Apache2 Configuration

1. Current Configuration

1.1. Enabled Modules

  1. mpm_prefork: non-multithreaded worker model
  2. rewrite: used to redirect HTTP to HTTPS
  3. alias: for RedirectMatch

  4. headers: for HSTS

1.2. Enabled Sites

  1. 000-default: default site for HTTP
  2. default-ssl: default site for HTTPS
  3. plinth: provides Plinth on /plinth path
  4. plinth-ssl: allows only SSL traffic onto Plinth

1.3. Enabled Confs

  1. freedombox.conf
    1. Enables HSTS, even for subdomains.
    2. Redirect traffic on home to /plinth.

2. Proposed Configuration