Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added mkconfig for DirectAdmin #1

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

Added mkconfig for DirectAdmin #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
5a4bf11
Adding DirectAdmin entry to templates.index
Feb 4, 2015
e41cdf5
Update templates.index
Feb 4, 2015
bb206a3
Update templates.index
Feb 4, 2015
34a1df5
Create directadmin.mozilla
Feb 4, 2015
d37a6e8
Rename directadmin.mozilla to directadmin+mozilla
Feb 4, 2015
dc5509d
Update directadmin+mozilla
Feb 4, 2015
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions templates.index
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,3 +5,4 @@ titus titus
dovecot2 Dovecot 2
postfix Postfix
prosody Prosody
directadmin DirectAdmin
24 changes: 24 additions & 0 deletions templates/directadmin+mozilla
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
# Paste these lines into the "Custom HTTPD Configurations" for your domain.
# You need admin access to DirectAdmin.
|?KEY=__KEY_PATH__|
|?CERT=__CHAINED_PATH__|
|?CAROOT=|

# Instead, you could also use these more generic lines with the DOMAIN DirectAdmin macro:
|?KEY=/etc/sslmate/www.`DOMAIN`.key|
|?CERT=/etc/sslmate/www.`DOMAIN`.chained.crt|
|?CAROOT=|

# If you don't have admin access to DirectAdmin, you can paste the cert,
# chain and key into the "SSL Certificates" form; both the key and the
# host cert into the "Paste a pre-generated certificate and key" field,
# and the chain into the form at "Click Here to paste a CA Root Certificate".

# Recommended security settings from https://wiki.mozilla.org/Security/Server_Side_TLS
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
SSLHonorCipherOrder on
SSLCompression off

# Enable this if you want HSTS (recommended)
# Header add Strict-Transport-Security "max-age=15768000"