ServerTokens Prod

LogFormat "%h \"%{X-Forwarded-For}i\" %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
HostnameLookups Off
ServerSignature Off
AddDefaultCharset iso-8859-1

Alias "/sei" "/opt/sei/web"
Alias "/sip" "/opt/sip/web"
Alias "/infra_css" "/opt/infra/infra_css"
Alias "/infra_js" "/opt/infra/infra_js"

<VirtualHost *:80>
    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</VirtualHost>

<VirtualHost *:443>

    SSLEngine on
    SSLCertificateFile /etc/pki/tls/certs/sei.crt
    SSLCertificateChainFile /etc/pki/tls/certs/sei-ca.pem
    SSLCertificateKeyFile /etc/pki/tls/private/sei.key

    DocumentRoot /opt/sei/web

    ServerAdmin marcelo.linhares@planejamento.gov.br

    DirectoryIndex index.php index.html
    IndexIgnore *

    # Bloqueia acesso à qualquer arquivo ou diretório externo ao DocumentRoot
    <Directory />
        AllowOverride None
    #    Require all denied
    </Directory>

    <Directory ~ "(/opt/sei/web|/opt/sip/web|/opt/infra/infra_css|/opt/infra/infra_js)" >
        AllowOverride None
        Options None
    #    Require all granted
    </Directory>

</VirtualHost>

<IfModule prefork.c>
    StartServers 20
    MinSpareServers 10
    MaxSpareServers 30
    ServerLimit 2000
    MaxClients 2000
    MaxRequestsPerChild 0
</IfModule>

<IfModule worker.c>
    StartServers 3
    MaxClients 150
    MinSpareThreads 25
    MaxSpareThreads 75
    ThreadsPerChild 25
    MaxRequestsPerChild 10000
</IfModule>

<Location /server-status-url-status>
    SetHandler server-status
    Order deny,allow
    #Deny from all
    Allow from all
</Location>

<Location /server-info-url-info>
    SetHandler server-info
    Order deny,allow
    #Deny from all
    Allow from all
</Location>

# Para evitar erros nos log do SIP (menu Infra/Log) identificados por “Microsoft Data Access Internet Publishing Provider Protocol Discovery”
SetEnvIfNoCase user-agent "Microsoft Data Access Internet Publishing Provider Protocol Discovery" bad_bot=1
<FilesMatch "(.*)">
    Order Allow,Deny
    Allow from all
    Deny from env=bad_bot
</FilesMatch>