/[hydra]/hydra/examples/hydra.conf
ViewVC logotype

Annotation of /hydra/examples/hydra.conf

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.11 - (hide annotations)
Sat Oct 5 08:32:52 2002 UTC (21 years, 5 months ago) by nmav
Branch: MAIN
Changes since 1.10: +9 -1 lines
Added options in configuration file, to request and verify a client certificate.

1 nmav 1.1 # Hydra v0.0.2 configuration file
2     # File format has is similar but no identical to the format of Boa v0.94
3     # version changes are noted in the comments
4     #
5     # The Hydra configuration file is parsed with a lex/yacc or flex/bison
6     # generated parser. If it reports an error, the line number will be
7     # provided; it should be easy to spot. The syntax of each of these
8     # rules is very simple, and they can occur in any order. Where possible
9     # these directives mimic those of NCSA httpd 1.3; I saw no reason to
10     # introduce gratuitous differences.
11    
12 nmav 1.11 # $Id: hydra.conf,v 1.10 2002/10/03 11:26:14 nmav Exp $
13 nmav 1.1
14     # The "ServerRoot" is not in this configuration file. It can be compiled
15     # into the server (see defines.h) or specified on the command line with
16     # the -c option, for example:
17     #
18     # hydra -c /usr/local/hydra
19    
20     # number of threads to spawn
21 nmav 1.6 # One thread might be ok for a single CPU system, but in some systems,
22     # performance may be increased by using a pool of 4-5 threads.
23     Threads 4
24 nmav 1.1
25 nmav 1.10 # Maximum number of concurent connections. If connections arrive after
26     # the given limit has been reached, then they will not be served, until
27     # some established connections close. If you do not set it, or set it to
28     # 0, then the default behaviour takes effect, which is to try to serve
29     # as much connections as possible (depends on system limits).
30 nmav 1.1 #MaxConnections 0
31    
32     # Port: The port Hydra runs on. The default port for http servers is 80.
33     # If it is less than 1024, the server must be started as root.
34    
35     Port 80
36    
37     # Listen: the Internet address to bind(2) to. If you leave it out,
38     # it takes the behavior before 0.93.17.2, which is to bind to all
39     # addresses (INADDR_ANY). You only get one "Listen" directive,
40     # if you want service on multiple IP addresses, you have three choices:
41     # 1. Run hydra without a "Listen" directive
42     # a. All addresses are treated the same; makes sense if the addresses
43     # are localhost, ppp, and eth0.
44     # b. Use the VirtualHost directive below to point requests to different
45     # files. Should be good for a very large number of addresses (web
46     # hosting clients).
47     # 2. Run one copy of hydra per IP address, each has its own configuration
48     # with a "Listen" directive. No big deal up to a few tens of addresses.
49     # Nice separation between clients.
50     # The name you provide gets run through inet_aton(3), so you have to use dotted
51     # quad notation. This configuration is too important to trust some DNS.
52    
53     #Listen 192.68.0.5
54    
55     # User: The name or UID the server should run as.
56     # Group: The group name or GID the server should run as.
57    
58     User nobody
59     Group nogroup
60    
61     # ServerAdmin: The email address where server problems should be sent.
62     # Note: this is not currently used, except as an environment variable
63     # for CGIs.
64    
65     #ServerAdmin root@localhost
66    
67     # ErrorLog: The location of the error log file. If this does not start
68     # with /, it is considered relative to the server root.
69     # Set to /dev/null if you don't want errors logged.
70     # If unset, defaults to /dev/stderr
71    
72     ErrorLog /var/log/hydra/error_log
73     # Please NOTE: Sending the logs to a pipe ('|'), as shown below,
74     # is somewhat experimental and might fail under heavy load.
75     # "Usual libc implementations of printf will stall the whole
76     # process if the receiving end of a pipe stops reading."
77     #ErrorLog "|/usr/sbin/cronolog --symlink=/var/log/hydra/error_log /var/log/hydra/error-%Y%m%d.log"
78    
79     # AccessLog: The location of the access log file. If this does not
80     # start with /, it is considered relative to the server root.
81     # Comment out or set to /dev/null (less effective) to disable
82     # Access logging.
83    
84     AccessLog /var/log/hydra/access_log
85     # Please NOTE: Sending the logs to a pipe ('|'), as shown below,
86     # is somewhat experimental and might fail under heavy load.
87     # "Usual libc implementations of printf will stall the whole
88     # process if the receiving end of a pipe stops reading."
89     #AccessLog "|/usr/sbin/cronolog --symlink=/var/log/hydra/access_log /var/log/hydra/access-%Y%m%d.log"
90    
91     # UseLocaltime: Logical switch. Uncomment to use localtime
92     # instead of UTC time
93     #UseLocaltime
94    
95     # VerboseCGILogs: this is just a logical switch.
96     # It simply notes the start and stop times of cgis in the error log
97     # Comment out to disable.
98    
99     #VerboseCGILogs
100    
101     # ServerName: the name of this server that should be sent back to
102     # clients if different than that returned by gethostname + gethostbyname
103    
104     #ServerName www.your.org.here
105    
106     # VirtualHost: Setup any virtual hosts (host based)
107     # Comment out to disable.
108     # It needs to specify the HostName, the IP (use '*' if all),
109     # the DocumentRoot and the UserDir (if any).
110     # UserDir ist he name of the directory which is appended onto a user's home
111     # directory if a ~user request is recieved.
112     #
113     # Example:
114     # VirtualHost www.dot.com * /var/www public_html
115     # VirtualHost www.dot.com 127.0.0.1 /var/www ""
116     #
117    
118     #VirtualHost www.dot.com * /var/www ""
119    
120     # DocumentRoot: The root directory of the HTML documents.
121     # Comment out to disable server non user files.
122     #
123     # Note that if VirtualHost is enabled, this will be the fallback
124     # for the clients that did not supply any host.
125    
126     DocumentRoot /var/www
127    
128     # DirectoryIndex: Name of the file to use as a pre-written HTML
129     # directory index. Please MAKE AND USE THESE FILES. On the
130     # fly creation of directory indexes can be _slow_.
131     # You can use more than one directory index by adding this
132     # directive several times.
133     # Comment out to always use DirectoryMaker
134    
135     DirectoryIndex index.html
136    
137     # DirectoryMaker: Name of program used to create a directory listing.
138     # Comment out to disable directory listings. If both this and
139     # DirectoryIndex are commented out, accessing a directory will give
140     # an error (though accessing files in the directory are still ok).
141    
142     DirectoryMaker /usr/lib/hydra/boa_indexer
143    
144     # DirectoryCache: If DirectoryIndex doesn't exist, and DirectoryMaker
145     # has been commented out, the the on-the-fly indexing of Hydra can be used
146     # to generate indexes of directories. Be warned that the output is
147     # extremely minimal and can cause delays when slow disks are used.
148     # Note: The DirectoryCache must be writable by the same user/group that
149     # Hydra runs as.
150    
151     # DirectoryCache /var/spool/hydra/dircache
152    
153     # MaxFilesCache: Number of files to keep in file cache memory
154     # Set to 0 to disable file caching.
155    
156     MaxFilesCache 256
157    
158     # MaxFileSizeCache: The maximum size that a file should have in order to
159     # be added to the file cache.
160     # Comment out, to use the default value.
161    
162     MaxFileSizeCache 131072
163    
164     # KeepAliveMax: Number of KeepAlive requests to allow per connection
165     # Comment out, or set to 0 to disable keepalive processing
166    
167     KeepAliveMax 1000
168    
169     # KeepAliveTimeout: seconds to wait before keepalive connection times out
170    
171     KeepAliveTimeout 10
172    
173     # MimeTypes: This is the file that is used to generate mime type pairs
174     # and Content-Type fields for hydra.
175     # Set to /dev/null if you do not want to load a mime types file.
176     # Do *not* comment out (better use AddType!)
177    
178     MimeTypes /etc/mime.types
179    
180     # DefaultType: MIME type used if the file extension is unknown, or there
181     # is no file extension.
182    
183     DefaultType text/plain
184    
185     # CGIPath: The value of the $PATH environment variable given to CGI progs.
186    
187     CGIPath /bin:/usr/bin:/usr/local/bin
188    
189     # SinglePostLimit: The maximum allowable number of bytes in
190     # a single POST. Default is normally 1MB.
191    
192     # AddType: adds types without editing mime.types
193     # Example: AddType type extension [extension ...]
194    
195     # Uncomment the next line if you want .cgi files to execute from anywhere
196     #AddType application/x-httpd-cgi cgi
197 nmav 1.2
198 nmav 1.4
199     # Uncomment the following lines if you want .php files to execute from
200     # anywhere, using the HIC (internally handled CGI). This is much faster
201 nmav 1.7 # than CGIs, since it is handled internally by the server (no fork).
202     # Note that HIC CGIs are handled as NPH CGIs.
203 nmav 1.3
204     # Use this if you have enabled HIC support, and you have compiled
205 nmav 1.5 # PHP as a Hydra (HIC) module.
206 nmav 1.4 #HICModule /usr/lib/libphp4.so "_php" "application/x-httpd-php"
207    
208     # You may also need these:
209     #AddType application/x-httpd-php php
210     #AddType application/x-httpd-php phtml
211    
212 nmav 1.6 # number of HIC threads to spawn
213     # One HIC thread handles requests one after the other. Having several HIC threads
214     # increases performance in servers that serve a lot of dynamic content.
215 nmav 1.8 HICThreads 3
216 nmav 1.1
217     # Redirect, Alias, and ScriptAlias all have the same semantics -- they
218     # match the beginning of a request and take appropriate action. Use
219     # Redirect for other servers, Alias for the same server, and ScriptAlias
220     # to enable directories for script execution.
221    
222     # Redirect allows you to tell clients about documents which used to exist in
223     # your server's namespace, but do not anymore. This allows you to tell the
224     # clients where to look for the relocated document.
225     # Example: Redirect www.ourhost.com /bar http://elsewhere/feh/bar
226    
227     # Aliases: Aliases one path to another.
228     # Example: Alias www.ourhost.com /path1/bar /absolute/path2/foo
229    
230     #Alias www.localhost.com /doc /usr/doc
231    
232     # ScriptAlias: Maps a virtual path to a directory for serving scripts
233     # Example: ScriptAlias www.ourhost.com /htbin/ /www/htbin/
234    
235     #ScriptAlias www.localhost.com /cgi-bin/ /usr/lib/cgi-bin/
236    
237     # non zero enables SSL support
238     # 1: only SSL support
239     # 2: both SSL and non SSL ports
240     SSL 0
241    
242     # The port where the SSL server will listen on
243     SSLPort 4443
244    
245     # read the certificate from
246     SSLCertificate cert.pem
247    
248     # read the private key from
249     SSLKey key.pem
250 nmav 1.11
251     # read the trusted CA list from
252     SSLCAList ca.pem
253    
254     # Whether to verify client. Use 0, or comment out to disable.
255     # 1 means request a certificate, and verify if a certificate is sent.
256     # 2 means require a certificate and verify.
257     SSLVerifyClient 0
258 nmav 1.1
259     # Number of sessions to cache. This is to support session resuming.
260     # Set to 0 to disable.
261     SSLSessionCache 40
262    
263     # After this time (in seconds) has passed, the stored SSL sessions
264     # will be expired, and will not be resumed.
265     SSLSessionTimeout 3600 #one hour
266    
267     # Set the prime bits used in Diffie Hellman authentication. The parameters
268     # are only generated if the DHE ciphersuites are enabled.
269     # Value should be one of 768, 1024, 2048, 4096
270     SSLDHBits 768
271    
272     # The period when the generated parameters are valid. After that period
273     # hydra will regenerate parameters.
274     SSLParamsRefresh 172800 #two days
275    
276     # A comma separated list of the SSL ciphers. Valid selections are:
277     # ARCFOUR-128, ARCFOUR-40, 3DES, AES
278     # Note that ARCFOUR-40 is a weak algorithm.
279     SSLCiphers "AES, 3DES, ARCFOUR-128, ARCFOUR-40"
280    
281     # A comma separated list of the SSL key exchange methods. Valid selections
282     # are: RSA, DHE-RSA, DHE-DSS, RSA-EXPORT
283     # Note that RSA-EXPORT is a weak algorithm.
284     SSLKeyExchangeAlgorithms "RSA, RSA-EXPORT"
285    
286     # A comma separated list of the SSL MAC algorithms. Valid selections
287     # are: MD5, SHA1
288     SSLMACAlgorithms "SHA1, MD5"
289    
290     # A comma separated list of the SSL compression methods. Valid selections
291     # are: NULL
292     SSLCompressionMethods "NULL"
293    
294     # A comma separated list of the SSL protocol versions. Valid selections
295     # are: TLS1.0 and SSL3.0
296     SSLProtocols "TLS1.0, SSL3.0"

webmaster@linux.gr
ViewVC Help
Powered by ViewVC 1.1.26