On 2017-03-20 09:22, Björn Lundin wrote:

> http+https is redirected to the gnoga-service for a certain path.
> There is also some stuff handling upgrading the connection to web sockets.

No there was not. I think now that was before we went through Apache.

> I'll post the details later, the server is just up 12h a day, and it's
> another 3 hours until start.

The gnoga part listen at http://localhost:9080
and all https stuff is via Apache2

http is redirected to https
some browser do not need to login, others do

The machine is known to DNS servers


This is on a
uname -a
Linux prod 3.2.0-4-amd64 #1 SMP Debian 3.2.68-1+deb7u2 x86_64 GNU/Linux

cat /etc/apache2/sites-enabled/030-somesite.somewhere.com.conf


<VirtualHost *:80>
  ServerName somesite.somewhere.com
  ServerAlias somesite2.somewhere.com
  ServerAdmin someone@somesite.somewhere
  RewriteEngine  on
  RewriteCond %{SERVER_PORT} !^443$
  RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
  LogLevel info
  CustomLog ${APACHE_LOG_DIR}/log_80.nonobet.com_access.log combined
  ErrorLog ${APACHE_LOG_DIR}/log_80.nonobet.com_error.log
</VirtualHost>

<VirtualHost *:443>
  ServerName somesite.somewhere.com
  ServerAlias somesite2.somewhere.com
  ServerAdmin someone@somesite.somewhere
  RewriteEngine  on
  RewriteCond %{HTTPS} =off
  RewriteRule .* - [F,L]
  SSLEngine on
  SSLCertificateFile
/etc/apache2/sites-available/wildcard.somesite.com_cert.pem
  SSLCertificateKeyFile
/etc/apache2/sites-available/somesite_common_server_key.pem
  LogLevel info
  CustomLog ${APACHE_LOG_DIR}/log_443.nonobet.com_access.log combined
  ErrorLog ${APACHE_LOG_DIR}/log_443.nonobet.com_error.log
  ProxyPass / http://127.0.0.1:9080/
  ProxyPassReverse / http://127.0.0.1:9080/
  <Location "/">

    AuthName "Please login!"
    AuthType Basic
    AuthBasicProvider file
    AuthUserFile /etc/apache2/sites-available/somesite.com_authentication
    Require valid-user

    SetEnvIfNoCase ^User-Agent$ .*Mobile ALLOW_IN
    SetEnvIfNoCase ^User-Agent$ .*Epiphany ALLOW_IN
    Order Deny,Allow
    Deny from all
    Allow from env=ALLOW_IN

    Satisfy Any

  </Location>
</VirtualHost>




-- 
--
Björn

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Gnoga-list mailing list
Gnoga-list@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/gnoga-list

Reply via email to