Commit Graph

24 Commits

Author SHA1 Message Date
Joe Orton
dee54cd734 - Updated Systemd security settings (closes #3) (Rahul Sundaram)
- updated httpd.service(5) man page (Joe Orton)
2024-03-07 13:04:06 +00:00
Joe Orton
b4800b5892 use OOMPolicy=continue in httpd.service, httpd@.service (#1947475)
Resolves: rhbz#1947475
2021-04-09 09:40:47 +01:00
Stephen Gallagher
f0c4143d98 Generate SSL keys on service start
This defers the creation of self-signed SSL certificates to the
first time that httpd starts up. This has several advantages:

* Waiting until the first boot will help avoid some issues with
  limited entropy in the install process.
* The certificates can be regenerated automatically whenever they
  are removed, which helps with tools such as virt-sysprep
* The certificates are now generated by SSCG, which produces a
  limited-trust CA alongside it that can be safely imported by a
  client.

For more information on SSCG, see:
https://sgallagh.wordpress.com/2016/05/02/self-signed-ssltls-certificates-why-they-are-terrible-and-a-better-alternative/

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2017-10-03 10:04:03 +01:00
Joe Orton
3150aa97f5 Shorter text in httpd.service. 2017-07-14 12:57:43 +01:00
Joe Orton
6de83362da Fix grammar. 2017-07-14 12:57:43 +01:00
Joe Orton
fce414a1c1 move unit man pages to section 8, add as Documentation= in units 2017-06-05 16:55:45 +01:00
Joe Orton
710b63c5e0 add httpd.service(5) and httpd.socket(5) man pages 2017-05-19 11:04:53 +01:00
Joe Orton
55508e1530 Tweak wording. 2017-04-18 08:59:42 +01:00
Joe Orton
a67a8d7392 update to 2.4.23 (#1325883, #1353203)
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
2016-07-07 13:22:30 +01:00
Jan Kaluza
36930381bc use KillMode=mixed in httpd.service (#1135122) 2014-09-01 09:32:54 +02:00
Jan Kaluza
51fe77bc1f systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg 2013-11-01 12:43:40 +01:00
Jan Kaluza
b3f304619b systemd: send SIGWINCH signal without httpd -k in ExecStop 2013-10-24 12:26:47 +02:00
Jan Kaluza
0b19f7b6e1 ignore /etc/sysconfig/httpd and document systemd way of setting env variables in this file 2013-05-24 10:24:09 +02:00
Jan Kaluza
110beb1317 fix service file to not send SIGTERM after ExecStop (#906321, #912288) 2013-04-16 14:11:13 +02:00
Jan Kaluza
a0a00e754a adding mod_systemd to integrate with systemd better 2012-09-07 11:35:51 +02:00
Joe Orton
42df2ed3fe remove use of syslog.target per guidelines update. 2012-06-08 12:52:12 +01:00
Joe Orton
2e30894d69 use /run for pidfile 2012-06-07 14:02:50 +01:00
Joe Orton
ea6aac8abd tweak default ssl.conf
- fix restart handling (#814645)
- use graceful restart by default
Resolves: rhbz#814645
2012-04-20 12:38:40 +01:00
Joe Orton
93dd920a4b omit redundant -k start 2012-03-13 15:33:26 +00:00
Joe Orton
3a44ff7655 update to 2.4.1
- adopt upstream default httpd.conf (almost verbatim)
- split all LoadModules to conf.modules.d/*.conf
- include conf.d/*.conf at end of httpd.conf
- trim %changelog
2012-03-13 09:55:18 +00:00
Jan Kaluza
a94221331d fix #783629 - start httpd after named 2012-01-23 12:46:55 +01:00
Joe Orton
ce009f995d complete conversion to systemd, drop init script (#770311)
fix comments in /etc/sysconfig/httpd (#771024)
enable PrivateTmp in service file (#781440)
set LANG=C in /etc/sysconfig/httpd
2012-01-17 13:17:38 +00:00
Jan Kaluza
5f894988fe fix #751591 - start httpd after remote-fs 2011-12-06 08:48:34 +01:00
Joe Orton
bd3365ed3e add systemd service files (#684175, thanks to Jóhann B. Guðmundsson) 2011-04-12 15:39:15 +01:00