This file is indexed.

/etc/apache2/sites-available/sreview-web.conf is in sreview-web 0.3.0-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
<VirtualHost *:80>
	ServerName sreview.example.com
	DocumentRoot /usr/share/sreview/public

	<Directory /usr/share/sreview/public>
		Require all granted
		AllowOverride None
		Options +Indexes
		Redirect permanent / https://sreview.example.com
	</Directory>
</VirtualHost>
<VirtualHost *:443>
	ServerName sreview.example.com

	<IfModule mod_userdir.c>
		UserDir disabled
	</IfModule>
	DocumentRoot /usr/share/sreview/public
	<Directory /usr/share/sreview/public>
		Require all granted
		Options +Indexes
	</Directory>
	Alias /bootstrap /usr/share/javascript/bootstrap
	Alias /jquery /usr/share/javascript/jquery
	<Directory /usr/share/javascript>
		Require all granted
	</Directory>
	<Proxy *>
		Require all granted
	</Proxy>
	SSLEngine on
	SSLProtocol -ALL +TLSv1.2
	# SSLCertificateFile
	# SSLCertificateKeyFile
	# SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"
	Header set Strict-Transport-Security max-age=15768000
	Header set X-Frame-Options DENY
	Header set Content-Security-Policy "frame-ancestors 'none'"
	Header set X-Content-Type-Options nosniff
	ProxyRequests off
	ProxyPreserveHost On
	ProxyPass /video !
	ProxyPass /.well-known !
	ProxyPass / http://localhost:8080/ keepalive=on
	ProxyPassReverse / http://localhost:8080/
	RequestHeader set X-Forwarded-Proto "https"
</VirtualHost>