f3..8f179328 100644 --- a/Containers/apache/nextcloud.conf +++ b/Containers/apache/nextcloud.conf @@ -49,4 +49,7 @@ Listen 8000 # See https://httpd.apache.org/docs/current/mod/mod_proxy.html#proxytimeout ProxyTimeout ${APACHE_MAX_TIME} + + # See https://httpd.apache.org/docs/trunk/mod/core.html#traceenable + TraceEnable Off diff --git a/Containers/mastercontainer/mastercontainer.conf b/Containers/mastercontainer/mastercontainer.conf index 701cb420..d1f4ed64 100644 --- a/Containers/mastercontainer/mastercontainer.conf +++ b/Containers/mastercontainer/mastercontainer.conf @@ -49,8 +49,14 @@ Listen 8080 SSLCertificateFile /etc/apache2/certs/ssl.crt SSLEngine on SSLProtocol -all +TLSv1.2 +TLSv1.3 + SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305 + SSLHonorCipherOrder off + SSLSessionTickets off # Increase timeout in case e.g. the initial download takes a long time Timeout 7200 ProxyTimeout 7200 + +# See https://httpd.apache.org/docs/trunk/mod/core.html#traceenable +TraceEnable Off