# DO NOT MODIFY THIS FILE WITHOUT TALKING TO GLEN OR HE WILL KILL YOU

<VirtualHost *:443>
        ServerAdmin help@amsl.com
	ServerName thermal.ietf.org
        DocumentRoot /a/www/thermal
        CustomLog /var/log/apache2/thermal_log common

	php_admin_flag allow_url_fopen off
	php_admin_flag file_uploads off
	php_admin_value max_file_uploads 1
	php_admin_value memory_limit 1M
	php_admin_flag mysql.allow_local_infile off
	php_admin_flag mysqli.allow_local_infile off
	php_admin_value open_basedir /tmp:/var/tmp:/a/www/thermal/
	php_admin_value post_max_size 1M
	php_admin_flag safe_mode on
	php_admin_value sendmail_from mtd@ietf.org
	php_admin_value upload_max_filesize 1M

	SSLEngine on
	SSLHonorCipherOrder On
	#SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!SRP:!PSK:!SEED:!CAMELLIA:!LOW
	SSLCompression off
	SSLProtocol All -SSLv2 -SSLv3
	SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA
	SSLCertificateFile /etc/apache2/ssl/www.ietf.org.crt
	SSLCertificateKeyFile /etc/apache2/ssl/www.ietf.org.key
</VirtualHost>

<VirtualHost *:80>
        ServerAdmin help@amsl.com
	ServerName thermal.ietf.org
        DocumentRoot /a/www/thermal
        CustomLog /var/log/apache2/thermal_log common

	Redirect	/	https://thermal.ietf.org/
</VirtualHost>

<Directory /a/www/thermal>
	AllowOverride none
	Options none
	RemoveHandler .txt
</Directory>