This file is indexed.

/etc/fusionforge/httpd.conf.d/vhost-main.inc is in fusionforge-web 6.0.5-2ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
# We are inside <VirtualHost ...>

ServerName ${FF__core__web_host}
ServerAlias www.${FF__core__web_host}
ServerAdmin webmaster@${FF__core__web_host}
DocumentRoot ${FF__core__source_path}/www
DirectoryIndex index.html index.php

SetEnv FF__core__config_path "${FF__core__config_path}"

<IfModule mod_userdir.c>
  UserDir disabled
</IfModule>

# Main directory options (${FF__core__source_path}/www contains the
# PHP scripts of FusionForge)
<Directory ${FF__core__source_path}/www>
  Options Indexes FollowSymlinks
  AllowOverride All
  Options -Indexes
  
  # define access restrictions for the main site
  Include ${FF__core__config_path}/httpd.conf.d/auth-main.inc
  
  #
  # PHP settings
  #
  php_admin_value default_charset "UTF-8"
  php_flag register_globals "off"
  php_flag magic_quotes_gpc "off"
  
  # Report E_ALL errors
  php_admin_value error_reporting 2147483647
  
  # Don't echo error to user
  php_admin_value display_errors 0
  
  # ...but log the errors to error.log
  php_admin_value log_errors 1

  # Define configuration/env variables for passing passwords and other secrets to PHP
  RequestHeader unset FusionForgeDbhost
  RequestHeader append FusionForgeDbhost "${FF__core__database_host}"
  
  RequestHeader unset FusionForgeDbport
  RequestHeader append FusionForgeDbport "${FF__core__database_port}"
  
  RequestHeader unset FusionForgeDbname
  RequestHeader append FusionForgeDbname "${FF__core__database_name}"
  
  RequestHeader unset FusionForgeDbuser
  RequestHeader append FusionForgeDbuser "${FF__core__database_user}"
  
  RequestHeader unset FusionForgeDbpasswd
  RequestHeader append FusionForgeDbpasswd "${FF__core__database_password}"
  
  RequestHeader unset FusionForgeSessionKey
  RequestHeader append FusionForgeSessionKey "${FF__core__session_key}"
</Directory>

# Directory options for vendor dir (${FF__core__source_path}/vendor
# contains the Javascript scripts of FusionForge)
<Directory ${FF__core__source_path}/vendor>
  Options Indexes FollowSymlinks
  AllowOverride All
  
  Include ${FF__core__config_path}/httpd.conf.d/auth-main.inc
  Options -Indexes
  
</Directory>

<Location /projects>
  ForceType application/x-httpd-php
</Location>
<Location /users>
  ForceType application/x-httpd-php
</Location>

IncludeOptional ${FF__core__config_path}/httpd.conf.d/plugin-*.inc

Alias /images/ ${FF__core__source_path}/www/images/
Alias /scripts/coolfieldset/ ${FF__core__source_path}/vendor/coolfieldset/
Alias /scripts/iframe-resizer/ ${FF__core__source_path}/vendor/iframe-resizer/
Alias /scripts/jquery/ ${FF__core__source_path}/vendor/jquery/
Alias /scripts/jquery-ui/ ${FF__core__source_path}/vendor/jquery-ui/
Alias /scripts/jquery-storage/ ${FF__core__source_path}/vendor/jquery-storage/
Alias /scripts/jquery-simpletreemenu/ ${FF__core__source_path}/vendor/jquery-simpletreemenu/
Alias /scripts/jquery-jqplot/ ${FF__core__source_path}/vendor/jquery-jqplot/
Alias /scripts/jquery-livequery/ ${FF__core__source_path}/vendor/jquery-livequery/
Alias /scripts/jquery-teamwork-gantt/ ${FF__core__source_path}/vendor/jquery-teamwork-gantt/
Alias /scripts/jquery-splitter/ ${FF__core__source_path}/vendor/jquery-splitter/
Alias /scripts/jquery-auto-height/ ${FF__core__source_path}/vendor/jquery-auto-height/

# For FusionForge without DNS delegation, uncomment this
# and remove 30-vhosts-projects.conf
# Include ${FF__core__config_path}/httpd.conf.d/projects-in-mainvhost.inc