docker-koel/apache2.conf

ErrorLog /dev/stderr
LogLevel warn
# LogLevel info rewrite:trace3

# Permission denied: AH00099: could not create /var/run/apache2.pid
PidFile /tmp/apache2.pid

IncludeOptional mods-enabled/*.load
IncludeOptional mods-enabled/*.conf

Timeout 128
KeepAlive On
MaxKeepAliveRequests 32
KeepAliveTimeout 8

Listen 8080
# <IfModule ssl_module>
# 	Listen 443
# </IfModule>
# <IfModule mod_gnutls.c>
# 	Listen 443
# </IfModule>

ServerTokens Prod
ServerSignature Off
FileETag None
TraceEnable off
Header always set X-Frame-Options "sameorigin"
Header set X-XSS-Protection "1; mode=block"

LogFormat "%{%Y-%m-%dT%H:%M:%S%z}t %h \"%r\" %>s" neat
CustomLog /dev/stdout neat

# TODO enable sendfile
# apt-get install --yes libapache2-mod-xsendfile
# XSendFile on
# XSendFilePath /library
# https://koel.phanan.net/docs/
# https://tn123.org/mod_xsendfile/

<VirtualHost *:8080>
    # TODO ssl
    DocumentRoot /koel
</VirtualHost>

<Directory />
    AllowOverride None
    Require all denied
</Directory>

AccessFileName .htaccess
<FilesMatch "^\.ht">
	Require all denied
</FilesMatch>

<Directory /koel>
    Options -Indexes -Includes -FollowSymLinks +SymLinksIfOwnerMatch
    # TODO restrict
    AllowOverride All
    Require all granted
</Directory>

IncludeOptional conf-enabled/*.conf