fc1cac8e5a
- Create dedicated apache/mpm_prefork.conf to override default MPM settings - Mount mpm_prefork.conf to /etc/apache2/mods-available/ to properly apply limits - Remove MPM config from nextcloud.conf (was being ignored) - Set ServerLimit and MaxRequestWorkers to 400 (up from 150 default) - Configure optimized worker settings for better concurrency This fixes the "server reached MaxRequestWorkers" error that was causing sync failures and 404 errors by properly overriding Apache's default configuration file instead of trying to set it in conf-enabled. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
49 lines
1.4 KiB
Plaintext
49 lines
1.4 KiB
Plaintext
# Configuration pour reverse proxy Traefik
|
|
# Récupération de l'IP réelle du client via X-Forwarded-For
|
|
ServerName cloud.agence66.fr
|
|
|
|
# Autoriser les caractères spéciaux encodés dans les noms de fichiers
|
|
AllowEncodedSlashes NoDecode
|
|
|
|
RemoteIPHeader X-Forwarded-For
|
|
RemoteIPTrustedProxy 172.16.0.0/12
|
|
RemoteIPTrustedProxy 10.0.0.0/8
|
|
RemoteIPTrustedProxy 192.168.0.0/16
|
|
|
|
# Activer la confiance des en-têtes X-Forwarded-Proto
|
|
SetEnvIf X-Forwarded-Proto "https" HTTPS=on
|
|
|
|
# Timeouts pour gros fichiers (>40MB)
|
|
Timeout 3600
|
|
KeepAlive On
|
|
KeepAliveTimeout 300
|
|
MaxKeepAliveRequests 200
|
|
|
|
<Directory /var/www/html/>
|
|
Options FollowSymLinks MultiViews
|
|
AllowOverride All
|
|
Require all granted
|
|
|
|
<IfModule mod_dav.c>
|
|
Dav off
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
# Headers de sécurité (si non gérés par Traefik)
|
|
<IfModule mod_headers.c>
|
|
# HSTS sera géré par Traefik
|
|
# Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
|
|
|
|
# Autres headers de sécurité
|
|
Header always set Referrer-Policy "no-referrer-when-downgrade"
|
|
Header always set X-Content-Type-Options "nosniff"
|
|
Header always set X-Frame-Options "SAMEORIGIN"
|
|
Header always set X-XSS-Protection "1; mode=block"
|
|
Header always set X-Robots-Tag "noindex, nofollow"
|
|
</IfModule>
|
|
|
|
# Logs avec IP réelle (pas l'IP de Traefik)
|
|
<IfModule mod_remoteip.c>
|
|
LogFormat "%a %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
|
</IfModule>
|