X-Git-Url: https://dehnerts.com/gitweb/?a=blobdiff_plain;f=sites-available%2Fmit-proxy.conf;h=7babd55198662df5320bdb57f06e1e0091fea685;hb=0937ce6e8370a6c93af71098bf4a360ab6824944;hp=c9c17cb4ddaf6e3614a72f2eb65de53eb667bac7;hpb=0e1e335755ad313baa26aae3db79a691d047a566;p=sysconfig%2Fapache2.git

diff --git a/sites-available/mit-proxy.conf b/sites-available/mit-proxy.conf
index c9c17cb..7babd55 100644
--- a/sites-available/mit-proxy.conf
+++ b/sites-available/mit-proxy.conf
@@ -4,9 +4,64 @@
     ProxyPassReverse "/"  "http://adehnert-test-b.mit.edu/"
 </VirtualHost>
 
-<VirtualHost *:80>
+#<VirtualHost *:80>
+#    ServerName squaresdb.dehnerts.com
+#    ProxyPass "/"  "http://squaresdb.augsburg.vms.dehnerts.com/"
+#    ProxyPassReverse "/"  "http://squaresdb.augsburg.vms.dehnerts.com/"
+#</VirtualHost>
+
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
     ServerName squaresdb.dehnerts.com
-    ProxyPass "/"  "http://adehnert-test-a.mit.edu/"
-    ProxyPassReverse "/"  "http://adehnert-test-a.mit.edu/"
+    SSLProxyEngine on
+    SSLProxyVerify require
+    SSLProxyVerifyDepth 2
+    SSLProxyCACertificatePath /etc/ssl/certs
+    SSLProxyCheckPeerName on
+    ProxyPass "/"  "https://squaresdb.augsburg.vms.dehnerts.com/"
+    ProxyPassReverse "/"  "https://squaresdb.augsburg.vms.dehnerts.com/"
+    ProxyPreserveHost on
+    Include sites-common/ssl-common
+    <IfFile "/etc/letsencrypt/live/squaresdb.dehnerts.com/">
+        SSLCertificateFile /etc/letsencrypt/live/squaresdb.dehnerts.com/fullchain.pem
+        SSLCertificateChainFile /etc/letsencrypt/live/squaresdb.dehnerts.com/fullchain.pem
+        SSLCertificateKeyFile /etc/letsencrypt/live/squaresdb.dehnerts.com/privkey.pem
+    </IfFile>
+    <IfFile ! "/etc/letsencrypt/live/squaresdb.dehnerts.com/">
+        #Warning "correct default cert not detected, falling back to snakeoil"
+        SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
+        SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
+    </IfFile>
+</VirtualHost>
+</IfModule>
+
+<VirtualHost *:80>
+    ServerName zulip.dehnerts.com
+    ServerAlias *.zulip.dehnerts.com
+    ProxyPassReverse "/"  "http://zulip.augsburg.vms.dehnerts.com/"
+    ProxyPreserveHost on
+
+    DocumentRoot /var/www/letsencrypt-verify/
+    RewriteEngine on
+    RewriteCond /var/www/letsencrypt-verify/%{REQUEST_URI} !-f
+    RewriteRule ^/.well-known/acme-challenge/(.*)$ http://zulip.augsburg.vms.dehnerts.com/.well-known/acme-challenge/$1 [P,QSA,L]
 </VirtualHost>
 
+#<IfModule mod_ssl.c>
+#<VirtualHost *:443>
+#    ServerName zulip.dehnerts.com
+#    ServerAlias *.zulip.dehnerts.com
+#    SSLProxyEngine on
+#    SSLProxyVerify require
+#    SSLProxyVerifyDepth 2
+#    SSLProxyCACertificatePath /etc/ssl/certs
+#    SSLProxyCheckPeerName on
+#    ProxyPass "/"  "https://zulip.augsburg.vms.dehnerts.com/"
+#    ProxyPassReverse "/"  "https://zulip.augsburg.vms.dehnerts.com/"
+#    ProxyPreserveHost on
+#    Include sites-common/ssl-common
+#    SSLCertificateFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
+#    SSLCertificateChainFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
+#    SSLCertificateKeyFile /etc/letsencrypt/live/zulip.dehnerts.com/privkey.pem
+#</VirtualHost>
+#</IfModule>