Skip to content
Snippets Groups Projects
Commit f8cb527f authored by Jeffrey Zhang's avatar Jeffrey Zhang
Browse files

Security reinforce for apache server

Disable ServerSignature and Hide apache related infromation.

Change-Id: I9188ddb85988539087c922117bb9f53454b7507c
parent 4e870b46
No related branches found
No related tags found
No related merge requests found
Showing
with 24 additions and 0 deletions
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ aodh_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ aodh_api_port }}>
......
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ cinder_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ cinder_api_port }}>
......
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ cloudkitty_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ cloudkitty_api_port }}>
......
......@@ -2,6 +2,8 @@
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ freezer_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ freezer_api_port }}>
......
......@@ -2,6 +2,8 @@
{% set wsgi_path = '/usr/bin' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/bin' %}
Listen {{ api_interface_address }}:{{ gnocchi_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ gnocchi_api_port }}>
......
{% set python_path = '/usr/share/openstack-dashboard' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ horizon_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ horizon_port }}>
......
......@@ -3,6 +3,8 @@
Listen {{ api_interface_address }}:{{ keystone_public_port }}
Listen {{ api_interface_address }}:{{ keystone_admin_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ keystone_public_port }}>
......
......@@ -3,6 +3,8 @@
{% set wsgi_directory = '/usr/bin' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/bin' %}
Listen {{ api_interface_address }}:{{ placement_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ placement_api_port }}>
......
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ panko_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ panko_api_port }}>
......
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ hostvars[inventory_hostname]['ansible_' + api_interface]['ipv4']['address'] }}:{{ vitrage_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ vitrage_api_port }}>
## Vhost docroot
......
{% set python_path = '/usr/lib/python2.7/site-packages' if kolla_install_type == 'binary' else '/var/lib/kolla/venv/lib/python2.7/site-packages' %}
Listen {{ api_interface_address }}:{{ zun_api_port }}
ServerSignature Off
ServerTokens Prod
TraceEnable off
<VirtualHost *:{{ zun_api_port }}>
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment