You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
107 lines
2.8 KiB
107 lines
2.8 KiB
6 years ago
|
ServerName localhost
|
||
|
|
<IfModule ssl_module>
|
||
|
|
SSLRandomSeed startup builtin
|
||
|
|
SSLRandomSeed connect builtin
|
||
|
|
</IfModule>
|
||
|
|
<VirtualHost *:8080>
|
||
|
|
ServerName registry.vlabs.uniwa.gr
|
||
|
|
|
||
|
|
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||
|
|
CustomLog ${APACHE_LOG_DIR}/access.log combined
|
||
|
|
SSLEngine On
|
||
|
|
SSLCertificateFile /usr/local/apache2/conf/domain.crt
|
||
|
|
SSLCertificateKeyFile /usr/local/apache2/conf/domain.key
|
||
|
|
|
||
|
|
SSLCompression off
|
||
|
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1
|
||
|
|
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
|
||
|
|
SSLHonorCipherOrder on
|
||
|
|
|
||
|
|
Header always set "Docker-Distribution-Api-Version" "registry/2.0"
|
||
|
|
Header onsuccess set "Docker-Distribution-Api-Version" "registry/2.0"
|
||
|
|
RequestHeader set X-Forwarded-Proto "https"
|
||
|
|
|
||
|
|
ProxyRequests Off
|
||
|
|
ProxyPreserveHost On
|
||
|
|
ProxyPass /error/ !
|
||
|
|
ProxyPass /v2 http://registry.vlabs.uniwa.gr:5000/v2
|
||
|
|
ProxyPassReverse /v2 http://registry.vlabs.uniwa.gr:5000/v2
|
||
|
|
|
||
|
|
<Location /v2>
|
||
|
|
#SSLRequireSSL
|
||
|
|
|
||
|
|
# Order allow,deny
|
||
|
|
# Allow from all
|
||
|
|
# Read access to authentified users
|
||
|
|
<Limit GET HEAD>
|
||
|
|
Order allow,deny
|
||
|
|
Allow from all
|
||
|
|
#Require valid-user
|
||
|
|
</Limit>
|
||
|
|
|
||
|
|
# Write access to docker-deployer only
|
||
|
|
<Limit POST PUT DELETE PATCH>
|
||
|
|
Order deny,allow
|
||
|
|
Deny from all
|
||
|
|
#Require group pusher
|
||
|
|
</Limit>
|
||
|
|
|
||
|
|
</Location>
|
||
|
|
|
||
|
|
|
||
|
|
</VirtualHost>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<VirtualHost *:443>
|
||
|
|
ServerName registry.vlabs.uniwa.gr
|
||
|
|
|
||
|
|
ErrorLog ${APACHE_LOG_DIR}/error5043.log
|
||
|
|
CustomLog ${APACHE_LOG_DIR}/access5043.log combined
|
||
|
|
SSLEngine On
|
||
|
|
SSLCertificateFile /usr/local/apache2/conf/domain.crt
|
||
|
|
SSLCertificateKeyFile /usr/local/apache2/conf/domain.key
|
||
|
|
|
||
|
|
SSLCompression off
|
||
|
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1
|
||
|
|
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
|
||
|
|
SSLHonorCipherOrder on
|
||
|
|
|
||
|
|
Header always set "Docker-Distribution-Api-Version" "registry/2.0"
|
||
|
|
Header onsuccess set "Docker-Distribution-Api-Version" "registry/2.0"
|
||
|
|
RequestHeader set X-Forwarded-Proto "https"
|
||
|
|
|
||
|
|
ProxyRequests Off
|
||
|
|
ProxyPreserveHost On
|
||
|
|
ProxyPass /error/ !
|
||
|
|
ProxyPass /v2 http://registry.vlabs.uniwa.gr:5000/v2
|
||
|
|
ProxyPassReverse /v2 http://registry.vlabs.uniwa.gr:5000/v2
|
||
|
|
|
||
|
|
<Location /v2>
|
||
|
|
#SSLRequireSSL
|
||
|
|
|
||
|
|
Order deny,allow
|
||
|
|
Allow from all
|
||
|
|
AuthName "Registry Authentication"
|
||
|
|
AuthType basic
|
||
|
|
AuthUserFile "/usr/local/apache2/conf/httpd.htpasswd"
|
||
|
|
AuthGroupFile "/usr/local/apache2/conf/httpd.groups"
|
||
|
|
|
||
|
|
# Read access to authentified users
|
||
|
|
<Limit GET HEAD>
|
||
|
|
Require valid-user
|
||
|
|
</Limit>
|
||
|
|
|
||
|
|
# Write access to docker-deployer only
|
||
|
|
<Limit POST PUT DELETE PATCH>
|
||
|
|
Require group pusher
|
||
|
|
</Limit>
|
||
|
|
|
||
|
|
</Location>
|
||
|
|
|
||
|
|
|
||
|
|
</VirtualHost>
|