8462b10e3b
- Increase MaxRequestWorkers from 150 to 400 to prevent "server reached MaxRequestWorkers" errors - Configure MPM Prefork module with optimized worker settings - Add AllowEncodedSlashes NoDecode for special characters in filenames - Increase Redis maxmemory from 512MB to 2GB for better caching - Extend PHP execution times from 1800s to 7200s for large operations - Increase MariaDB max_allowed_packet to 1GB for large file uploads These changes resolve sync failures caused by Apache worker exhaustion. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
58 lines
1.7 KiB
Plaintext
58 lines
1.7 KiB
Plaintext
# Configuration pour reverse proxy Traefik
|
|
# Récupération de l'IP réelle du client via X-Forwarded-For
|
|
ServerName cloud.agence66.fr
|
|
|
|
# Autoriser les caractères spéciaux encodés dans les noms de fichiers
|
|
AllowEncodedSlashes NoDecode
|
|
|
|
RemoteIPHeader X-Forwarded-For
|
|
RemoteIPTrustedProxy 172.16.0.0/12
|
|
RemoteIPTrustedProxy 10.0.0.0/8
|
|
RemoteIPTrustedProxy 192.168.0.0/16
|
|
|
|
# Activer la confiance des en-têtes X-Forwarded-Proto
|
|
SetEnvIf X-Forwarded-Proto "https" HTTPS=on
|
|
|
|
# Timeouts pour gros fichiers (>40MB)
|
|
Timeout 3600
|
|
KeepAlive On
|
|
KeepAliveTimeout 300
|
|
MaxKeepAliveRequests 200
|
|
|
|
# Configuration MPM Prefork - Augmentation des workers
|
|
<IfModule mpm_prefork_module>
|
|
StartServers 10
|
|
MinSpareServers 10
|
|
MaxSpareServers 20
|
|
MaxRequestWorkers 400
|
|
MaxConnectionsPerChild 1000
|
|
</IfModule>
|
|
|
|
<Directory /var/www/html/>
|
|
Options FollowSymLinks MultiViews
|
|
AllowOverride All
|
|
Require all granted
|
|
|
|
<IfModule mod_dav.c>
|
|
Dav off
|
|
</IfModule>
|
|
</Directory>
|
|
|
|
# Headers de sécurité (si non gérés par Traefik)
|
|
<IfModule mod_headers.c>
|
|
# HSTS sera géré par Traefik
|
|
# Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
|
|
|
|
# Autres headers de sécurité
|
|
Header always set Referrer-Policy "no-referrer-when-downgrade"
|
|
Header always set X-Content-Type-Options "nosniff"
|
|
Header always set X-Frame-Options "SAMEORIGIN"
|
|
Header always set X-XSS-Protection "1; mode=block"
|
|
Header always set X-Robots-Tag "noindex, nofollow"
|
|
</IfModule>
|
|
|
|
# Logs avec IP réelle (pas l'IP de Traefik)
|
|
<IfModule mod_remoteip.c>
|
|
LogFormat "%a %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
|
</IfModule>
|