aboutsummaryrefslogtreecommitdiffstats
path: root/modules/apache/templates
Commit message (Collapse)AuthorAgeFilesLines
* Block expensive svnweb operations without a cookieDan Fandrich12 days1-0/+9
| | | | | | | | | If an expensive request comes in from anyone without a cookie attached, redirect to a page where the cookie is set using JavaScript, then redirect back. This should block robots from these paths, most of which do not support JavaScript. The collateral damage is that a JavaScript browser is now required for users to access those paths. The contents of the cookie is not currently checked, merely that it is set.
* Reduce the number of SVN paths considered too expensiveDan Fandrich12 days1-4/+3
| | | | | | | These two don't seem to contribute much to the load seen when robots start hitting svnweb that hard. Also, remove a separate query block that seems to not help much (and which was hard to find in a different location in the file).
* Block expensive operations on another Google botDan Fandrich2025-05-191-2/+2
| | | | | | | The last range was actually another Google bot, which clearly doesn't support Crawl-Delay:. Rather than block one IP range, which isn't going to work long-term since they have so many ranges, block only expensive operations via its new User-Agent: string instead.
* Block another abusive IP address rangeDan Fandrich2025-05-191-1/+1
|
* Block more abusive IP address rangesDan Fandrich2025-05-171-1/+1
| | | | These comprise roughly 20% of current requests.
* Rotate apache logs weekly on sucuk to keep them smallerJani Välimaa2025-05-101-0/+3
|
* Block PrestoJani Välimaa2025-05-041-1/+1
| | | | Most probably Presto is not used as user agent in browsers used by potential users of Mageia.
* Block TridentJani Välimaa2025-05-041-1/+1
|
* Block a few more thingsPascal Terjan2025-04-161-1/+4
|
* Expand the IP ranges banned for hosting spidersDan Fandrich2025-03-071-1/+1
| | | | Widen the CIDR mask to catch many more addresses used by these bots.
* Fix a typo in the last commitDan Fandrich2024-10-301-1/+1
|
* Reduce the number of old Apache logs on friteuse (mga#33670)Dan Fandrich2024-10-301-1/+5
| | | | | They're currently taking up half the available disk which is currently full.
* Remove conditionals for releases older than Mageia 6Dan Fandrich2024-10-151-1/+1
| | | | | This eliminates a bunch of conditionals, simplifying the configuration. We no longer have any servers running on a release older than this.
* Enable transparent compression on Apache (mga#6969)Dan Fandrich2024-10-151-0/+36
| | | | | | This will increase CPU usage somewhat, but the reduction in required bandwidth ought to make it a win for users. The compression level is set to the lowest setting to keep CPU usage down.
* Use @ when accessing variables in templatesDan Fandrich2024-10-0512-43/+43
| | | | | | | | Access without the @ symbol is the older method and is discouraged. This take leaves alone accesses of variables that are defined within the template, which don't seem to allow an @. This batch of changes is for templates related to web sites.
* Revert "Use @ when accessing variables in templates"Dan Fandrich2024-10-0413-35/+35
| | | | | | Variables defined within a template can't be accessed with @. This change needs to be reworked to eliminate those cases. This reverts commits 2c7da665 and ae197622.
* Use @ when accessing variables in templatesDan Fandrich2024-10-0413-35/+35
| | | | Access without the @ symbol is the older method and is discouraged.
* Block a couple of IP address ranges on svnwebDan Fandrich2024-09-041-1/+6
| | | | | | There was a bot there was hammering us for weeks, but which doesn't identify itself in the User-Agent string. Also, add another couple of bot User-Agent strings.
* Block expensive SVN operations on robots on svnwebDan Fandrich2024-09-031-0/+8
| | | | | | This will result in most operations other than showing a directory or downloading a specific version of a file being blocked. ClaudeBot and Amazonbot remain completely blocked.
* Fix typos in commentsDan Fandrich2024-08-151-1/+1
| | | | This should result in no difference in configuration.
* Ban two robots from svnwebDan Fandrich2024-04-251-0/+10
|
* Switch links to https: that are found in commentsDan Fandrich2024-01-251-1/+1
| | | | These are for use by humans only.
* apache logrotate: add sharedscripts (mga#29620)Thomas Backlund2022-07-051-0/+1
|
* work around crash during logrotate (mga#29620)Thomas Backlund2021-11-281-1/+1
|
* apache: logrotate: keep 60 days of logs on duvelThomas Backlund2021-03-191-1/+2
|
* apache: logrotate daily on duvelThomas Backlund2021-03-061-0/+4
|
* apache: update logrotate to use systemctl callsThomas Backlund2021-03-061-4/+1
|
* add missing newlineThomas Backlund2018-09-051-1/+1
|
* apache: protect any hidden files or dirs with 404Thomas Backlund2018-09-041-0/+4
|
* Allow to not use Location directive in apache ( but keep past use by default)Nicolas Lécureuil2017-04-171-0/+2
|
* apache fcgid: support multiple script aliasesOlivier Blin2017-04-101-1/+3
|
* apache: rename vhost_catalyst_app template as vhost_fcgidOlivier Blin2017-04-101-0/+0
|
* catalyst_app: simplify using AddHandlerOlivier Blin2017-04-081-3/+1
|
* Allow having static aliasPascal Terjan2017-04-081-1/+3
|
* catalyst_app: use fcgid instead of fastcgiOlivier Blin2017-04-081-1/+4
| | | | fastcgi is not available on Mageia 5.
* catalyst_app: remove duplicate aliases, already in vhost::baseOlivier Blin2017-04-081-3/+0
|
* apache: fix vhost_simple for apache 2.4Thomas Backlund2016-03-141-1/+6
|
* enforce hardened sslThomas Backlund2016-03-012-3/+8
|
* Make vhost_base compatible with Apache 2.4Pascal Terjan2016-02-071-1/+6
|
* apache: rename ssl.conf as ssl_vhost.confOlivier Blin2015-11-301-0/+0
| | | | Not to conflict with packaged file from Mageia >= 3
* Attempt to support alias in catalyst_appPascal Terjan2014-04-041-3/+2
|
* Add content parameter to apache::vhost::reverse_proxyNicolas Vigier2013-10-061-0/+2
|
* apache: move ssl vhost configuration in a separate fileNicolas Vigier2013-06-252-10/+11
|
* apache: add option to select default redirect URLNicolas Vigier2013-05-231-1/+9
| | | | | Add an option to change the URL to redirect to in case of unknown vhost. If the option is not provided, a 404 error is returned.
* apache: remove "dynamic lookup" warningsNicolas Vigier2012-12-181-1/+1
|
* Create apache::var and move apache config optionsNicolas Vigier2012-12-101-1/+1
| | | | Move apache options to apache::var class
* Move custom 404 config to www vhost only (patch from rda)Nicolas Vigier2012-09-191-1/+0
|
* Patch from romain setting custom 404 for wwwPascal Terjan2012-08-281-0/+1
|
* add temporary fix on champagne for CVE-2011-3192Nicolas Vigier2012-05-311-0/+12
|
* move the others files in subdirectoryMichael Scherer2012-04-022-0/+0
|