SquaresDB: At least verify the CA is valid
[sysconfig/apache2.git] / sites-available / mit-proxy.conf
1 <VirtualHost *:80>
2     ServerName adehnert-test-b.olinda-proxy.dehnerts.com
3     ProxyPass "/"  "http://adehnert-test-b.mit.edu/"
4     ProxyPassReverse "/"  "http://adehnert-test-b.mit.edu/"
5 </VirtualHost>
6
7 #<VirtualHost *:80>
8 #    ServerName squaresdb.dehnerts.com
9 #    ProxyPass "/"  "http://squaresdb.lushan-vms.dehnerts.com/"
10 #    ProxyPassReverse "/"  "http://squaresdb.lushan-vms.dehnerts.com/"
11 #</VirtualHost>
12
13 <IfModule mod_ssl.c>
14 <VirtualHost *:443>
15     ServerName squaresdb.dehnerts.com
16     SSLProxyEngine on
17     SSLProxyVerify require
18     SSLProxyVerifyDepth 2
19     SSLProxyCACertificatePath /etc/ssl/certs
20     # Really I want to validate that the name matches squaresdb.dehnerts.com,
21     # but apparently that's not a thing, AFAICT.
22     SSLProxyCheckPeerName off
23     ProxyPass "/"  "https://squaresdb.lushan-vms.dehnerts.com/"
24     ProxyPassReverse "/"  "https://squaresdb.lushan-vms.dehnerts.com/"
25     ProxyPreserveHost on
26     Include sites-common/ssl-common
27     SSLCertificateFile /etc/letsencrypt/live/squaresdb.dehnerts.com/fullchain.pem
28     SSLCertificateChainFile /etc/letsencrypt/live/squaresdb.dehnerts.com/fullchain.pem
29     SSLCertificateKeyFile /etc/letsencrypt/live/squaresdb.dehnerts.com/privkey.pem
30 </VirtualHost>
31 </IfModule>