ServerName www
ServerRoot /usr/lib/apache2
ServerTokens Prod
ServerSignature Off
TraceEnable off

StartServers 1
MinSpareThreads 4
MaxSpareThreads 8
GracefulShutdownTimeout 1

KeepAliveTimeout 1800

DefaultRuntimeDir /tmp
ErrorLog stderr

TypesConfig /etc/mime.types

# very often required
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule autoindex_module modules/mod_autoindex.so

# Accept remote ip announced by reverse proxy
LoadModule remoteip_module modules/mod_remoteip.so
RemoteIPHeader X-Forwarded-For
RemoteIPInternalProxy 127.255.255.254
RemoteIPInternalProxy 192.168.254.0/24
RemoteIPInternalProxy 10.71.56.0/24
RemoteIPInternalProxy 10.71.57.0/24
RemoteIPInternalProxyInterface service

<Directory />
  Options None
  AllowOverride None
  Require all denied
</Directory>

<Directory /home/www>
  Options +ExecCGI +FollowSymlinks
  Require all granted
</Directory>

<Directory /home/www/etc>
  Options None
  AllowOverride None
  Require all denied
</Directory>

<Directory /home/www/temp>
  Options None
  AllowOverride None
  Require all denied
</Directory>

<FilesMatch "^(\.ht|\.access$|cgi_error\.log$|php\.ini$|\.user\.ini$)">
  Require all denied
</FilesMatch>

<IfDefine !proxy_php_fastcgi>
  Define enable_fastcgi
</IfDefine>

<IfDefine !wordpress>
  Define enable_fastcgi
</IfDefine>

DirectoryIndex index.php index.pl index.cgi index.html index.html.var index.htm index.htm.var home.html home.html.var default.html default.html.var

<IfDefine enable_fastcgi>
  LoadModule fcgid_module modules/mod_fcgid.so
  MaxRequestLen 15728640
  FcgidProcessTableFile /tmp/fcgid.shm
  FcgidIPCDir /tmp
  FcgidMaxProcesses 16
  FcgidIOTimeout 120

  <IfDefine !wordpress>
    FcgidWrapper "/usr/bin/python /usr/lib/cm4all/launcher/fcgi.py" .py
    FcgidWrapper "/usr/bin/python /usr/lib/cm4all/launcher/fcgi.py" .pyc
    FcgidWrapper "/usr/bin/python3 /usr/lib/cm4all/launcher/fcgi.py" .py3
    FcgidWrapper "/usr/bin/python3 /usr/lib/cm4all/launcher/fcgi.py" .py3c
    AddHandler fcgid-script .py .pyc .py3 .py3c
  </IfDefine>
</IfDefine>

<IfDefine proxy_php_fastcgi>
  <Proxy "proxy:unix:/run/cm4all/fastcgi/php.socket|fcgi://localhost" iobuffersize=65536 enablereuse=off>
  </Proxy>

  <FilesMatch \.php$>
    SetHandler "proxy:unix:/run/cm4all/fastcgi/php.socket|fcgi://localhost"
    ProxyFCGIBackendType GENERIC
    CGIPassAuth On
  </FilesMatch>
</IfDefine>

<IfDefine !proxy_php_fastcgi>
  FcgidWrapper /usr/bin/php-cgi .php
</IfDefine>

<IfDefine enable_fastcgi>
  AddHandler fcgid-script .php
</IfDefine>

<IfDefine !wordpress>
  LoadModule cgid_module modules/mod_cgid.so
  AddHandler cgi-script .cgi .pl .sh .rb
</IfDefine>

<IfDefine wordpress>
  Define I_AddDeflateModule
  Define I_AddFilterModule
  Define I_AccessCompatModule
</IfDefine>

<IfDefine standard>
  Define I_AddDeflateModule
  Define I_AddFilterModule
  Define I_AccessCompatModule
</IfDefine>

<IfDefine I_AddDeflateModule>
  LoadModule deflate_module modules/mod_deflate.so
</IfDefine>
<IfDefine I_AddFilterModule>
  LoadModule filter_module modules/mod_filter.so
</IfDefine>
<IfDefine I_AccessCompatModule>
  LoadModule access_compat_module modules/mod_access_compat.so
</IfDefine>

<IfDefine standard>
<Directory /home/www>
  AllowOverride All
  <IfModule mod_headers.c>
    Header append Vary: Cookie
  </IfModule>
</Directory>
</IfDefine>

<IfDefine wordpress>
<Directory /home/www/public>
  AllowOverride All
  <IfModule mod_headers.c>
    Header append Vary: Cookie
  </IfModule>
</Directory>
<Files wp-config.php>
  Require all denied
</Files>
</IfDefine>

<IfDefine !noinclude>
  IncludeOptional /home/www/et[c]/httpd.con[f]
  IncludeOptional /home/www/et[c]/httpd-*.conf
</IfDefine>