add example configs

Author: djbusby

etc/apache2-example.conf

@@ -0,0 +1,99 @@
+#
+# pub.openthc
+#
+
+Define "pub_host" "pub.openthc.example.com"
+Define "pub_root" "/opt/openthc/pub"
+
+
+# webroot
+<Directory ${pub_root}/webroot>
+
+	<LimitExcept GET HEAD POST>
+		Require all denied
+	</LimitExcept>
+
+	AllowOverride None
+	Options FollowSymLinks Indexes
+	Require all granted
+
+	# Headers
+	Header set referrer-policy "same-origin"
+	Header set x-content-type-options "nosniff"
+	Header set x-frame-options "deny"
+	Header set x-xss-protection "1; mode=block"
+
+	# Main Controller
+	RewriteEngine On
+	RewriteCond %{REQUEST_FILENAME} !-d
+	RewriteCond %{REQUEST_FILENAME} !-f
+	RewriteRule .* /main.php [L,QSA]
+
+	# PHP Settings
+	php_flag allow_url_fopen off
+	php_flag allow_url_include off
+	php_flag define_syslog_variables on
+	php_flag display_errors on
+	php_flag display_startup_errors on
+	php_flag enable_dl off
+	php_flag error_log on
+	php_flag expose_php off
+	php_flag html_errors off
+	php_flag ignore_repeated_errors on
+	php_flag ignore_repeated_source on
+	php_flag implicit_flush off
+	php_flag log_errors on
+	php_flag magic_quotes_runtime off
+	php_flag mail.add_x_header off
+
+	php_value date.timezone UTC
+	php_value error_reporting -1
+	php_value max_input_vars 64
+	php_value memory_limit 256M
+	php_value post_max_size 12M
+	php_value upload_max_filesize 12M
+
+	# Session Data
+	php_flag session.auto_start off
+	php_flag session.cookie_httponly on
+	php_flag session.cookie_secure on
+	php_flag session.use_strict_mode on
+	php_value session.cookie_lifetime 0
+	php_value session.cookie_samesite strict
+	php_value session.gc_maxlifetime 3600
+	php_value session.name openthc
+
+</Directory>
+
+
+#
+# HTTP
+<VirtualHost *:80>
+
+	DocumentRoot ${pub_root}/webroot
+
+	ServerName ${pub_host}
+
+	RewriteEngine On
+	RewriteCond %{HTTPS} !=on
+	RewriteRule ^/.well-known - [END]
+	RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
+
+</VirtualHost>
+
+
+#
+# HTTPS
+<VirtualHost *:443>
+
+	DocumentRoot ${pub_root}/webroot
+
+	ServerName ${pub_host}
+
+	SSLEngine On
+	SSLCertificateFile /etc/letsencrypt/live/${pub_host}/fullchain.pem
+	SSLCertificateKeyFile /etc/letsencrypt/live/${pub_host}/privkey.pem
+
+	SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
+
+</VirtualHost>

etc/config-example.php

@@ -0,0 +1,17 @@
+<?php
+/**
+ * OpenTHC Pub Configuration
+ */
+
+$ret = [];
+
+$ret['app'] = [
+	'base' => 'https://pub.openthc.example.com/'
+];
+
+$ret['pub'] = [
+	'public' => '',
+	'secret' => '',
+];
+
+return $ret;