Here ya go. Thanks!
apache2.conf:
ServerRoot: The top of the directory tree under which the server’s
configuration, error, and log files are kept.
Do NOT add a slash at the end of the directory path.
ServerRoot “/etc/apache2”
The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
Mutex file:${APACHE_LOCK_DIR} default
PidFile: The file in which the server should record its process
identification number when it starts.
This needs to be set in /etc/apache2/envvars
PidFile ${APACHE_PID_FILE}
Timeout: The number of seconds before receives and sends time out.
Timeout 45
KeepAlive: Whether or not to allow persistent connections (more than
one request per connection). Set to “Off” to deactivate.
KeepAlive On
MaxKeepAliveRequests: The maximum number of requests to allow
during a persistent connection. Set to 0 to allow an unlimited amount.
We recommend you leave this number high, for maximum performance.
MaxKeepAliveRequests 1500
KeepAliveTimeout: Number of seconds to wait for the next request from the
same client on the same connection.
KeepAliveTimeout 3
These need to be set in /etc/apache2/envvars
User apache
AccessFileName: The name of the file to look for in each directory
for additional configuration directives. See also the AllowOverride
directive.
AccessFileName .htaccess
The following lines prevent .htaccess and .htpasswd files from being
viewed by Web clients.
<Files ~ “^.ht”>
Order allow,deny
Deny from all
HostnameLookups Off
ErrorLog: The location of the error log file.
ErrorLog /var/log/apache2/error.log
LogLevel: Control the number of messages logged to the error_log.
LogLevel warn
Include module configuration:
Include /etc/apache2/mods-enabled/.load
Include /etc/apache2/mods-enabled/.conf
Include ports listing
Include /etc/apache2/ports.conf
The following directives define some format nicknames for use with
a CustomLog directive (see below).
If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i
LogFormat “%h %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i”” combined
LogFormat “%h %l %u %t “%r” %>s %b” common
LogFormat “%{Referer}i -> %U” referer
LogFormat “%{User-agent}i” agent
ServerTokens
ServerTokens Prod
ServerSignature Off
ServerName dbs9.dx30.net
Include generic snippets of statements
Include /etc/apache2/conf.d/
Include the virtual host configurations:
Include /etc/apache2/sites-enabled/
Virtual Hosts DBS
Include conf/vhosts/vhosts_ssl.conf
#############################################
Include conf/vhosts/vhosts_staging.conf
#######################################################################
vhosts_staging:
@file vhosts_staging.conf
###############################################################################
<VirtualHost *:80 >
ServerName staging30.resultsbydesign.com
ServerAdmin webmaster@staging30.resultsbydesign.com
DocumentRoot /home/clients/staging/30/htdocs/
TransferLog /home/clients/staging/30/logs/access_log
HostNameLookups off
ErrorLog /home/clients/staging/30/logs/error_log
LogLevel warn
ErrorDocument 404 http://staging30.resultsbydesign.com/
# Blocking Spiders
RewriteEngine On
LogLevel alert rewrite:trace6
RewriteRule ^/robots.txt /etc/apache2/conf/robots/staging/robots.txt
ServerName staging30.resultsbydesign.com
ServerAdmin webmaster@staging30.resultsbydesign.com
DocumentRoot /home/clients/staging/30/htdocs/
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem
SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem
SSLProtocol -all +TLSv1 +TLSv1.1 +TLSv1.2
# for testing see: https://www.ssllabs.com/ssltest/analyze.html
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:AES128-SHA
TransferLog /home/clients/staging/30/logs/access_log
HostNameLookups off
ErrorLog /home/clients/staging/30/logs/error_log
# LogLevel debug
#
# ErrorLog /var/log/apache2/ssl_engine.log
# LogLevel debug
#
staging307
<VirtualHost *:80 >
ServerName staging307.resultsbydesign.com
ServerAdmin webmaster@staging307.resultsbydesign.com
DocumentRoot /home/clients/staging/307/htdocs/public
TransferLog /home/clients/staging/307/logs/access_log
HostNameLookups off
ErrorLog /home/clients/staging/307/logs/error_log
LogLevel warn
ErrorDocument 404 http://staging307.resultsbydesign.com/
RewriteEngine On
LogLevel alert rewrite:trace6
RewriteRule ^/robots.txt /etc/apache2/conf/robots/staging/robots.txt
ServerName staging307.resultsbydesign.com
ServerAdmin webmaster@staging307.resultsbydesign.com
DocumentRoot /home/clients/staging/307/htdocs/public
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem
vhosts_ssl:
@file vhosts_ssl.conf
###############################################################################
<VirtualHost *:80 >
ServerName dbs9.dx30.net
ServerAdmin webmaster@dbswebsite.com
DocumentRoot /etc/apache2/default-site/
HostNameLookups off
LogLevel warn
RewriteEngine on
<VirtualHost 23.253.213.249:443>
RewriteEngine On
# use all three
# SSLEngine On
# SSLCertificateFile /etc/letsencrypt/live/www.oksanamastersusa.com/fullchain.pem
# SSLCertificateChainFile /etc/letsencrypt/live/www.oksanamastersusa.com/chain.pem
# SSLCertificateKeyFile /etc/letsencrypt/live/www.oksanamastersusa.com/privkey.pem
SetEnvIf User-Agent “.MSIE [1-5].” nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
SetEnvIf User-Agent “.MSIE [6-9].” ssl-unclean-shutdown
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
DocumentRoot /etc/apache2/default-site/
HostNameLookups off
LogLevel warn
<VirtualHost *:80 >
ServerName www.oksanamastersusa.com
ServerAdmin webmaster@dbswebsite.com
ServerAlias www.oksanamastersusa.com oksanamastersusa.com
DocumentRoot /home/clients/oksanamastersusa.com/htdocs
TransferLog /home/clients/oksanamastersusa.com/logs/access_log
CustomLog /home/clients/oksanamastersusa.com/logs/access_log combined
HostNameLookups off
ErrorLog /home/clients/oksanamastersusa.com/logs/error_log
LogLevel warn
RewriteEngine on
ErrorDocument 404 http://www.oksanamastersusa.com/
ServerName www.oksanamastersusa.com
ServerAlias www.oksanamastersusa.com oksanamastersusa.com
RewriteEngine On
SSLEngine On
SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem
SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem
SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown
# https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
ServerAdmin webmaster@oksanamastersusa.com
DocumentRoot /home/clients/oksanamastersusa.com/htdocs/
TransferLog /home/clients/oksanamastersusa.com/logs/access_log
CustomLog /home/clients/oksanamastersusa.com/logs/access_log combined
HostNameLookups off
ErrorLog /home/clients/oksanamastersusa.com/logs/error_log
LogLevel warn
ErrorDocument 404 https://www.oksanamastersusa.com/
<VirtualHost *:80 >
ServerName www.thecenteronline.org
ServerAdmin webmaster@dbswebsite.com
ServerAlias www.thecenteronline.org thecenteronline.org
DocumentRoot /home/clients/thecenteronline.org/htdocs
TransferLog /home/clients/thecenteronline.org/logs/access_log
CustomLog /home/clients/thecenteronline.org/logs/access_log combined
HostNameLookups off
ErrorLog /home/clients/thecenteronline.org/logs/error_log
LogLevel warn
RewriteEngine on
ErrorDocument 404 http://www.thecenteronline.org/
<VirtualHost 23.253.213.249:443>
ServerName www.thecenteronline.org
ServerAlias www.thecenteronline.org thecenteronline.org
RewriteEngine On
SSLEngine On
SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem
SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem
SetEnvIf User-Agent “.MSIE [1-5].” nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
SetEnvIf User-Agent “.MSIE [6-9].” ssl-unclean-shutdown
# https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
ServerAdmin webmaster@thecenteronline.org
DocumentRoot /home/clients/thecenteronline.org/htdocs/
TransferLog /home/clients/thecenteronline.org/logs/access_log
CustomLog /home/clients/thecenteronline.org/logs/access_log combined
HostNameLookups off
ErrorLog /home/clients/thecenteronline.org/logs/error_log
LogLevel warn
ErrorDocument 404 https://www.thecenteronline.org/