Split configfiles out of TeX document.
[ach-master.git] / src / configuration / Proxies / Pound / pound.cfg
1 ## Minimal sample pound.cfg
2 ##
3 ## see pound(8) for details
4
5
6 ######################################################################
7 ## global options:
8
9 User            "www-data"
10 Group           "www-data"
11 #RootJail       "/chroot/pound"
12
13 ## Logging: (goes to syslog by default)
14 ##      0       no logging
15 ##      1       normal
16 ##      2       extended
17 ##      3       Apache-style (common log format)
18 LogLevel        1
19
20 ## check backend every X secs:
21 Alive           30
22
23 ## use hardware-accelleration card supported by openssl(1):
24 #SSLEngine      "<hw>"
25
26 # poundctl control socket
27 Control "/var/run/pound/poundctl.socket"
28
29
30 ######################################################################
31 # HTTP Listener, redirects to HTTPS
32 ListenHTTP
33     Address 10.10.0.10
34     Port    80
35     Service
36         Redirect "https://some.site.tld"
37     End
38 End
39 ## HTTPS Listener
40 ListenHTTPS
41     Address      10.10.0.10
42     Port         443
43     AddHeader    "Front-End-Https: on"
44     Cert         "/path/to/your/cert.pem"
45     ## See 'man ciphers'.
46     Ciphers      "TLSv1.2:TLSv1.1:!SSLv3:!SSLv2:EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA"
47     Service
48         BackEnd
49             Address 10.20.0.10
50             Port 80
51         End
52     End
53 End