www/pound/files/pound.cfg.in


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

#User "pound"
#Group "pound"
RootJail "/var/empty/pound"
Control "/var/run/pound/ctl_socket"

# Main listening ports
ListenHTTP
    Address 0.0.0.0
    Port    81
    xHTTP   1
End
ListenHTTPS
    Address 0.0.0.0
    Port    444
    Cert    "%%PREFIX%%/share/certs/pound.pem"
    Disable SSLv3
    Ciphers "ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:-LOW"
    xHTTP   1
End

# Images server(s)
Service
    URL ".*.(jpg|gif)"
    BackEnd
        Address 127.0.0.1
        Port    80
    End
End

# Redirect all requests for /forbidden
Service
    Url         "/forbidden.*"
    Redirect    "https://localhost/"
End

# Catch-all server(s)
Service
    BackEnd
        Address 127.0.0.1
        Port    80
    End
    BackEnd
        Address 127.0.0.1
        Port    80
    End
    Session
        Type    BASIC
        TTL     300
    End
End