publicisworldwide / docker-stacks Goto Github PK

Thanks for providing the container!

I am doing a research aiming at finding issues in configuration files. After pulling the image we notice that ServerAdmin is set to root@localhost in /etc/httpd/conf/httpd.conf.

However, the HttpD official document recommends the following config:

• ServerAdmin: "However, it's recommended to actually use an email address, since there are a lot of CGI scripts that make that assumption. "

Could you please provide a knob to specify the value of ServerAdmin to identify yourself?

After pulling the image we notice that EnableSendfile is set to on in /etc/httpd/conf/httpd.conf, whose default is Off.

However, the HttpD official document recommends to set EnableSendfile to Off to avoid operational problems when:

• Some platforms may have broken sendfile support that the build system did not detect, especially if the binaries were built on another box and moved to such a machine with broken sendfile support.
• On Linux the use of sendfile triggers TCP-checksum offloading bugs on certain networking cards when using IPv6.
• On Linux on Itanium, sendfile may be unable to handle files over 2GB in size.
• With a network-mounted DocumentRoot (e.g., NFS, SMB, CIFS, FUSE), the kernel may be unable to serve the network file through its own cache.

Maybe it's better to set EnableSendfile should be changed back to off as default.

Thanks for providing the container! I have a question about one httpd config:AuthnCacheContext.
It seems the official document recommends to change the default directory, which is conservative and not optimal. A better policy is to name the AuthnCacheContext for the password provider: for example a htpasswd file or database table.

Maybe it's better to set that to specify a context string for use in the cache keyin the comfig file? Thanks.