Return-Path: 
 <docs-return-8855-apmail-httpd-docs-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-docs-archive@www.apache.org
Received: (qmail 87697 invoked from network); 8 Jun 2010 12:06:31 -0000
Received: from unknown (HELO mail.apache.org) (140.211.11.3)
  by 140.211.11.9 with SMTP; 8 Jun 2010 12:06:31 -0000
Received: (qmail 57599 invoked by uid 500); 8 Jun 2010 12:06:31 -0000
Delivered-To: apmail-httpd-docs-archive@httpd.apache.org
Received: (qmail 57424 invoked by uid 500); 8 Jun 2010 12:06:29 -0000
Mailing-List: contact docs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:docs-help@httpd.apache.org>
list-unsubscribe: <mailto:docs-unsubscribe@httpd.apache.org>
List-Post: <mailto:docs@httpd.apache.org>
Reply-To: docs@httpd.apache.org
List-Id: <docs.httpd.apache.org>
Delivered-To: mailing list docs@httpd.apache.org
Received: (qmail 57416 invoked by uid 99); 8 Jun 2010 12:06:29 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 08 Jun 2010 12:06:29 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of i.galic@brainsware.org
 designates 188.40.115.121 as permitted sender)
Received: from [188.40.115.121] (HELO mail.brainsware.org) (188.40.115.121)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 08 Jun 2010 12:06:21 +0000
Received: from localhost (localhost.localdomain [127.0.0.1])
	by mail.brainsware.org (Postfix) with ESMTP id 51A751DE2F9
	for <docs@httpd.apache.org>; Tue,  8 Jun 2010 12:06:01 +0000 (UTC)
X-Virus-Scanned: amavisd-new at brainsware.org
Received: from mail.brainsware.org ([127.0.0.1])
	by localhost (mail.brainsware.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 0bI63MymVE9z for <docs@httpd.apache.org>;
	Tue,  8 Jun 2010 12:05:55 +0000 (UTC)
Received: from mail.brainsware.org (mail.brainsware.org [188.40.115.121])
	by mail.brainsware.org (Postfix) with ESMTP id 1FD951DE28E
	for <docs@httpd.apache.org>; Tue,  8 Jun 2010 12:05:55 +0000 (UTC)
Date: Tue, 8 Jun 2010 12:05:55 +0000 (UTC)
From: =?utf-8?Q?Igor_Gali=C4=87?= <i.galic@brainsware.org>
To: docs@httpd.apache.org
Message-ID: <1849765122.57.1275998755058.JavaMail.root@iris>
In-Reply-To: <1748880723.55.1275998487782.JavaMail.root@iris>
Subject: Re: Proposal: Default configuration directory
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [195.72.132.1]
X-Mailer: Zimbra 6.0.5_GA_2213.DEBIAN5_64 (ZimbraWebClient - IE7
 (Win)/6.0.5_GA_2213.DEBIAN5_64)
X-Virus-Checked: Checked by ClamAV on apache.org


----- "Jorge Schrauwen" <jorge.schrauwen@gmail.com> wrote:

> Note: This proposal is for trunk, not 2.3/2.4 or earlier.

2.3/2.4 *is* trunk right now, and, as it sometimes seems, far
away - unfortunately.

> I propose provide a recommendation for providing examples.
>=20
> conf/examples/{protocol}/mod/{module_name}.con and
> conf/examples/{protocol}/mod/{module_name}/*

A number of people have suggested something like, nobody so far, at
least not that I remember, has taken the step to actually do something
about it. Thank you very much for it.
=20
> Additional modules could also drop examples in the correct directory.
>=20
> Maybe we could also replace the default httpd.conf with one telling
> the user to pick one from conf/examples/http and adjust it to there
> needs.
> Ofcourse some good default configurations need to be provided in that
> directory.

I'd like to provide some of those.
Are we going to provide (best practice) examples for external modules,
such as mod_passenger, mod_wsgi, mod_php or similar?

> Example of a default configuration that will tell users to configure
> httpd:
> ---
> Listen 80
>=20
> User apache
> Group apache
>=20
> LoadModule dir_module=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 mod=
ules/mod_dir.so
> LoadModule authz_host_module=C2=A0 modules/mod_authz_host.so
>=20
> <Directory />
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Deny from all
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Options None
> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 AllowOverride None
> </Directory>
>=20
> ErrorDocument 403 "<!DOCTYPE html><html><head><title>Apache HTTPD
> Server</title></head><body><h2>Apache HTTPD is working
> correctly</h2>Please configure your server.</body></html>"
> ---
>=20
> The above provide a secure default that will only display a message.

Might be a bit harsh....
But then again, I'm not sure what a good default would be either.
Maybe serving static content?

> Kind Regards
>=20
> Jorge Schrauwen

Reminder: SSL config for FIPS/PCI-DSSS compatibility.

So long,

--=20
Igor Gali=C4=87

Tel: +43 (0) 699 122 96 338
Fax: +43(0) 1 91 333 41
Mail: i.galic@brainsware.org
URL: http://brainsware.org/

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org