X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=blobdiff_plain;f=htetc%2Ffreeside-base2.4.conf;h=d6ff4f7035865273df9612ad39a08658de606047;hp=36ce3a5158c9bd0900b475ed074ceb1aa6e3cd77;hb=f73a37bd1dfd6f8e5cd497b8ac2843a7b8b1247b;hpb=7943c96636596806b9fc99195c23b166728280c8 diff --git a/htetc/freeside-base2.4.conf b/htetc/freeside-base2.4.conf index 36ce3a515..d6ff4f703 100644 --- a/htetc/freeside-base2.4.conf +++ b/htetc/freeside-base2.4.conf @@ -1,18 +1,17 @@ PerlModule Apache2::compat -PerlModule DBIx::Profile +#PerlModule DBIx::Profile #PerlModule Apache::DBI PerlModule HTML::Mason PerlSetVar MasonArgsMethod CGI PerlModule HTML::Mason::ApacheHandler -PerlChildInitHandler "sub { srand }" - PerlRequire "%%%MASON_HANDLER%%%" +PerlChildInitHandler FS::Mason::child_init + #Locale::SubCountry -# AddDefaultCharset UTF-8 PerlModule FS::AuthCookieHandler24 @@ -21,9 +20,15 @@ PerlAddAuthzProvider user FS::AuthCookieHandler24->authz_handler #XXX need to also work properly for installs w/o /freeside/ in path PerlSetVar FreesideLoginScript /freeside/loginout/login.html -#PerlSetVar FreesideEverSecure 1 +#disables HTTP, so HTTPS only +#PerlSetVar FreesideSecure 1 + +#prevents cookie theft via JS PerlSetVar FreesideHttpOnly 1 +#prevents broken restarts with "couldn't grab the accept mutex" error +Mutex posixsem + #work around Apache2::AuthCookie vs. mod_dir @@ -63,6 +68,11 @@ PerlSetVar FreesideHttpOnly 1 Satisfy any + + + Deny from all + SetHandler None + @@ -74,6 +84,12 @@ PerlSetVar FreesideHttpOnly 1 Satisfy any + + Satisfy any + SetHandler perl-script + PerlHandler HTML::Mason + + Satisfy any SetHandler perl-script