One Hat Cyber Team

Your IP: 216.73.216.19
Server IP: 178.33.27.10
Server: Linux cpanel.dev-unit.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Server Software: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
PHP Version: 8.2.11
Buat File | Buat Folder

Edit File: dev-unit.com.ssl.conf.disabled

server {
	listen 172.16.16.31:443 ssl ;
	server_name dev-unit.com  www.dev-unit.com;
	root /home/devunit/public_html;
	index index.php index.html index.htm;
	access_log /usr/local/apache/domlogs/dev-unit.com.bytes bytes;
	access_log /usr/local/apache/domlogs/dev-unit.com.log combined;
	error_log /usr/local/apache/domlogs/dev-unit.com.error.log error;

ssl_certificate      /etc/pki/tls/certs/dev-unit.com.bundle;
	ssl_certificate_key  /etc/pki/tls/private/dev-unit.com.key;
	ssl_protocols TLSv1.2;
	ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA!RC4:EECDH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS;
	ssl_prefer_server_ciphers   on;

ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 60m;

location / {

add_header Strict-Transport-Security "max-age=31536000";
		add_header X-XSS-Protection "1; mode=block" always;
		add_header X-Content-Type-Options "nosniff" always;

location ~.*\.(jpeg|jpg|png|gif|bmp|ico|svg|css|js)$ {			
			expires max;
		}
		
		location ~ [^/]\.php(/|$) {
			fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
			if (!-f $document_root$fastcgi_script_name) {
				return  404;
			}

fastcgi_pass    unix:/opt/alt/php-fpm/usr/var/sockets/devunit.sock;
			fastcgi_index   index.php;
			include         /etc/nginx/fastcgi_params;
		}

}

location ~* "/\.(htaccess|htpasswd)$" {deny all;return 404;}

disable_symlinks if_not_owner from=/home/devunit/public_html;

location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}

location /.well-known/pki-validation {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}
}

server {
	listen 172.16.16.31:443 ssl ;	
	server_name webmail.dev-unit.com;

access_log /usr/local/apache/domlogs/dev-unit.com.bytes bytes;
	access_log /usr/local/apache/domlogs/dev-unit.com.log combined;
	error_log /usr/local/apache/domlogs/dev-unit.com.error.log error;

ssl_certificate      /etc/pki/tls/certs/dev-unit.com.bundle;
	ssl_certificate_key  /etc/pki/tls/private/dev-unit.com.key;
	ssl_protocols TLSv1.2;
	ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA!RC4:EECDH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS;
	ssl_prefer_server_ciphers   on;

ssl_session_cache   shared:SSL:10m;
	ssl_session_timeout 60m;

location / {
		proxy_pass  http://127.0.0.1:2095;
		include proxy.inc;
	}

location ~ /\.ht    {deny all;}
	location ~ /\.svn/  {deny all;}
	location ~ /\.git/  {deny all;}
	location ~ /\.hg/   {deny all;}
	location ~ /\.bzr/  {deny all;}

disable_symlinks if_not_owner from=/home/devunit/public_html;

location /.well-known/acme-challenge {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}

location /.well-known/pki-validation {
		default_type "text/plain";
		alias /usr/local/apache/autossl_tmp/.well-known/acme-challenge;
	}
}

server {
	listen 172.16.16.31:443 ssl ;	
	server_name mail.dev-unit.com;