🦈🏠🐜 Initial Commit 🐜🦈🏠

This commit is contained in:
casjay
2023-04-06 19:28:01 -04:00
commit 9b376b0fd6
166 changed files with 79846 additions and 0 deletions

View File

@@ -0,0 +1,355 @@
;#<?php exit(); ?>##
;#########################################################
; General Config #
;#########################################################
config_version = 63
;#########################################################
; Auto Update #
;#########################################################
github_force_branch = "master"
composer_binary_path = "composer"
hide_ampache_messages = "false"
;#########################################################
; Path Vars #
;#########################################################
;http_host = "localhost"
;http_port = 80
;web_path = ""
;local_web_path = "http://localhost/ampache"
;#########################################################
; Database #
;#########################################################
database_name = ampache
database_hostname = localhost
database_port = 3306
database_username = root
;database_password = password
database_charset = "utf8mb4"
database_collation = "utf8mb4_unicode_ci"
;#########################################################
; Session and Security #
;#########################################################
secret_key = "abcdefghijklmnoprqstuvwyz0123456"
session_length = 3600
stream_length = 7200
remember_length = 604800
session_name = ampache
session_cookielife = 0
session_cookiesecure = 0
auth_methods = "mysql"
;external_authenticator = "/usr/sbin/pwauth"
;auth_password_save = "true"
;logout_redirect = "http://sso.example.com/logout"
access_control = "true"
require_session = "true"
require_localnet_session = "true"
;prevent_multiple_logins = "true"
;disable_xframe_sameorigin = "true"
;#########################################################
; Metadata #
;#########################################################
getid3_tag_order = "vorbiscomment,id3v2,id3v1,quicktime,matroska,ape,asf,avi,mpeg,riff"
;getid3_detect_id3v2_encoding = "true"
;write_id3 = "true"
;write_id3_art = "true"
metadata_order = "getID3,MusicBrainz,TheAudioDb,filename"
metadata_order_video = "filename,getID3"
deferred_ext_metadata = "true"
additional_genre_delimiters = "[/]{2}|[/\\\\|,;]"
;enable_custom_metadata = "true"
;#########################################################
; File Tags #
;write_tags = "true"
;#########################################################
; Catalog #
;#########################################################
catalog_file_pattern = "mp3|mpc|m4p|m4a|aac|ogg|oga|wav|aif|aiff|rm|wma|asf|flac|opus|spx|ra|ape|shn|wv"
catalog_video_pattern = "avi|mpg|mpeg|flv|m4v|mp4|webm|mkv|wmv|ogv|mov|divx|m2ts"
catalog_playlist_pattern = "m3u|m3u8|pls|asx|xspf"
catalog_prefix_pattern = "The|An|A|Die|Das|Ein|Eine|Les|Le|La"
;catalog_disable = "true"
;catalog_filter = "true"
;delete_from_disk = "true"
;catalog_verify_by_time = "true"
;#########################################################
; Program Settings #
;#########################################################
;downsample_remote = "true"
;track_user_ip = "true"
;user_ip_cardinality = "42"
;allow_zip_download = "true"
;allow_zip_types = "album"
;art_zip_add = "true"
;file_zip_comment = "Ampache - Zip Batch Download"
;webplayer_debug = "true"
;waveform = "true"
;waveform_color = "#FF0000"
;waveform_height = 32
;waveform_width = 400
;tmp_dir_path = "/tmp"
;throttle_download = 10
;generate_video_preview = "true"
;no_symlinks = "true"
use_auth = "true"
default_auth_level = "guest"
;skip_timer = 20
ratings = "true"
;rating_browse_filter = "true"
;rating_browse_minimum_stars = 1
;rating_file_tag_user = 1
directplay = "true"
sociable = "true"
;licensing = "true"
;demo_mode = "true"
;simple_user_mode = "true"
;memory_cache = "true"
;memory_limit = 32
;album_art_preferred_filename = "folder.jpg"
;artist_art_preferred_filename = "folder.jpg"
;artist_art_folder = "/data/htdocs/www/art"
;album_art_store_disk = "true"
;local_metadata_dir = "/metadata"
;max_upload_size = 1048576
;album_art_min_width = 100
;album_art_max_width = 1024
;album_art_min_height = 100
;album_art_max_height = 1024
;resize_images = "true"
playlist_art = "true"
;statistical_graphs = "true"
art_order = "db,tags,folder,spotify,musicbrainz"
;gather_song_art = "true"
;show_song_art = "true"
;spotify_art_filter = "artist"
;art_search_limit = 15
;show_similar = "true"
;hide_search = "true"
;allow_upload_scripts = "true"
;#########################################################
; API keys #
;#########################################################
lastfm_api_key = "d5df942424c71b754e54ce1832505ae2"
lastfm_api_secret = ""
;spotify_client_id = ""
;spotify_client_secret = ""
;wanted = "true"
wanted_types = "album,official"
;wanted_auto_accept = "true"
;label = "true"
;broadcast = "true"
live_stream = "true"
podcast = "true"
;websocket_address = "ws://localhost:8100"
refresh_limit = "60"
;use_now_playing_embedded = "true"
;now_playing_refresh_limit = "-1"
;now_playing_css_file = "templates/now-playing.css"
show_footer_statistics = "true"
;use_rss = "true"
;allow_php_themes = "true"
;#########################################################
; Debugging #
;#########################################################
debug = "false"
debug_level = 2
log_path = "/data/logs/httpd"
log_filename = "ampache.log"
;#########################################################
; Encoding Settings #
;#########################################################
site_charset = UTF-8
;lc_charset = "ISO8859-1"
;mb_detect_order = "ASCII,UTF-8,EUC-JP,ISO-2022-JP,SJIS,JIS"
;#########################################################
; Custom actions (optional) #
;#########################################################
;custom_play_action_title_0 = ""
;custom_play_action_icon_0 = ""
;custom_play_action_run_0 = ""
; Example for Karaoke playing
;custom_play_action_title_0 = "Karaoke"
;custom_play_action_icon_0 = "microphone"
;custom_play_action_run_0 = "sox \"%f\" -p oops | ffmpeg -i pipe:0 -f %c pipe:1"
;#########################################################
; LDAP login info (optional) #
;#########################################################
;ldap_url = "ldap://localhost/"
;ldap_url = "ldaps://localhost/"
;ldap_username = ""
;ldap_password = ""
;ldap_search_dn = "ou=People,dc=yoursubdomain,dc=yourdomain,dc=yourtld"
;ldap_objectclass = "posixAccount" ; OpenLDAP
;ldap_objectclass = "organizationalPerson" ; Microsoft Active Directory
;ldap_filter = "(uid=%v)" ; OpenLDAP
;ldap_filter = "(sAMAccountName=%v)" ; Microsoft Active Directory
;ldap_require_group = "cn=yourgroup,ou=yourorg,dc=yoursubdomain,dc=yourdomain,dc=yourtld"
;ldap_name_field = "cn"
;ldap_name_field = "displayName"
;ldap_email_field = "mail"
;ldap_avatar_field = "jpegPhoto"
;ldap_avatar_mime = "image/jpeg"
;ldap_protocol_version = 3
;ldap_start_tls = "true"
;ldap_member_attribute = "member"
;ldap_member_attribute = "memberuid"
;#########################################################
; OpenID login info (optional) #
;#########################################################
;openid_required_pape = ""
;#########################################################
; Public Registration settings, defaults to disabled #
;#########################################################
;auto_create = "true"
;external_auto_update = "true"
;allow_public_registration = "true"
;captcha_public_reg = "true"
;admin_notify_reg = "true"
;admin_enable_required = "true"
;auto_user = "guest"
;user_agreement = "true"
;user_no_email_confirm = "true"
;cookie_disclaimer = "true"
registration_display_fields = "fullname,website"
registration_mandatory_fields = "fullname"
;#########################################################
; These options control the dynamic downsampling based #
; on current usage #
; *Note* Transcoding must be enabled and working #
;#########################################################
;max_bit_rate = 576
;min_bit_rate = 48
;#########################################################
; Transcode Settings #
;#########################################################
;transcode_m4a = "allowed"
;transcode_flac = "required"
;transcode_mpc = "required"
;transcode_ogg = "required"
;transcode_oga = "required"
;transcode_opus = "required"
;transcode_wav = "required"
;transcode_wma = "required"
;transcode_aif = "required"
;transcode_aiff = "required"
;transcode_ape = "required"
;transcode_shn = "required"
transcode_mp3 = "allowed"
;transcode_avi = "allowed"
;transcode_flv = "allowed"
;transcode_mkv = "allowed"
;transcode_mpg = "allowed"
;transcode_mpeg = "allowed"
;transcode_m4v = "allowed"
;transcode_mp4 = "allowed"
;transcode_mov = "allowed"
;transcode_wmv = "allowed"
;transcode_ogv = "allowed"
;transcode_divx = "allowed"
;transcode_m2ts = "allowed"
;transcode_webm = "allowed"
;encode_target = mp3
;encode_video_target = webm
;encode_target_flac = opus
;transcode_player_webplayer_m4a = "required"
;transcode_player_webplayer_flac = "required"
;transcode_player_webplayer_mpc = "required"
;encode_player_webplayer_target = mp3
;encode_player_api_target = mp3
transcode_player_customize = "true"
;transcode_cmd = "ffmpeg"
;transcode_cmd = "avconv"
;transcode_cmd = "/usr/bin/neatokeen"
transcode_input = "-i %FILE%"
;transcode_cmd_mid = "timidity -Or -o %FILE% | ffmpeg -f s16le -i pipe:0"
encode_args_mp3 = "-vn -b:a %BITRATE%K -c:a libmp3lame -f mp3 pipe:1"
encode_args_ogg = "-vn -b:a %BITRATE%K -c:a libvorbis -f ogg pipe:1"
encode_args_opus = "-vn -b:a %BITRATE%K -c:a libopus -compression_level 10 -vsync 2 -f ogg pipe:1"
encode_args_m4a = "-vn -b:a %BITRATE%K -c:a libfdk_aac -f adts pipe:1"
encode_args_wav = "-vn -b:a %BITRATE%K -c:a pcm_s16le -f wav pipe:1"
encode_args_flv = "-b:a %BITRATE%K -ar 44100 -ac 2 -v 0 -f flv -c:v libx264 -preset superfast -threads 0 pipe:1"
encode_args_webm = "-b:a %BITRATE%K -f webm -c:v libvpx -preset superfast -threads 0 pipe:1"
encode_args_ts = "-q %QUALITY% -s %RESOLUTION% -f mpegts -c:v libx264 -c:a libmp3lame -maxrate %MAXBITRATE%k -preset superfast -threads 0 pipe:1"
encode_args_ogv = "-codec:v libtheora -qscale:v 7 -codec:a libvorbis -qscale:a 5 -f ogg pipe:1"
encode_get_image = "-ss %TIME% -f image2 -vframes 1 pipe:1"
encode_srt = "-vf \"subtitles='%SRTFILE%'\""
encode_ss_frame = "-ss %TIME%"
encode_ss_duration = "-t %DURATION%"
send_full_stream = "webplayer"
;#########################################################
; Transcode Caching #
;#########################################################
;cache_path = "/tmp"
;cache_target = "mp3"
;cache_m4a = "true"
;cache_flac = "true"
;cache_mpc = "true"
;cache_ogg = "true"
;cache_oga = "true"
;cache_opus = "true"
;cache_wav = "true"
;cache_wma = "true"
;cache_aif = "true"
;cache_aiff = "true"
;cache_ape = "true"
;cache_shn = "true"
;cache_mp3 = "true"
;cache_remote = "true"
;#########################################################
; Proxy Settings (optional) #
;#########################################################
;proxy_host = "192.168.0.1"
;proxy_port = "8080"
;proxy_user = ""
;proxy_pass = ""
;force_ssl = "true"
;#########################################################
; Mail Settings #
;#########################################################
;mail_enable = "true"
;mail_type = "php"
;mail_domain = "example.com"
;mail_user = "info"
;mail_name = "Ampache"
;mail_check = "strict"
;#########################################################
; sendmail Settings #
;#########################################################
;sendmail_path = "/usr/sbin/sendmail"
;#########################################################
; SMTP Settings #
;#########################################################
;mail_host = "localhost"
;mail_port = 25
;mail_secure_smtp = tls
;mail_auth = "true"
;mail_auth_user = ""
;mail_auth_pass = ""
;#########################################################
; Abbreviation Filter #
;#########################################################
common_abbr = "divx,xvid,dvdrip,hdtv,lol,axxo,repack,xor,pdtv,real,vtv,caph,2hd,proper,fqm,uncut,topaz,tvt,notv,fpn,fov,orenji,0tv,omicron,dsr,ws,sys,crimson,wat,hiqt,internal,brrip,boheme,vost,vostfr,fastsub,addiction,x264,LOL,720p,1080p,YIFY,evolve,fihtv,first,bokutox,bluray,tvboom,info"

View File

@@ -0,0 +1,7 @@
#<FilesMatch \.php$>
# SetHandler application/x-httpd-php
#</FilesMatch>
<FilesMatch \.php$>
SetHandler "proxy:fcgi://127.0.0.1:9000"
</FilesMatch>

219
configs/apache2/httpd.conf Normal file
View File

@@ -0,0 +1,219 @@
# This is the main Apache HTTP server configuration file.
# Set to one of: Full | OS | Minor | Minimal | Major | Prod
ServerTokens PROD
ServerRoot /var/www
Listen REPLACE_SERVER_PORT
LoadModule mpm_event_module modules/mod_mpm_event.so
#LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbd_module modules/mod_authn_dbd.so
LoadModule authn_socache_module modules/mod_authn_socache.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_dbd_module modules/mod_authz_dbd.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule access_compat_module modules/mod_access_compat.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_form_module modules/mod_auth_form.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule allowmethods_module modules/mod_allowmethods.so
LoadModule file_cache_module modules/mod_file_cache.so
LoadModule cache_module modules/mod_cache.so
LoadModule cache_disk_module modules/mod_cache_disk.so
LoadModule cache_socache_module modules/mod_cache_socache.so
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
LoadModule socache_dbm_module modules/mod_socache_dbm.so
LoadModule socache_memcache_module modules/mod_socache_memcache.so
LoadModule socache_redis_module modules/mod_socache_redis.so
LoadModule watchdog_module modules/mod_watchdog.so
LoadModule macro_module modules/mod_macro.so
LoadModule dbd_module modules/mod_dbd.so
LoadModule dumpio_module modules/mod_dumpio.so
LoadModule echo_module modules/mod_echo.so
LoadModule buffer_module modules/mod_buffer.so
LoadModule data_module modules/mod_data.so
LoadModule ratelimit_module modules/mod_ratelimit.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule request_module modules/mod_request.so
LoadModule include_module modules/mod_include.so
LoadModule filter_module modules/mod_filter.so
LoadModule reflector_module modules/mod_reflector.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule sed_module modules/mod_sed.so
LoadModule charset_lite_module modules/mod_charset_lite.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule brotli_module modules/mod_brotli.so
LoadModule mime_module modules/mod_mime.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule log_debug_module modules/mod_log_debug.so
LoadModule log_forensic_module modules/mod_log_forensic.so
LoadModule logio_module modules/mod_logio.so
LoadModule env_module modules/mod_env.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule expires_module modules/mod_expires.so
LoadModule headers_module modules/mod_headers.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule unique_id_module modules/mod_unique_id.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule version_module modules/mod_version.so
LoadModule remoteip_module modules/mod_remoteip.so
LoadModule session_module modules/mod_session.so
LoadModule session_cookie_module modules/mod_session_cookie.so
LoadModule session_crypto_module modules/mod_session_crypto.so
LoadModule session_dbd_module modules/mod_session_dbd.so
LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
LoadModule dialup_module modules/mod_dialup.so
LoadModule http2_module modules/mod_http2.so
LoadModule unixd_module modules/mod_unixd.so
LoadModule heartbeat_module modules/mod_heartbeat.so
LoadModule heartmonitor_module modules/mod_heartmonitor.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule asis_module modules/mod_asis.so
LoadModule info_module modules/mod_info.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule dir_module modules/mod_dir.so
LoadModule actions_module modules/mod_actions.so
LoadModule speling_module modules/mod_speling.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule alias_module modules/mod_alias.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule fcgid_module modules/mod_fcgid.so
LoadModule dav_module modules/mod_dav.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule wsgi_module modules/mod_wsgi.so
LoadModule lua_module modules/mod_lua.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_express_module modules/mod_proxy_express.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
LoadModule proxy_fdpass_module modules/mod_proxy_fdpass.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_hcheck_module modules/mod_proxy_hcheck.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so
LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so
#LoadModule suexec_module modules/mod_suexec.so
#LoadModule php_module modules/mod_php8.so
<IfModule unixd_module>
User apache
Group apache
</IfModule>
# 'Main' server configuration
ServerName REPLACE_SERVER_NAME
ServerAdmin REPLACE_SERVER_ADMIN
ServerSignature On
DocumentRoot "REPLACE_SERVER_DIR"
<Directory />
AllowOverride none
Require all denied
</Directory>
<Directory "/data/htdocs">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directory "REPLACE_SERVER_DIR">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directory "/usr/local/share/template-files/data/htdocs/www">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directorymatch "^/.*/\.git/">
Order deny,allow
Deny from all
</Directorymatch>
<IfModule dir_module>
DirectoryIndex index.php index.cgi index.asp index.aspx index.pl index.aspx index.shtml awstats.pl index.txt index.json index.html index.html.var Default.aspx default.aspx index.unknown.php index.default.php
</IfModule>
<Files ".ht*">
Require all denied
</Files>
ErrorLog /data/logs/apache2/error.log
LogLevel warn
<IfModule log_config_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
<IfModule logio_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
</IfModule>
CustomLog /data/logs/apache2/access.default.log combined
</IfModule>
<IfModule alias_module>
Alias /health /data/htdocs/www/health/index.txt
Alias /health/json /data/htdocs/www/health/index.json
ScriptAlias /cgi-bin/ "/data/htdocs/cgi-bin/"
</IfModule>
<Directory "/data/htdocs/cgi-bin">
AllowOverride None
Options None
Require all granted
</Directory>
<IfModule cgid_module>
#Scriptsock cgisock
</IfModule>
<IfModule headers_module>
RequestHeader unset Proxy early
</IfModule>
<IfModule mime_module>
TypesConfig /etc/apache2/mime.types
AddType application/x-gzip .tgz
AddEncoding x-compress .Z
AddEncoding x-gzip .gz .tgz
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddHandler cgi-script .cgi
AddHandler type-map var
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
</IfModule>
<IfModule mime_magic_module>
MIMEMagicFile /etc/apache2/magic
</IfModule>
<IfModule mod_status.c>
<Location /server-status>
SetHandler server-status
</Location>
</IfModule>
ProxyErrorOverride on
IncludeOptional /etc/apache2/conf.d/*.conf
IncludeOptional /etc/apache2/vhosts.d/*.conf

View File

@@ -0,0 +1,252 @@
# This is the main Apache HTTP server configuration file.
# Set to one of: Full | OS | Minor | Minimal | Major | Prod
ServerTokens PROD
ServerRoot /var/www
Listen REPLACE_SERVER_PORT
LoadModule mpm_event_module modules/mod_mpm_event.so
#LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbd_module modules/mod_authn_dbd.so
LoadModule authn_socache_module modules/mod_authn_socache.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_dbd_module modules/mod_authz_dbd.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule access_compat_module modules/mod_access_compat.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_form_module modules/mod_auth_form.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule allowmethods_module modules/mod_allowmethods.so
LoadModule file_cache_module modules/mod_file_cache.so
LoadModule cache_module modules/mod_cache.so
LoadModule cache_disk_module modules/mod_cache_disk.so
LoadModule cache_socache_module modules/mod_cache_socache.so
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
LoadModule socache_dbm_module modules/mod_socache_dbm.so
LoadModule socache_memcache_module modules/mod_socache_memcache.so
LoadModule socache_redis_module modules/mod_socache_redis.so
LoadModule watchdog_module modules/mod_watchdog.so
LoadModule macro_module modules/mod_macro.so
LoadModule dbd_module modules/mod_dbd.so
LoadModule dumpio_module modules/mod_dumpio.so
LoadModule echo_module modules/mod_echo.so
LoadModule buffer_module modules/mod_buffer.so
LoadModule data_module modules/mod_data.so
LoadModule ratelimit_module modules/mod_ratelimit.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule request_module modules/mod_request.so
LoadModule include_module modules/mod_include.so
LoadModule filter_module modules/mod_filter.so
LoadModule reflector_module modules/mod_reflector.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule sed_module modules/mod_sed.so
LoadModule charset_lite_module modules/mod_charset_lite.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule brotli_module modules/mod_brotli.so
LoadModule mime_module modules/mod_mime.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule log_debug_module modules/mod_log_debug.so
LoadModule log_forensic_module modules/mod_log_forensic.so
LoadModule logio_module modules/mod_logio.so
LoadModule env_module modules/mod_env.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule expires_module modules/mod_expires.so
LoadModule headers_module modules/mod_headers.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule unique_id_module modules/mod_unique_id.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule version_module modules/mod_version.so
LoadModule remoteip_module modules/mod_remoteip.so
LoadModule session_module modules/mod_session.so
LoadModule session_cookie_module modules/mod_session_cookie.so
LoadModule session_crypto_module modules/mod_session_crypto.so
LoadModule session_dbd_module modules/mod_session_dbd.so
LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
LoadModule dialup_module modules/mod_dialup.so
LoadModule http2_module modules/mod_http2.so
LoadModule unixd_module modules/mod_unixd.so
LoadModule heartbeat_module modules/mod_heartbeat.so
LoadModule heartmonitor_module modules/mod_heartmonitor.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule asis_module modules/mod_asis.so
LoadModule info_module modules/mod_info.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule dir_module modules/mod_dir.so
LoadModule actions_module modules/mod_actions.so
LoadModule speling_module modules/mod_speling.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule alias_module modules/mod_alias.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule fcgid_module modules/mod_fcgid.so
LoadModule dav_module modules/mod_dav.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule wsgi_module modules/mod_wsgi.so
LoadModule lua_module modules/mod_lua.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_express_module modules/mod_proxy_express.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
LoadModule proxy_fdpass_module modules/mod_proxy_fdpass.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_hcheck_module modules/mod_proxy_hcheck.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so
LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so
#LoadModule suexec_module modules/mod_suexec.so
#LoadModule php_module modules/mod_php8.so
<IfModule unixd_module>
User apache
Group apache
</IfModule>
# 'Main' server configuration
ServerName REPLACE_SERVER_NAME
ServerAdmin REPLACE_SERVER_ADMIN
ServerSignature On
DocumentRoot "REPLACE_SERVER_DIR"
<Directory />
AllowOverride none
Require all denied
</Directory>
<Directory "/var/www">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directory "/data/htdocs">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directory "REPLACE_SERVER_DIR">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directory "/usr/local/share/apache2">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<Directory "/usr/local/share/template-files/data/htdocs/www">
Options Indexes FollowSymLinks MultiViews ExecCGI Includes
AllowOverride All
Require all granted
</Directory>
<IfModule dir_module>
DirectoryIndex index.php index.cgi index.asp index.aspx index.pl index.aspx index.shtml awstats.pl index.txt index.json index.html index.html.var Default.aspx default.aspx index.unknown.php index.default.php
</IfModule>
<Files ".ht*">
Require all denied
</Files>
ErrorLog /data/logs/httpd/httpd.log
LogLevel warn
<IfModule log_config_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
<IfModule logio_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
</IfModule>
CustomLog /data/logs/httpd/access.default.log combined
</IfModule>
<IfModule alias_module>
Alias /health /data/htdocs/www/health/index.txt
Alias /health/json /data/htdocs/www/health/index.json
ScriptAlias /cgi-bin/ "/data/htdocs/cgi-bin/"
</IfModule>
<Directory "/data/htdocs/cgi-bin">
AllowOverride None
Options None
Require all granted
</Directory>
<IfModule cgid_module>
#Scriptsock cgisock
</IfModule>
<IfModule headers_module>
RequestHeader unset Proxy early
</IfModule>
<IfModule mime_module>
TypesConfig /etc/apache2/mime.types
AddType application/x-gzip .tgz
AddEncoding x-compress .Z
AddEncoding x-gzip .gz .tgz
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddHandler cgi-script .cgi
AddHandler type-map var
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
</IfModule>
<IfModule mime_magic_module>
MIMEMagicFile /etc/apache2/magic
</IfModule>
#SSLUseStapling On
#SSLOCSPEnable on
#SSLStaplingCache shmcb:/run/httpd/ssl_stapling(32768)
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off
SSLProxyCheckPeerCN off
SSLSessionCache shmcb:/run/httpd/sslcache(512000)
SSLSessionCacheTimeout 300
SSLRandomSeed startup file:/dev/urandom 256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
SSLOpenSSLConfCmd DHParameters "/etc/ssl/dhparam/httpd.pem"
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLHonorCipherOrder on
SSLOptions +StrictRequire
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
Protocols h2 http/1.1
Header set Strict-Transport-Security "max-age=31536000; preload" env=HTTPS
Header always set Access-Control-Allow-Origin "*"
Header always set Content-Security-Policy "*"
Header always set Access-Control-Max-Age "1000"
Header always set Access-Control-Allow-Headers "X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding"
Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT"
Header always add Header "It took %D microseconds for request"
<IfModule mod_status.c>
<Location /server-status>
SetHandler server-status
</Location>
</IfModule>
ProxyErrorOverride on
IncludeOptional /etc/apache2/conf.d/*.conf
IncludeOptional /etc/apache2/vhosts.d/*.conf

View File

@@ -0,0 +1,4 @@
# Default host
<VirtualHost _default_:REPLACE_SERVER_PORT>
DocumentRoot "REPLACE_SERVER_DIR"
</VirtualHost>

View File

@@ -0,0 +1,8 @@
# Default host for SSL
<VirtualHost _default_:REPLACE_SERVER_PORT>
SSLEngine on
DocumentRoot "REPLACE_SERVER_DIR"
SSLCertificateFile /config/ssl/server.crt
SSLCertificateKeyFile /config/ssl/server.key
Header always set Strict-Transport-Security "max-age=31536000; preload"
</VirtualHost>

7
configs/caddy/Caddyfile Normal file
View File

@@ -0,0 +1,7 @@
:REPLACE_SERVER_PORT {
root * /data/htdocs/www
file_server
#reverse_proxy localhost:8080
php_fastcgi localhost:9000
}

View File

@@ -0,0 +1,3 @@
:REPLACE_SERVER_PORT {
reverse_proxy localhost:8080
}

View File

@@ -0,0 +1,321 @@
config!version = 001002104
server!bind!1!port = REPLACE_SERVER_PORT
server!collector = rrd
server!keepalive = 1
server!keepalive_max_requests = 500
server!panic_action = /usr/local/share/cherokee/bin/cherokee-panic
server!pid_file = /tmp/cherokee.pid
server!post_track = post_track
server!server_tokens = product
server!timeout = 15
vserver!1!collector!enabled = 1
vserver!1!directory_index = index.php,index.cgi,index.asp,index.aspx,index.pl,index.aspx,index.shtml,index.txt,index.json,awstats.pl,Default.aspx,default.aspx,index.html,index.html.var,index.unknown.php,index.default.php
vserver!1!document_root = REPLACE_WWW_DIR
vserver!1!error_writer!filename = /data/logs/cherokee/cherokee.log
vserver!1!error_writer!type = file
vserver!1!evhost = evhost
vserver!1!evhost!tpl_document_root = REPLACE_WWW_DIR/${domain}
vserver!1!logger = combined
vserver!1!logger!access!buffsize = 16384
vserver!1!logger!access!filename = /data/logs/cherokee/access.log
vserver!1!logger!access!type = file
vserver!1!logger!x_real_ip_access = 0.0.0.0
vserver!1!logger!x_real_ip_access_all = 0
vserver!1!logger!x_real_ip_enabled = 1
vserver!1!nick = default
vserver!1!rule!60!encoder!gzip = allow
vserver!1!rule!60!flcache = forbid
vserver!1!rule!60!flcache!policy = explicitly_allowed
vserver!1!rule!60!handler = fcgi
vserver!1!rule!60!handler!balancer = round_robin
vserver!1!rule!60!handler!balancer!source!10 = 1
vserver!1!rule!60!handler!error_handler = 1
vserver!1!rule!60!handler!x_real_ip_enabled = 1
vserver!1!rule!60!match = extensions
vserver!1!rule!60!match!check_local_file = 1
vserver!1!rule!60!match!extensions = php
vserver!1!rule!60!match!final = 0
vserver!1!rule!60!timeout = 30
vserver!1!rule!50!encoder!gzip = allow
vserver!1!rule!50!handler = server_info
vserver!1!rule!50!handler!type = just_about
vserver!1!rule!50!match = directory
vserver!1!rule!50!match!directory = /about
vserver!1!rule!40!document_root = /data/htdocs/cgi-bin
vserver!1!rule!40!handler = cgi
vserver!1!rule!40!match = directory
vserver!1!rule!40!match!directory = /cgi-bin
vserver!1!rule!30!document_root = /usr/local/share/cherokee/share/cherokee/themes
vserver!1!rule!30!handler = file
vserver!1!rule!30!match = directory
vserver!1!rule!30!match!directory = /cherokee_themes
vserver!1!rule!20!document_root = /usr/local/share/cherokee/share/cherokee/icons
vserver!1!rule!20!handler = file
vserver!1!rule!20!match = directory
vserver!1!rule!20!match!directory = /cherokee_icons
vserver!1!rule!10!handler = common
vserver!1!rule!10!handler!iocache = 1
vserver!1!rule!10!match = default
source!1!env!PHP_FCGI_CHILDREN = 5
source!1!env!PHP_FCGI_MAX_REQUESTS = 490
source!1!env_inherited = 0
source!1!host = 127.0.0.1:9000
source!1!interpreter = /usr/bin/php-cgi -b 127.0.0.1:9000
source!1!nick = PHP Interpreter
source!1!type = host
icons!default = page_white.png
icons!directory = folder.png
icons!file!bomb.png = core
icons!file!page_white_go.png = *README*
icons!parent_directory = arrow_turn_left.png
icons!suffix!camera.png = jpg,jpeg,jpe
icons!suffix!cd.png = iso,ngr,cue
icons!suffix!color_wheel.png = png,gif,xcf,bmp,pcx,tiff,tif,cdr,psd,xpm,xbm
icons!suffix!control_play.png = bin,exe,com,msi,out
icons!suffix!css.png = css
icons!suffix!cup.png = java,class,jar
icons!suffix!email.png = eml,mbox,box,email,mbx
icons!suffix!film.png = avi,mpeg,mpe,mpg,mpeg3,dl,fli,qt,mov,movie,flv,webm
icons!suffix!font.png = ttf
icons!suffix!html.png = html,htm
icons!suffix!music.png = au,snd,mid,midi,kar,mpga,mpega,mp2,mp3,sid,wav,aif,aiff,aifc,gsm,m3u,wma,wax,ra,rm,ram,pls,sd2,ogg
icons!suffix!package.png = tar,gz,bz2,zip,rar,ace,lha,7z,dmg,cpk
icons!suffix!page_white_acrobat.png = pdf
icons!suffix!page_white_c.png = c,h,cpp
icons!suffix!page_white_office.png = doc,ppt,xls
icons!suffix!page_white_php.png = php
icons!suffix!page_white_text.png = txt,text,rtf,sdw
icons!suffix!printer.png = ps,eps
icons!suffix!ruby.png = rb
icons!suffix!script.png = sh,csh,ksh,tcl,tk,py,pl
mime!application/bzip2!extensions = bz2
mime!application/gzip!extensions = gz
mime!application/hta!extensions = hta
mime!application/java-archive!extensions = jar
mime!application/java-serialized-object!extensions = ser
mime!application/java-vm!extensions = class
mime!application/json!extensions = json
mime!application/mac-binhex40!extensions = hqx
mime!application/msaccess!extensions = mdb
mime!application/msword!extensions = doc,dot
mime!application/octet-stream!extensions = bin
mime!application/octetstream!extensions = ace
mime!application/oda!extensions = oda
mime!application/ogg!extensions = ogx
mime!application/pdf!extensions = pdf
mime!application/pgp-keys!extensions = key
mime!application/pgp-signature!extensions = pgp
mime!application/pics-rules!extensions = prf
mime!application/postscript!extensions = ps,ai,eps
mime!application/rar!extensions = rar
mime!application/rdf+xml!extensions = rdf
mime!application/rss+xml!extensions = rss
mime!application/smil!extensions = smi,smil
mime!application/vnd.mozilla.xul+xml!extensions = xul
mime!application/vnd.ms-excel!extensions = xls,xlb,xlt
mime!application/vnd.ms-pki.seccat!extensions = cat
mime!application/vnd.ms-pki.stl!extensions = stl
mime!application/vnd.ms-powerpoint!extensions = ppt,pps
mime!application/vnd.oasis.opendocument.chart!extensions = odc
mime!application/vnd.oasis.opendocument.database!extensions = odb
mime!application/vnd.oasis.opendocument.formula!extensions = odf
mime!application/vnd.oasis.opendocument.graphics!extensions = odg
mime!application/vnd.oasis.opendocument.image!extensions = odi
mime!application/vnd.oasis.opendocument.presentation!extensions = odp
mime!application/vnd.oasis.opendocument.spreadsheet!extensions = ods
mime!application/vnd.oasis.opendocument.text!extensions = odt
mime!application/vnd.oasis.opendocument.text-master!extensions = odm
mime!application/vnd.oasis.opendocument.text-web!extensions = oth
mime!application/vnd.pkg5.info!extensions = p5i
mime!application/vnd.visio!extensions = vsd
mime!application/vnd.wap.wbxml!extensions = wbxml
mime!application/vnd.wap.wmlc!extensions = wmlc
mime!application/vnd.wap.wmlscriptc!extensions = wmlsc
mime!application/x-7z-compressed!extensions = 7z
mime!application/x-abiword!extensions = abw
mime!application/x-apple-diskimage!extensions = dmg
mime!application/x-bcpio!extensions = bcpio
mime!application/x-bittorrent!extensions = torrent
mime!application/x-cdf!extensions = cdf
mime!application/x-cpio!extensions = cpio
mime!application/x-csh!extensions = csh
mime!application/x-debian-package!extensions = deb,udeb
mime!application/x-director!extensions = dcr,dir,dxr
mime!application/x-dvi!extensions = dvi
mime!application/x-flac!extensions = flac
mime!application/x-font!extensions = pfa,pfb,gsf,pcf,pcf.Z
mime!application/x-freemind!extensions = mm
mime!application/x-gnumeric!extensions = gnumeric
mime!application/x-gtar!extensions = gtar,tgz,taz
mime!application/x-gzip!extensions = gz,tgz
mime!application/x-httpd-php!extensions = phtml,pht,php
mime!application/x-httpd-php-source!extensions = phps
mime!application/x-httpd-php3!extensions = php3
mime!application/x-httpd-php3-preprocessed!extensions = php3p
mime!application/x-httpd-php4!extensions = php4
mime!application/x-internet-signup!extensions = ins,isp
mime!application/x-iphone!extensions = iii
mime!application/x-iso9660-image!extensions = iso
mime!application/x-java-jnlp-file!extensions = jnlp
mime!application/x-javascript!extensions = js
mime!application/x-kchart!extensions = chrt
mime!application/x-killustrator!extensions = kil
mime!application/x-koan!extensions = skp,skd,skt,skm
mime!application/x-kpresenter!extensions = kpr,kpt
mime!application/x-kspread!extensions = ksp
mime!application/x-kword!extensions = kwd,kwt
mime!application/x-latex!extensions = latex
mime!application/x-lha!extensions = lha
mime!application/x-lzh!extensions = lzh
mime!application/x-lzx!extensions = lzx
mime!application/x-ms-wmd!extensions = wmd
mime!application/x-ms-wmz!extensions = wmz
mime!application/x-msdos-program!extensions = com,exe,bat,dll
mime!application/x-msi!extensions = msi
mime!application/x-netcdf!extensions = nc
mime!application/x-ns-proxy-autoconfig!extensions = pac
mime!application/x-nwc!extensions = nwc
mime!application/x-object!extensions = o
mime!application/x-oz-application!extensions = oza
mime!application/x-pkcs7-certreqresp!extensions = p7r
mime!application/x-pkcs7-crl!extensions = crl
mime!application/x-python-code!extensions = pyc,pyo
mime!application/x-quicktimeplayer!extensions = qtl
mime!application/x-redhat-package-manager!extensions = rpm
mime!application/x-sh!extensions = sh
mime!application/x-shar!extensions = shar
mime!application/x-shockwave-flash!extensions = swf,swfl
mime!application/x-stuffit!extensions = sit,sea
mime!application/x-sv4cpio!extensions = sv4cpio
mime!application/x-sv4crc!extensions = sv4crc
mime!application/x-tar!extensions = tar
mime!application/x-tcl!extensions = tcl
mime!application/x-tex-pk!extensions = pk
mime!application/x-texinfo!extensions = texinfo,texi
mime!application/x-trash!extensions = ~,bak,old,sik
mime!application/x-troff!extensions = t,tr,roff
mime!application/x-troff-man!extensions = man
mime!application/x-troff-me!extensions = me
mime!application/x-troff-ms!extensions = ms
mime!application/x-ustar!extensions = ustar
mime!application/x-x509-ca-cert!extensions = crt
mime!application/x-xcf!extensions = xcf
mime!application/x-xfig!extensions = fig
mime!application/x-xpinstall!extensions = xpi
mime!application/xhtml+xml!extensions = xhtml,xht
mime!application/xml!extensions = xml,xsl
mime!application/zip!extensions = zip
mime!audio/basic!extensions = au,snd
mime!audio/midi!extensions = mid,midi,kar
mime!audio/mpeg!extensions = mpga,mpega,mp2,mp3,m4a
mime!audio/ogg!extensions = ogg,oga
mime!audio/prs.sid!extensions = sid
mime!audio/x-aiff!extensions = aif,aiff,aifc
mime!audio/x-gsm!extensions = gsm
mime!audio/x-mpegurl!extensions = m3u
mime!audio/x-ms-wax!extensions = wax
mime!audio/x-ms-wma!extensions = wma
mime!audio/x-pn-realaudio!extensions = ra,rm,ram
mime!audio/x-realaudio!extensions = ra
mime!audio/x-scpls!extensions = pls
mime!audio/x-sd2!extensions = sd2
mime!audio/x-wav!extensions = wav
mime!chemical/x-cache!extensions = cac,cache
mime!chemical/x-cache-csf!extensions = csf
mime!chemical/x-cdx!extensions = cdx
mime!chemical/x-cif!extensions = cif
mime!chemical/x-cmdf!extensions = cmdf
mime!chemical/x-cml!extensions = cml
mime!chemical/x-compass!extensions = cpa
mime!chemical/x-crossfire!extensions = bsd
mime!chemical/x-csml!extensions = csml,csm
mime!chemical/x-ctx!extensions = ctx
mime!chemical/x-cxf!extensions = cxf,cef
mime!chemical/x-isostar!extensions = istr,ist
mime!chemical/x-jcamp-dx!extensions = jdx,dx
mime!chemical/x-kinemage!extensions = kin
mime!chemical/x-pdb!extensions = pdb,ent
mime!chemical/x-swissprot!extensions = sw
mime!chemical/x-vamas-iso14976!extensions = vms
mime!chemical/x-vmd!extensions = vmd
mime!chemical/x-xtel!extensions = xtel
mime!chemical/x-xyz!extensions = xyz
mime!image/gif!extensions = gif
mime!image/jpeg!extensions = jpeg,jpg,jpe
mime!image/pcx!extensions = pcx
mime!image/png!extensions = png
mime!image/svg+xml!extensions = svg,svgz
mime!image/tiff!extensions = tiff,tif
mime!image/vnd.djvu!extensions = djvu,djv
mime!image/vnd.wap.wbmp!extensions = wbmp
mime!image/x-icon!extensions = ico
mime!image/x-ms-bmp!extensions = bmp
mime!image/x-photoshop!extensions = psd
mime!image/x-portable-anymap!extensions = pnm
mime!image/x-portable-bitmap!extensions = pbm
mime!image/x-portable-graymap!extensions = pgm
mime!image/x-portable-pixmap!extensions = ppm
mime!image/x-xbitmap!extensions = xbm
mime!image/x-xpixmap!extensions = xpm
mime!image/x-xwindowdump!extensions = xwd
mime!model/iges!extensions = igs,iges
mime!model/mesh!extensions = msh,mesh,silo
mime!model/vrml!extensions = wrl,vrml
mime!text/calendar!extensions = ics,icz
mime!text/comma-separated-values!extensions = csv
mime!text/css!extensions = css
mime!text/h323!extensions = 323
mime!text/html!extensions = html,htm,shtml
mime!text/iuls!extensions = uls
mime!text/mathml!extensions = mml
mime!text/plain!extensions = asc,txt,text,diff,pot
mime!text/richtext!extensions = rtx
mime!text/rtf!extensions = rtf
mime!text/scriptlet!extensions = sct,wsc
mime!text/tab-separated-values!extensions = tsv
mime!text/vnd.sun.j2me.app-descriptor!extensions = jad
mime!text/vnd.wap.wml!extensions = wml
mime!text/vnd.wap.wmlscript!extensions = wmls
mime!text/x-boo!extensions = boo
mime!text/x-c++hdr!extensions = h++,hpp,hxx,hh
mime!text/x-c++src!extensions = c++,cpp,cxx,cc
mime!text/x-chdr!extensions = h
mime!text/x-csh!extensions = csh
mime!text/x-csrc!extensions = c
mime!text/x-dsrc!extensions = d
mime!text/x-haskell!extensions = hs
mime!text/x-java!extensions = java
mime!text/x-literate-haskell!extensions = lhs
mime!text/x-moc!extensions = moc
mime!text/x-pascal!extensions = p,pas
mime!text/x-pcs-gcd!extensions = gcd
mime!text/x-perl!extensions = pl,pm
mime!text/x-python!extensions = py
mime!text/x-setext!extensions = etx
mime!text/x-sh!extensions = sh
mime!text/x-tcl!extensions = tcl,tk
mime!text/x-tex!extensions = tex,ltx,sty,cls
mime!text/x-vcalendar!extensions = vcs
mime!text/x-vcard!extensions = vcf
mime!video/dl!extensions = dl
mime!video/dv!extensions = dif,dv
mime!video/fli!extensions = fli
mime!video/gl!extensions = gl
mime!video/mp4!extensions = mp4
mime!video/mpeg!extensions = mpeg,mpg,mpe
mime!video/ogg!extensions = ogv
mime!video/quicktime!extensions = qt,mov
mime!video/vnd.mpegurl!extensions = mxu
mime!video/webm!extensions = webm
mime!video/x-flv!extensions = flv
mime!video/x-la-asf!extensions = lsf,lsx
mime!video/x-mng!extensions = mng
mime!video/x-ms-asf!extensions = asf,asx
mime!video/x-ms-wm!extensions = wm
mime!video/x-ms-wmv!extensions = wmv
mime!video/x-ms-wmx!extensions = wmx
mime!video/x-ms-wvx!extensions = wvx
mime!video/x-msvideo!extensions = avi
mime!video/x-sgi-movie!extensions = movie
mime!x-conference/x-cooltalk!extensions = ice
mime!x-world/x-vrml!extensions = vrm,vrml,wrl

158
configs/couchdb/default.ini Normal file
View File

@@ -0,0 +1,158 @@
; Upgrading CouchDB will overwrite this file.
[vendor]
name = CasjaysDev
[couchdb]
;uuid =
database_dir = REPLACE_DATABASE_DIR
view_index_dir = REPLACE_DATABASE_DIR
[couchdb_engines]
couch = couch_bt_engine
[chttpd]
port = 5984
bind_address = any
require_valid_user = false
prefer_minimal = Cache-Control, Content-Length, Content-Range, Content-Type, ETag, Server, Transfer-Encoding, Vary
admin_only_all_dbs = true
allow_jsonp = true
enable_cors = true
enable_xframe_options = false
max_uri_length = 8000
x_forwarded_host = X-Forwarded-Host
x_forwarded_proto = X-Forwarded-Proto
x_forwarded_ssl = X-Forwarded-Ssl
max_http_request_size = 4294967296
decode_plus_to_space = true
[couch_peruser]
enable = true
delete_dbs = true
database_prefix = userdb_
[httpd]
port = 5986
bind_address = any
enable_cors = true
[chttpd_auth]
authentication_db = _users
authentication_redirect = /_utils/session.html
require_valid_user = false
timeout = 600
auth_cache_size = 50
allow_persistent_cookies = true
iterations = 10
[couch_httpd_auth]
authentication_db = _users
[ssl]
enable = false
verify_ssl_certificates = false
cert_file = /config/ssl/localhost.crt
key_file = /config/ssl/localhost.key
[csp]
utils_enable = true
utils_header_value = default-src 'self'; img-src 'self'; font-src *; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline';
attachments_enable = true
attachments_header_value = sandbox
showlist_enable = true
showlist_header_value = sandbox
[cors]
origins = *
credentials = true
methods = GET, PUT, POST, HEAD, DELETE, PATCH
headers = accept, authorization, content-type, origin, referer
[x_frame_options]
hosts = *
same_origin = true
[native_query_servers]
enable_erlang_query_server = false
[query_server_config]
reduce_limit = true
os_process_limit = 100
group_info_timeout = 5000
query_limit = 268435456
partition_query_limit = 268435456
[mango]
default_limit = 25
index_all_disabled = false
index_scan_warning_threshold = 10
[indexers]
couch_mrview = true
[feature_flags]
partitioned||* = true
[uuids]
algorithm = sequential
utc_id_suffix =
max_count = 1000
[attachments]
compression_level = 8
compressible_types = text/*, application/javascript, application/json, application/xml
[replicator]
startup_jitter = 5000
[replicator.shares]
_replicator = 100
[log]
writer = stderr
level = error
[stats]
interval = 10
[smoosh]
db_channels = upgrade_dbs,ratio_dbs,slack_dbs
view_channels = upgrade_views,ratio_views,slack_views
[ioq]
concurrency = 10
ratio = 0.01
[ioq.bypass]
os_process = true
read = true
write = true
view_update = true
shard_sync = false
compaction = false
[dreyfus]
name = clouseau@127.0.0.1
retry_limit = 5
limit = 25
limit_partitions = 2000
max_limit = 200
max_limit_partitions = 2000
[reshard]
max_jobs = 48
max_history = 20
max_retries = 1
retry_interval_sec = 10
delete_source = true
update_shard_map_timeout_sec = 60
source_close_timeout_sec = 600
require_node_param = false
require_range_param = false
[prometheus]
bind_address = any
port = 17986
[cluster]
n = 1

View File

@@ -0,0 +1,6 @@
[couchdb]
single_node=true
[log]
writer = file
file = /data/logs/couchdb/couch.log

View File

@@ -0,0 +1,7 @@
{
"ip": "127.0.0.1",
"iptables": true,
"log-level": "error" ,
"pidfile": "/tmp/docker.pid",
"insecure-registries": ["localhost:5000"]
}

View File

@@ -0,0 +1,144 @@
#https://docs.docker.com/registry/configuration/
version: 0.1
log:
formatter: text
fields:
service: registry
################
storage:
delete:
enabled: true
cache:
blobdescriptor: inmemory
filesystem:
rootdirectory: /data/registry
################
http:
addr: :5000
#prefix: /my/nested/registry/
#host: https://myregistryaddress.org:5000
#secret: asecretforlocaldevelopment
#relativeurls: false
#draintimeout: 60s
# tls:
# certificate: /certs/certs/localhost.crt
# key: /certs/private/localhost.key
# letsencrypt:
# cachefile: /config/certs/cache
# email: emailused@letsencrypt.com
# hosts: [myregistryaddress.org]
headers:
X-Content-Type-Options: [nosniff]
Access-Control-Max-Age: [1728000]
Access-Control-Allow-Origin: ['*']
#Access-Control-Allow-Credentials: [true]
#Access-Control-Allow-Headers: ['Authorization', 'Accept']
#Access-Control-Expose-Headers: ['Docker-Content-Digest']
#Access-Control-Allow-Methods: ['HEAD', 'GET', 'OPTIONS', 'DELETE']
debug:
addr: :5001
prometheus:
enabled: true
path: /metrics
http2:
disabled: false
################
auth:
none:
# silly:
# realm: silly-realm
# service: silly-service
# token:
# autoredirect: true
# realm: token-realm
# service: token-service
# issuer: registry-token-issuer
# rootcertbundle: /root/certs/bundle
# htpasswd:
# realm: basic-realm
# path: /config/auth/htpasswd
################
# middleware:
# registry:
################
# reporting:
# bugsnag:
# apikey: bugsnagapikey
# releasestage: bugsnagreleasestage
# endpoint: bugsnagendpoint
# newrelic:
# licensekey: newreliclicensekey
# name: newrelicname
# verbose: true
# notifications:
# events:
# includereferences: true
# endpoints:
# - name: alistener
# disabled: false
# url: https://my.listener.com/event
# headers: <http.Header>
# timeout: 1s
# threshold: 10
# backoff: 1s
# ignoredmediatypes:
# - application/octet-stream
# ignore:
# mediatypes:
# - application/octet-stream
# actions:
# - pull
################
redis:
addr: localhost:6379
# password: asecret
# db: 0
# dialtimeout: 10ms
# readtimeout: 10ms
# writetimeout: 10ms
# pool:
# maxidle: 16
# maxactive: 64
# idletimeout: 300s
################
health:
storagedriver:
enabled: true
interval: 10s
threshold: 3
file:
- file: /config/docker/registry.yaml
interval: 10s
# http:
# - uri: http://server.to.check/must/return/200
# headers:
# Authorization: [Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==]
# statuscode: 200
# timeout: 3s
# interval: 10s
# threshold: 3
# tcp:
# - addr: redis-server.domain.com:6379
# timeout: 3s
# interval: 10s
# threshold: 3
################
# proxy:
# remoteurl: https://registry-1.docker.io
# username: [username]
# password: [password]
################
compatibility:
schema1:
# signingkeyfile: /etc/registry/key.json
enabled: true
################
# validation:
# manifests:
# urls:
# allow:
# - ^https?://([^/]+\.)*example\.com/
# deny:
# - ^https?://www\.example\.com/

View File

@@ -0,0 +1,308 @@
[General]
add_album_art = 1
advancedencoder = ""
album_art_format = folder
api_enabled = 1
api_key = ""
auto_add_artists = 1
autowant_all = 0
autowant_manually_added = 1
autowant_upcoming = 1
bitrate = 192
blackhole = 0
blackhole_dir = ""
cache_dir = /data/cache
check_github = 1
check_github_interval = 360
check_github_on_startup = 1
cleanup_files = 0
config_version = 5
correct_metadata = 0
cue_split = 1
cue_split_flac_path = ""
cue_split_shntool_path = "/usr/bin"
customauth = 0
customhost = localhost
custompass = ""
customport = REPLACE_SERVER_PORT
customsleep = 1
customuser = ""
delete_lossless_files = 1
destination_dir = ""
detect_bitrate = 0
do_not_override_git_branch = 0
download_dir = "/data/downloads"
download_scan_interval = 5
download_torrent_dir = ""
embed_album_art = 1
embed_lyrics = 1
enable_https = 0
encoder = ffmpeg
encoder_multicore = 0
encoder_multicore_count = 0
encoder_path = ""
encoderfolder = ""
encoderlossless = 1
encoderoutputformat = mp3
encoderquality = 2
encodervbrcbr = cbr
extras = ""
file_format = $Track $Artist - $Title
file_permissions = 0644
file_underscores = 0
folder_format = $Artist
folder_permissions = 0755
freeze_db = 0
git_branch = master
git_path = ""
git_user = rembo10
headphones_indexer = 0
hppass = ""
hpuser = ""
http_host = 0.0.0.0
http_port = 80
http_proxy = 0
http_root = /
http_username = ""
http_password = ""
https_cert = /config/ssl/server.crt
https_key = /config/ssl/server.key
ignore_clean_releases = 0
ignored_words = ""
include_extras = 0
interface = default
keep_nfo = 0
keep_original_folder = 0
keep_torrent_files = 0
lastfm_username = ""
launch_browser = 0
libraryscan = 1
libraryscan_interval = 300
log_dir = /data/logs/headphones
lossless_bitrate_from = 0
lossless_bitrate_to = 0
lossless_destination_dir = ""
magnet_links = 0
mb_ignore_age = 365
mirror = musicbrainz.org
move_files = 1
music_dir = "/data/music"
music_encoder = 0
numberofseeders = 10
nzb_downloader = 0
official_releases_only = 0
open_magnet_links = 0
prefer_torrents = 0
preferred_bitrate = ""
preferred_bitrate_allow_lossless = 0
preferred_bitrate_high_buffer = 0
preferred_bitrate_low_buffer = 0
preferred_quality = 320
preferred_words = ""
rename_files = 0
replace_existing_folders = 0
required_words = ""
samplingfrequency = 44100
search_interval = 1440
torrent_downloader = 0
torrent_removal_interval = 720
torrentblackhole_dir = ""
update_db_interval = 24
usenet_retention = 1500
wait_until_release_date = 0
xldprofile = ""
[Growl]
growl_enabled = 0
growl_onsnatch = 0
growl_host = ""
growl_password = ""
[Subsonic]
subsonic_host = ""
subsonic_password = ""
subsonic_enabled = 0
subsonic_username = ""
[Waffles]
waffles_passkey = ""
waffles = 0
waffles_uid = ""
waffles_ratio = ""
[Email]
email_onsnatch = 0
email_smtp_password = ""
email_tls = 0
email_smtp_port = 25
email_smtp_server = ""
email_enabled = 0
email_smtp_user = ""
email_ssl = 0
email_to = ""
email_from = ""
[Plex]
plex_token = ""
plex_client_host = ""
plex_notify = 0
plex_update = 0
plex_username = ""
plex_password = ""
plex_server_host = ""
plex_enabled = 0
[Old Piratebay]
oldpiratebay = 0
oldpiratebay_ratio = ""
oldpiratebay_url = ""
[Pushover]
pushover_apitoken = ""
pushover_onsnatch = 0
pushover_enabled = 0
pushover_keys = ""
pushover_priority = 0
[NZBget]
nzbget_priority = 0
nzbget_password = ""
nzbget_host = ""
nzbget_category = ""
nzbget_username = nzbget
[NZBsorg]
nzbsorg_hash = ""
nzbsorg = 0
nzbsorg_uid = ""
[NMA]
nma_priority = 0
nma_onsnatch = 0
nma_apikey = ""
nma_enabled = 0
[Advanced]
verify_ssl_cert = 1
ignored_files = ,
journal_mode = wal
album_completion_pct = 80
ignored_folders = ,
cache_sizemb = 32
[Newznab]
newznab = 0
newznab_apikey = ""
newznab_enabled = 1
extra_newznabs = ,
newznab_host = ""
[Prowl]
prowl_onsnatch = 0
prowl_enabled = 0
prowl_priority = 0
prowl_keys = ""
[Twitter]
twitter_prefix = Headphones
twitter_enabled = 0
twitter_username = ""
twitter_password = ""
twitter_onsnatch = 0
[SABnzbd]
sab_category = ""
sab_password = ""
sab_host = ""
sab_username = ""
sab_apikey = ""
[Songkick]
songkick_apikey = nd1We7dFW2RqxPw8
songkick_location = ""
songkick_enabled = 1
songkick_filter_enabled = 0
[uTorrent]
utorrent_password = ""
utorrent_host = ""
utorrent_username = ""
utorrent_label = ""
[LMS]
lms_enabled = 0
lms_host = ""
[PushBullet]
pushbullet_deviceid = ""
pushbullet_apikey = ""
pushbullet_enabled = 0
pushbullet_onsnatch = 0
[Pushalot]
pushalot_enabled = 0
pushalot_onsnatch = 0
pushalot_apikey = ""
[Kat]
kat_ratio = ""
kat = 0
kat_proxy_url = ""
[Piratebay]
piratebay_ratio = ""
piratebay = 0
piratebay_proxy_url = ""
[MPC]
mpc_enabled = 0
[XBMC]
xbmc_username = ""
xbmc_host = ""
xbmc_enabled = 0
xbmc_update = 0
xbmc_password = ""
xbmc_notify = 0
[Beets]
idtag = 1
[Rutracker]
rutracker_user = ""
rutracker_ratio = ""
rutracker = 0
rutracker_password = ""
[Boxcar]
boxcar_onsnatch = 0
boxcar_enabled = 0
boxcar_token = ""
[Transmission]
transmission_password = ""
transmission_username = ""
transmission_host = ""
[Mininova]
mininova = 0
mininova_ratio = ""
[OSX_Notify]
osx_notify_enabled = 0
osx_notify_app = /Applications/Headphones
osx_notify_onsnatch = 0
[What.cd]
whatcd_password = ""
whatcd_username = ""
whatcd = 0
whatcd_ratio = ""
[Synoindex]
synoindex_enabled = 0
[omgwtfnzbs]
omgwtfnzbs = 0
omgwtfnzbs_uid = ""
omgwtfnzbs_apikey = ""

View File

@@ -0,0 +1,17 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/en/configs/bookmarks/
---
- Developer:
- Github:
- abbr: GH
href: https://github.com/
- Social:
- Reddit:
- abbr: RE
href: https://reddit.com/
- Entertainment:
- YouTube:
- abbr: YT
href: https://youtube.com/

View File

@@ -0,0 +1,5 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/en/configs/docker/
---
local:
socket: /var/run/docker.sock

View File

@@ -0,0 +1,3 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/en/configs/services/
---

View File

@@ -0,0 +1,18 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/en/configs/settings
---
title: StartPage
theme: dark
color: purple
target: _blank
language: en
headerStyle: boxed
layout:
Media:
style: row
columns: 4
providers:
openweathermap: openweathermapapikey
weatherapi: weatherapiapikey

View File

@@ -0,0 +1,19 @@
# For configuration options and examples, please see:
# https://gethomepage.dev/en/configs/widgets/
---
- resources:
cpu: true
memory: true
disk: /
- search:
focus: true
target: _blank
provider: duckduckgo
url: https://search.casjay.net/?q=
- datetime:
format:
dateStyle: short
timeStyle: short
hour12: false

40
configs/homey/homey.yml Normal file
View File

@@ -0,0 +1,40 @@
# Refer to README.md for configuration instructions
title: homey # dashboard title
minimal_mode: false # disable functionality; conserve resources
show_house: true # disable 3D house in header
compact_services: false # reduce service padding
enable_service_status: true # toggle up/down indicators for services
enable_notifications: true # toggle in-page notifications for selected events
audio_notifications: false # toggle notification audio
bookmarks_in_header: false # fill empty space in header with bookmarks
docker_api_backend: docker # valid options: docker, portainer
services:
- name: Portainer
icon: portainer.png
subtitle: Docker container management
url: https://192.168.1.XXX:9443
- name: Flood
icon: flood.png
subtitle: Web UI for rTorrent
url: http://192.168.1.XXX:<port>
- name: Router
icon: router.png
url: http://192.168.1.1
cards:
- name: Torrents
enable: false
- name: Weather
enable: true
- name: System
enable: false
- name: Bookmarks
enable: true
bookmarks:
- name: GitHub
url: https://github.com
- name: YTMND
url: https://ytmnd.com/
hover: lol internet

View File

@@ -0,0 +1,60 @@
###############################################################################
# $Header: /var/cvsroot/gentoo-x86/www-servers/lighttpd/files/conf/lighttpd.conf,v 1.3 2005/09/01 14:22:35 ka0ttic Exp $
###############################################################################
var.basedir = "/var/www/localhost"
var.statedir = "/var/lib/lighttpd"
var.logdir = "/data/logs/lighttpd"
server.modules = (
"mod_auth",
"mod_rewrite",
"mod_redirect",
"mod_alias",
"mod_access",
"mod_status",
"mod_setenv",
"mod_proxy",
"mod_simple_vhost",
"mod_evhost",
"mod_userdir",
"mod_deflate",
"mod_ssi",
"mod_usertrack",
"mod_expire",
"mod_secdownload",
"mod_rrdtool",
"mod_webdav",
"mod_accesslog",
"mod_cgi",
"mod_fastcgi"
)
server.username = "lighttpd"
server.groupname = "lighttpd"
server.port = REPLACE_SERVER_PORT
server.document-root = "/data/htdocs/www"
server.tag = "lighttpd"
server.follow-symlink = "enable"
server.errorfile-prefix = var.basedir + "/error/status-"
server.indexfiles = ("index.php", "index.html","index.htm", "default.htm", "index.lighttpd.html","index.txt","index.json")
server.pid-file = "/tmp/lighttpd.pid"
server.errorlog = "/data/logs/lighttpd/lighttpd.log"
accesslog.filename = "/data/logs/lighttpd/access_log"
static-file.exclude-extensions = (".php", ".pl", ".cgi", ".fcgi")
include "mime-types.conf"
include "mod_cgi.conf"
include "mod_fastcgi_fpm.conf"
url.access-deny = ("~", ".inc")
ssi.extension = (".shtml")
status.status-url = "/server-status"
status.config-url = "/server-config"
# vim: set ft=conf foldmethod=marker et :

View File

@@ -0,0 +1,23 @@
###############################################################################
# mod_cgi.conf
# include'd by lighttpd.conf.
# $Header: /var/cvsroot/gentoo-x86/www-servers/lighttpd/files/conf/mod_cgi.conf,v 1.1 2005/08/27 12:36:13 ka0ttic Exp $
###############################################################################
# NOTE: this requires mod_alias
alias.url = (
"/cgi-bin/" => "/data/htdocs/cgi-bin"
)
cgi.assign = (
".pl" => "/usr/bin/perl",
".cgi" => "/usr/bin/perl",
".rb" => "/usr/bin/ruby",
".py" => "/usr/bin/python",
".php" => "/usr/bin/php-cgi"
)
$HTTP["url"] =~ "^/cgi-bin/" {
dir-listing.activate = "disable"
}
# vim: set ft=conf foldmethod=marker et :

View File

@@ -0,0 +1,23 @@
###############################################################################
# mod_fastcgi_fpm.conf
# include'd by lighttpd.conf.
###############################################################################
fastcgi.server = (
".php" =>
(( "host" => "127.0.0.1",
"port" => 9000,
"bin-path" => "/usr/bin/php"
))
)
fastcgi.map-extensions = (
".php3" => ".php",
".php4" => ".php",
".php5" => ".php",
".php7" => ".php",
".php8" => ".php",
".phps" => ".php",
".phtml" => ".php"
)
# vim: set ft=conf foldmethod=marker et :

View File

@@ -0,0 +1,24 @@
# mongod.conf
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /dev/stdout
# Where and how to store data.
storage:
dbPath: /data/db/mongo
journal:
enabled: true
# engine:
# wiredTiger:
# how the process runs
processManagement:
timeZoneInfo: /usr/share/zoneinfo
# network interfaces
net:
port: 27017
bindIp: 0.0.0.0

38
configs/mysql/my.cnf Normal file
View File

@@ -0,0 +1,38 @@
# Default mariadb config file
[client]
port = 3306
socket = /tmp/mysql.sock
default_character_set = utf8
[mysqld_safe]
datadir = REPLACE_DATABASE_DIR
port = 3306
socket = /tmp/mysql.sock
open_files_limit = 16384
log-error = /data/logs/mysql/mysql.err.log
[mysqld]
datadir = REPLACE_DATABASE_DIR
port = 3306
bind-address = 0.0.0.0
socket = /tmp/mysql.sock
open_files_limit = 16384
max_allowed_packet = 1024M
max_connections = 200
max_user_connections = 50
log_warnings = 2
slow_query_log = 1
general_log = 1
key_buffer_size = 8M
general_log_file = /data/logs/mysql/mysql.log
slow_query_log_file = /data/logs/mysql/mysql.err.log
log_error = /data/logs/mysql/mysql.err.log
[mysql]
no_auto_rehash
max_allowed_packet = 1024M
prompt = '\u@\h [\d]> '
[mysqldump]
max_allowed_packet = 1024M

View File

@@ -0,0 +1,8 @@
#Certbot DNS
dns_rfc2136_server = 127.0.0.1
# TSIG key name
dns_rfc2136_name = certbot.
# TSIG key secret
dns_rfc2136_secret = REPLACE_KEY_CERTBOT
# TSIG key algorithm
dns_rfc2136_algorithm = HMAC-SHA256

77
configs/named/named.conf Normal file
View File

@@ -0,0 +1,77 @@
# default options - https://bind9.readthedocs.io/en/latest/chapter3.html
options {
version "9";
listen-on { any; };
listen-on-v6 { any; };
zone-statistics yes;
max-cache-size 60m;
interface-interval 60;
max-ncache-ttl 10800;
max-udp-size 4096;
forwarders { 1.1.1.1; 8.8.8.8; 8.8.4.4; };
notify yes;
allow-transfer { trusted; };
transfer-format many-answers;
allow-query { any; };
allow-recursion { any; };
allow-query-cache { any; };
auth-nxdomain no;
dnssec-validation auto;
directory "/var/bind";
managed-keys-directory "/etc/bind/keys";
pid-file "/run/named/named.pid";
dump-file "/data/logs/named/dump.db";
statistics-file "/data/logs/named/named.stats";
memstatistics-file "/data/logs/named/mem.stats";
};
#####################################################################
# access settings
acl "all" { 0.0.0.0/0; ::/0; };
acl "trusted" { 10.0.0.0/8; 127.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; };
#####################################################################
# named logging options
logging {
channel xfer-in { stderr; severity info; print-category yes; print-severity yes; print-time yes; };
channel xfer-out { stderr; severity info; print-category yes; print-severity yes; print-time yes; };
channel update { stderr; severity info; print-category yes; print-severity yes; print-time yes; };
channel notify { stderr; severity info; print-category yes; print-severity yes; print-time yes; };
channel querylog { stderr; severity info; print-time yes; };
channel security { file "/data/logs/named/security.log"; severity dynamic; print-severity yes; print-time yes; };
channel default { file "/data/logs/named/default.log"; severity debug; print-category yes; print-severity yes; print-time yes; };
channel debug { file "/data/logs/named/debug.log"; severity debug; };
category lame-servers { default; debug; };
category dispatch { default; debug; };
category queries { querylog; debug; };
category update { default; update; debug; };
category network { default; debug; };
category unmatched { default; debug; };
category client { default; debug; };
category notify { notify; debug; };
category xfer-out { xfer-out; debug; };
category xfer-in { xfer-in; debug; };
category resolver { default; debug; };
category config { default; debug; };
category security { security; debug; };
category database { default; debug; };
category general { default; debug; };
category default { default; };
category dnssec { security; debug; };
};
#####################################################################
# rndc keys
key "certbot." { algorithm hmac-sha256; secret "REPLACE_KEY_CERTBOT"; };
key "rndc-key" { algorithm hmac-sha256; secret "REPLACE_KEY_RNDC"; };
key "dhcp-key" { algorithm hmac-sha256; secret "REPLACE_KEY_DHCP"; };
key "backup-key" { algorithm hmac-sha256; secret "REPLACE_KEY_BACKUP"; };
#####################################################################
# rndc settings
controls { inet 127.0.0.1 allow { trusted; } keys { "rndc-key"; }; };
#####################################################################
# ********** begin root info **********
zone "." {
type hint;
file "/var/bind/root.cache";
};
# ********** end root info **********
# end
#####################################################################

5
configs/named/rndc.key Normal file
View File

@@ -0,0 +1,5 @@
# rndc keys
key "certbot." { algorithm hmac-sha256; secret "REPLACE_KEY_CERTBOT"; };
key "rndc-key" { algorithm hmac-sha256; secret "REPLACE_KEY_RNDC"; };
key "dhcp-key" { algorithm hmac-sha256; secret "REPLACE_KEY_DHCP"; };
key "backup-key" { algorithm hmac-sha256; secret "REPLACE_KEY_BACKUP"; };

99
configs/nginx/mime.types Normal file
View File

@@ -0,0 +1,99 @@
types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;
text/mathml mml;
text/plain txt;
text/vnd.sun.j2me.app-descriptor jad;
text/vnd.wap.wml wml;
text/x-component htc;
image/avif avif;
image/png png;
image/svg+xml svg svgz;
image/tiff tif tiff;
image/vnd.wap.wbmp wbmp;
image/webp webp;
image/x-icon ico;
image/x-jng jng;
image/x-ms-bmp bmp;
font/woff woff;
font/woff2 woff2;
application/java-archive jar war ear;
application/json json;
application/mac-binhex40 hqx;
application/msword doc;
application/pdf pdf;
application/postscript ps eps ai;
application/rtf rtf;
application/vnd.apple.mpegurl m3u8;
application/vnd.google-earth.kml+xml kml;
application/vnd.google-earth.kmz kmz;
application/vnd.ms-excel xls;
application/vnd.ms-fontobject eot;
application/vnd.ms-powerpoint ppt;
application/vnd.oasis.opendocument.graphics odg;
application/vnd.oasis.opendocument.presentation odp;
application/vnd.oasis.opendocument.spreadsheet ods;
application/vnd.oasis.opendocument.text odt;
application/vnd.openxmlformats-officedocument.presentationml.presentation
pptx;
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
xlsx;
application/vnd.openxmlformats-officedocument.wordprocessingml.document
docx;
application/vnd.wap.wmlc wmlc;
application/wasm wasm;
application/x-7z-compressed 7z;
application/x-cocoa cco;
application/x-java-archive-diff jardiff;
application/x-java-jnlp-file jnlp;
application/x-makeself run;
application/x-perl pl pm;
application/x-pilot prc pdb;
application/x-rar-compressed rar;
application/x-redhat-package-manager rpm;
application/x-sea sea;
application/x-shockwave-flash swf;
application/x-stuffit sit;
application/x-tcl tcl tk;
application/x-x509-ca-cert der pem crt;
application/x-xpinstall xpi;
application/xhtml+xml xhtml;
application/xspf+xml xspf;
application/zip zip;
application/octet-stream bin exe dll;
application/octet-stream deb;
application/octet-stream dmg;
application/octet-stream iso img;
application/octet-stream msi msp msm;
audio/midi mid midi kar;
audio/mpeg mp3;
audio/ogg ogg;
audio/x-m4a m4a;
audio/x-realaudio ra;
video/3gpp 3gpp 3gp;
video/mp2t ts;
video/mp4 mp4;
video/mpeg mpeg mpg;
video/quicktime mov;
video/webm webm;
video/x-flv flv;
video/x-m4v m4v;
video/x-mng mng;
video/x-ms-asf asx asf;
video/x-ms-wmv wmv;
video/x-msvideo avi;
}

68
configs/nginx/nginx.conf Normal file
View File

@@ -0,0 +1,68 @@
# Default nginx configuration
user root;
worker_processes auto;
daemon off;
error_log /data/logs/nginx/nginx.log warn;
pid /run/nginx.pid;
events {
worker_connections 1024;
}
http {
include /etc/nginx/mime.types;
default_type "text/html";
access_log /data/logs/nginx/access.default.log;
sendfile on;
keepalive_timeout 65;
gzip on;
map $http_upgrade $connection_upgrade { default upgrade; '' close; }
disable_symlinks off;
server {
listen REPLACE_SERVER_PORT default_server;
server_name REPLACE_SERVER_NAME;
location = /favicon.ico {
log_not_found off;
access_log off;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location /health {
default_type text/html;
allow all;
access_log off;
return 200 'OK';
}
location /health/json {
default_type application/json;
allow all;
access_log off;
return 200 '{"status":"OK"}';
}
location /health/status {
stub_status;
}
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
fastcgi_param HTTP_PROXY "";
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
}
include /etc/nginx/vhosts.d/*.conf;
}

View File

@@ -0,0 +1,13 @@
server {
listen REPLACE_SERVER_PORT;
server_name REPLACE_SERVER_NAME;
root REPLACE_SERVER_DIR;
index index.php index.cgi index.pl index.aspx awstats.pl index.txt index.json index.html index.unknown.php index.default.php;
proxy_intercept_errors off;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' *; object-src 'self'" always;
}

View File

@@ -0,0 +1,18 @@
server {
listen REPLACE_SERVER_PORT ssl http2 default_server;
server_name REPLACE_SERVER_NAME;
root REPLACE_SERVER_DIR;
index index.php index.cgi index.pl index.aspx awstats.pl index.txt index.json index.html index.unknown.php index.default.php;
proxy_intercept_errors off;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval' *; frame-src 'self' *; object-src 'self'" always;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_prefer_server_ciphers off;
ssl_certificate /etc/ssl/localhost.crt;
ssl_certificate_key /etc/ssl/localhost.key;
}

7
configs/php/php-fpm.conf Normal file
View File

@@ -0,0 +1,7 @@
;;;;;;;;;;;;;;;;;;;;;
pid = /run/php-fpm.pid
error_log = /data/logs/php/error_log
daemonize = no
include=/etc/php/php-fpm.d/*.conf

View File

@@ -0,0 +1,27 @@
[www]
user = root
group = root
listen = 9000
listen.backlog = 65535
listen.allowed_clients = 127.0.0.1
pm = ondemand
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.status_path = /status
ping.path = /ping
ping.response = pong
access.log = /data/logs/php/access_log
access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
slowlog = /data/logs/php/error_log
clear_env = no
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp
php_flag[display_errors] = on
php_admin_value[error_log] = /data/logs/php/error_log
php_admin_flag[log_errors] = on
php_admin_value[memory_limit] = 512M

347
configs/php/php.ini Normal file
View File

@@ -0,0 +1,347 @@
[PHP]
user_ini.filename = "php.ini"
user_ini.filename = ".user.ini"
user_ini.cache_ttl = 300
engine = On
short_open_tag = Off
asp_tags = Off
precision = 14
output_buffering = 4096
;output_handler =
zlib.output_compression = Off
;zlib.output_compression_level = -1
;zlib.output_handler =
implicit_flush = Off
unserialize_callback_func =
serialize_precision = 17
;open_basedir =
disable_functions =
disable_classes =
ignore_user_abort = On
realpath_cache_size = 16k
realpath_cache_ttl = 120
zend.enable_gc = On
zend.multibyte = Off
zend.script_encoding =
expose_php = Off
max_execution_time = 3600
max_input_time = 3600
;max_input_nesting_level = 64
; max_input_vars = 1000
memory_limit = 512M
error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
display_errors = On
display_startup_errors = Off
log_errors = On
log_errors_max_len = 1024
ignore_repeated_errors = Off
ignore_repeated_source = Off
report_memleaks = On
;report_zend_debug = 0
track_errors = Off
;xmlrpc_errors = 0
;xmlrpc_error_number = 0
html_errors = On
;docref_root = "/phpmanual/"
;docref_ext = .html
error_prepend_string = "<span style='color: #ff0000'>"
error_append_string = "</span>"
error_log = /data/logs/php/php.log
;arg_separator.input = ";&"
variables_order = "GPCS"
request_order = "GP"
register_argc_argv = Off
auto_globals_jit = On
;enable_post_data_reading = Off
post_max_size = 1G
auto_prepend_file =
auto_append_file =
default_mimetype = "text/html"
default_charset = "UTF-8"
;internal_encoding =
;input_encoding =
;output_encoding =
always_populate_raw_post_data = -1
doc_root =
user_dir =
enable_dl = Off
cgi.force_redirect = 1
;cgi.nph = 1
cgi.redirect_status_env =
cgi.fix_pathinfo = 1
fastcgi.impersonate = 1
fastcgi.logging = 1
;cgi.rfc2616_headers = 0
file_uploads = On
upload_tmp_dir = /var/tmp
upload_max_filesize =1G
max_file_uploads = 20
allow_url_fopen = On
allow_url_include = On
;from="john@doe.com"
;user_agent="PHP"
default_socket_timeout = 60
;auto_detect_line_endings = Off
[CLI Server]
cli_server.color = On
[Date]
date.timezone = America/New_York
;date.default_latitude = 31.7667
;date.default_longitude = 35.2333
[filter]
;filter.default = unsafe_raw
;filter.default_flags =
[iconv]
;iconv.input_encoding =
;iconv.internal_encoding =
;iconv.output_encoding =
[intl]
;intl.default_locale =
;intl.error_level = E_WARNING
[sqlite]
;sqlite.assoc_case = 0
[sqlite3]
;sqlite3.extension_dir =
[Pcre]
;pcre.backtrack_limit=100000
;pcre.recursion_limit=100000
[Pdo]
;pdo_odbc.connection_pooling=strict
;pdo_odbc.db2_instance_name
[Pdo_mysql]
pdo_mysql.cache_size = 2000
pdo_mysql.default_socket=
[Phar]
;phar.readonly = On
;phar.require_hash = On
;phar.cache_list =
[mail function]
sendmail_path = -S localhost -t -i
;sendmail_path = /usr/sbin/sendmail -t -i
;mail.force_extra_parameters =
mail.add_x_header = On
;mail.log = syslog
[SQL]
sql.safe_mode = Off
[ODBC]
;odbc.default_db = Not yet implemented
;odbc.default_user = Not yet implemented
;odbc.default_pw = Not yet implemented
;odbc.default_cursortype
odbc.allow_persistent = On
odbc.check_persistent = On
odbc.max_persistent = -1
odbc.max_links = -1
odbc.defaultlrl = 4096
odbc.defaultbinmode = 1
;birdstep.max_links = -1
[Interbase]
ibase.allow_persistent = 1
ibase.max_persistent = -1
ibase.max_links = -1
;ibase.default_db =
;ibase.default_user =
;ibase.default_password =
;ibase.default_charset =
ibase.timestampformat = "%Y-%m-%d %H:%M:%S"
ibase.dateformat = "%Y-%m-%d"
ibase.timeformat = "%H:%M:%S"
[MySQL]
mysql.allow_local_infile = On
mysql.allow_persistent = On
mysql.cache_size = 2000
mysql.max_persistent = -1
mysql.max_links = -1
mysql.default_port =
mysql.default_socket =
mysql.default_host =
mysql.default_user =
mysql.default_password =
mysql.connect_timeout = 60
mysql.trace_mode = Off
[MySQLi]
mysqli.max_persistent = -1
mysqli.allow_local_infile = On
mysqli.allow_persistent = On
mysqli.max_links = -1
mysqli.cache_size = 2000
mysqli.default_port = 3306
mysqli.default_socket =
mysqli.default_host =
mysqli.default_user =
mysqli.default_pw =
mysqli.reconnect = Off
[mysqlnd]
mysqlnd.collect_statistics = On
mysqlnd.collect_memory_statistics = Off
;mysqlnd.net_cmd_buffer_size = 2048
;mysqlnd.net_read_buffer_size = 32768
[OCI8]
;oci8.privileged_connect = Off
;oci8.max_persistent = -1
;oci8.persistent_timeout = -1
;oci8.ping_interval = 60
;oci8.connection_class =
;oci8.events = Off
;oci8.statement_cache_size = 20
;oci8.default_prefetch = 100
;oci8.old_oci_close_semantics = Off
[PostgreSQL]
pgsql.allow_persistent = On
pgsql.auto_reset_persistent = Off
pgsql.max_persistent = -1
pgsql.max_links = -1
pgsql.ignore_notice = 0
pgsql.log_notice = 0
[Sybase-CT]
sybct.allow_persistent = On
sybct.max_persistent = -1
sybct.max_links = -1
sybct.min_server_severity = 10
sybct.min_client_severity = 10
;sybct.timeout=
;sybct.packet_size
;sybct.login_timeout=
;sybct.hostname=
;sybct.deadlock_retry_count=
[bcmath]
bcmath.scale = 0
[browscap]
;browscap = extra/browscap.ini
[Session]
session.save_handler = files
session.save_path = "/tmp"
session.use_strict_mode = 0
session.use_cookies = 1
;session.cookie_secure =
session.use_only_cookies = 1
session.name = PHPSESSID
session.auto_start = 0
session.cookie_lifetime = 525600
session.cookie_path = /
session.cookie_domain =
session.cookie_httponly =
session.serialize_handler = php
session.gc_probability = 1
session.gc_divisor = 1000
session.gc_maxlifetime = 525600
session.referer_check =
;session.entropy_length = 32
;session.entropy_file = /dev/urandom
session.cache_limiter = nocache
session.cache_expire = 180
session.use_trans_sid = 0
session.hash_function = 0
session.hash_bits_per_character = 5
url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"
session.upload_progress.enabled = On
session.upload_progress.cleanup = On
session.upload_progress.prefix = "upload_progress_"
session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS"
session.upload_progress.freq = "1%"
session.upload_progress.min_freq = "1"
[MSSQL]
mssql.allow_persistent = On
mssql.max_persistent = -1
mssql.max_links = -1
mssql.min_error_severity = 10
mssql.min_message_severity = 10
mssql.compatibility_mode = Off
;mssql.connect_timeout = 5
;mssql.timeout = 60
;mssql.textlimit = 4096
;mssql.textsize = 4096
;mssql.batchsize = 0
;mssql.datetimeconvert = On
mssql.secure_connection = Off
;mssql.max_procs = -1
;mssql.charset = "ISO-8859-1"
[Assertion]
;assert.active = On
;assert.warning = On
;assert.bail = Off
;assert.callback = 0
;assert.quiet_eval = 0
[mbstring]
;mbstring.language = Japanese
;mbstring.internal_encoding =
;mbstring.http_input =
;mbstring.http_output =
;mbstring.encoding_translation = Off
;mbstring.detect_order = auto
;mbstring.substitute_character = none
;mbstring.func_overload = 0
;mbstring.strict_detection = On
;mbstring.http_output_conv_mimetype=
[gd]
;gd.jpeg_ignore_warning = 0
[exif]
;exif.encode_unicode = ISO-8859-15
;exif.decode_unicode_motorola = UCS-2BE
;exif.decode_unicode_intel = UCS-2LE
;exif.encode_jis =
;exif.decode_jis_motorola = JIS
;exif.decode_jis_intel = JIS
[Tidy]
;tidy.default_config = /usr/local/lib/php/default.tcfg
tidy.clean_output = Off
[soap]
soap.wsdl_cache_enabled=1
soap.wsdl_cache_dir="/tmp"
soap.wsdl_cache_ttl=86400
soap.wsdl_cache_limit = 5
[sysvshm]
;sysvshm.init_mem = 10000
[ldap]
ldap.max_links = -1
[mcrypt]
;mcrypt.algorithms_dir=
;mcrypt.modes_dir=
[dba]
;dba.default_handler=
[curl]
;curl.cainfo =
[openssl]
;openssl.cafile=
;openssl.capath=
; Local Variables:
; tab-width: 4
; End:

7
configs/redis/redis.conf Normal file
View File

@@ -0,0 +1,7 @@
# Redis conf file
port 6379
unixsocket /run/redis.sock
unixsocketperm 770
daemonize no
pidfile /tmp/redis.pid
dir /data/redis

2
configs/ssmtp/revaliases Normal file
View File

@@ -0,0 +1,2 @@
# sSMTP aliases
#root:your_login@your.domain:mailhub.your.domain[:port]

5
configs/ssmtp/ssmtp.conf Normal file
View File

@@ -0,0 +1,5 @@
# sSMTP sendmail
root=postmaster
mailhub=172.17.0.1
rewriteDomain=localhost
hostname="localhost"