Secure /admin-toaster/: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| Line 2: | Line 2: | ||
= Secures qmailadmin, vqadmin, qmailmrtq, and isoqlog, Forces HTTPS and aclnet= | = Secures qmailadmin, vqadmin, qmailmrtq, and isoqlog, Forces HTTPS and aclnet= | ||
# cat > temp.txt << __EOF__ | |||
RewriteEngine On | |||
RewriteCond %{HTTPS} !=on | |||
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] | |||
Define aclnet "192.168.2.0/24 192.168.9.0/24 127.0.0.1" | |||
__EOF__ | |||
<pre> | <pre> | ||
Revision as of 13:44, 19 October 2024
Secures qmailadmin, vqadmin, qmailmrtq, and isoqlog, Forces HTTPS and aclnet
# cat > temp.txt << __EOF__
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
Define aclnet "192.168.2.0/24 192.168.9.0/24 127.0.0.1"
__EOF__
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
Define aclnet "172.16.1.0/24 192.168.9.0/24 127.0.0.1"
<IfModule mod_alias.c>
ScriptAlias /mail/ /usr/share/toaster/cgi-bin/
Alias /admin-toaster /usr/share/toaster/htdocs/admin/
Alias /stats-toaster/ /usr/share/toaster/htdocs/mrtg/
Alias /images-toaster/ /usr/share/toaster/htdocs/images/
Alias /scripts/ /usr/share/toaster/htdocs/scripts/
Alias /qmailadmin /usr/share/qmailadmin/
</IfModule>
<Directory /usr/share/qmailadmin>
AddHandler cgi-script .cgi
AddHandler cgi-script qmailadmin
DirectoryIndex index.cgi qmailadmin index.html
Options +Indexes +FollowSymLinks +ExecCGI
<RequireAll>
Require ip ${aclnet}
</RequireAll>
</Directory>
<Directory /usr/share/toaster/htdocs>
Options -Indexes +FollowSymLinks +MultiViews
AllowOverride All
<RequireAll>
Require ip ${aclnet}
</RequireAll>
</Directory>
<Directory /usr/share/toaster/htdocs/admin>
<RequireAll>
AuthType Basic
AuthName "Qmail Toaster v. 1.3 Admin"
AuthUserFile /usr/share/toaster/include/admin.htpasswd
Require valid-user
Require ip ${aclnet}
</RequireAll>
</Directory>
<Directory /usr/share/toaster/htdocs/mrtg>
AllowOverride All
<RequireAll>
AuthType Basic
AuthName "Qmail Toaster v. 1.3 Admin"
AuthUserFile /usr/share/toaster/include/admin.htpasswd
Require valid-user
Require ip ${aclnet}
</RequireAll>
</Directory>
<Directory /usr/share/toaster/cgi-bin/vqadmin>
AllowOverride All
Options ExecCGI
<RequireAll>
AuthType Basic
AuthName "Qmail Toaster v. 1.3 Admin"
AuthUserFile /usr/share/toaster/include/admin.htpasswd
require valid-user
Require ip ${aclnet}
</RequireAll>
</Directory>
<Directory /usr/share/toaster/cgi-bin>
AllowOverride All
Options ExecCGI
<RequireAll>
Require ip ${aclnet}
</RequireAll>
</Directory>