Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions apache/vhost-ssl.conf
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,18 @@
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined

SSLEngine on
SSLCertificateFile /etc/ssl/certs/mycert.crt
SSLCertificateKeyFile /etc/ssl/private/mycert.key

# 🔐 SSL Security Hardening
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite HIGH:!aNULL:!MD5:!3DES:!RSA:!AES128-SHA:!AES256-SHA:!AES256-CCM:!AES256-CCM8
SSLHonorCipherOrder on

# Optional: Better compatibility for TLS 1.3
SSLCompression off

# For large requests (Eramba imports/exports)
LimitRequestLine 20000
</VirtualHost>
1 change: 0 additions & 1 deletion docker-compose.simple-install.enterprise.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
version: '3.9'
services:
eramba:
image: ghcr.io/eramba/eramba-enterprise:latest
Expand Down
7 changes: 4 additions & 3 deletions docker-compose.simple-install.yml
Original file line number Diff line number Diff line change
@@ -1,10 +1,11 @@
version: '3.9'
services:
mysql:
container_name: mysql
image: mysql:8.0.28-oracle
image: mysql:8.4.3-oracle
command: ["mysqld", "--disable-log-bin"]
restart: always
ports:
- 13306:3306
volumes:
- db-data:/var/lib/mysql
- ./mysql/conf.d:/etc/mysql/conf.d
Expand All @@ -16,7 +17,7 @@ services:
MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
redis:
container_name: redis
image: redis:6.0.16-alpine
image: redis:7.4.2-alpine
restart: always
eramba:
container_name: eramba
Expand Down
6 changes: 2 additions & 4 deletions mysql/conf.d/custom.cnf
Original file line number Diff line number Diff line change
Expand Up @@ -8,11 +8,9 @@ innodb_stats_on_metadata=OFF
binlog_row_image=MINIMAL
sync_binlog=1
local_infile=OFF
master_verify_checksum=ON
source_verify_checksum=ON
relay_log_purge=1
binlog_expire_logs_seconds=604800
slave_sql_verify_checksum=1
skip-host-cache
replica_sql_verify_checksum=1
skip-name-resolve
slow_query_log=1
slow_query_log_file=/tmp/mysql-slow.log
Expand Down