installation/pleroma-apache.conf: OCSP stapling needs to be outside of the virtualhos...
authorshibayashi <shibayashi@cypherpunk.observer>
Mon, 3 Sep 2018 19:41:21 +0000 (21:41 +0200)
committershibayashi <shibayashi@cypherpunk.observer>
Mon, 3 Sep 2018 19:41:21 +0000 (21:41 +0200)
installation/pleroma-apache.conf

index c70d521389d3feebb349647d138446417d78716f..992c0c900361562ed6909324a7844dc846793a1f 100644 (file)
@@ -27,12 +27,6 @@ CustomLog ${APACHE_LOG_DIR}/access.log combined
     SSLCompression          off
     SSLSessionTickets       off
 
-    # OCSP Stapling, only in httpd 2.3.3 and later
-    SSLUseStapling          on
-    SSLStaplingResponderTimeout 5
-    SSLStaplingReturnResponderErrors off
-    SSLStaplingCache        shmcb:/var/run/ocsp(128000)
-
     Header always set X-Xss-Protection "1; mode=block"
     Header always set X-Frame-Options "DENY"
     Header always set X-Content-Type-Options "nosniff"
@@ -54,3 +48,9 @@ CustomLog ${APACHE_LOG_DIR}/access.log combined
     RequestHeader set Host "pleroma.example.com"
     ProxyPreserveHost On
 </VirtualHost>
+
+# OCSP Stapling, only in httpd 2.3.3 and later
+SSLUseStapling          on
+SSLStaplingResponderTimeout 5
+SSLStaplingReturnResponderErrors off
+SSLStaplingCache        shmcb:/var/run/ocsp(128000)
\ No newline at end of file