WSGIDaemonProcess api display-name=%{GROUP} user=apache group=apache processes=1 threads=5 WSGIScriptAlias /api /var/www/haproxy-wi/api/app.wsgi WSGIProcessGroup api WSGIApplicationGroup %{GLOBAL} Order deny,allow Allow from all SSLEngine on SSLCertificateFile /var/www/haproxy-wi/app/certs/haproxy-wi.crt SSLCertificateKeyFile /var/www/haproxy-wi/app/certs/haproxy-wi.key ServerName haprox-wi.example.com ErrorLog /var/log/httpd/haproxy-wi.error.log CustomLog /var/log/httpd/haproxy-wi.access.log combined TimeOut 600 LimitRequestLine 16380 DocumentRoot /var/www/haproxy-wi ScriptAlias /cgi-bin/ "/var/www/haproxy-wi/app/" DirectoryIndex overview.py Options +ExecCGI AddHandler cgi-script .py Order deny,allow Allow from all Options +ExecCGI -Indexes +MultiViews Order Deny,Allow Deny from all Options +ExecCGI -Indexes +MultiViews Order Deny,Allow Deny from all Order Deny,Allow Deny from all Order Deny,Allow Deny from all Header set X-XSS-Protection: 1; Header set X-Frame-Options: deny Header set X-Content-Type-Options: nosniff Header set Strict-Transport-Security: max-age=3600; Header set Cache-Control no-cache Header set Expires: 0 Header set Cache-Control "max-age=86400, public"