From: Alex Dehnert <alex@dehnerts.com>
Date: Sat, 7 Aug 2021 08:00:58 +0000 (-0400)
Subject: proxy: Set up a new zulip vhost to proxy
X-Git-Url: https://dehnerts.com/gitweb/?a=commitdiff_plain;h=c2cf734cf95b69ecca998cfa684df1d6dfbf3928;hp=7cc6042d049258fbea44d290a0d922b43f610bf0;p=sysconfig%2Fapache2.git

proxy: Set up a new zulip vhost to proxy
---

diff --git a/sites-available/mit-proxy.conf b/sites-available/mit-proxy.conf
index 7da8eb2..aefcfae 100644
--- a/sites-available/mit-proxy.conf
+++ b/sites-available/mit-proxy.conf
@@ -27,3 +27,36 @@
     SSLCertificateKeyFile /etc/letsencrypt/live/squaresdb.dehnerts.com/privkey.pem
 </VirtualHost>
 </IfModule>
+
+<VirtualHost *:80>
+    ServerName zulip.dehnerts.com
+    SSLProxyEngine on
+    SSLProxyVerify require
+    SSLProxyVerifyDepth 2
+    SSLProxyCACertificatePath /etc/ssl/certs
+    SSLProxyCheckPeerName on
+    ProxyPassReverse "/"  "https://zulip.lushan-vms.dehnerts.com/"
+    ProxyPreserveHost on
+
+    DocumentRoot /var/www/letsencrypt-verify/
+    RewriteCond %{REQUEST_FILENAME} !-f
+    RewriteRule ^/.well-known/acme-challenge/(.*)$ https://zulip.lushan-vms.dehnerts.com/.well-known/acme-challenge/$1 [P,QSA,L]
+</VirtualHost>
+
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
+    ServerName zulip.dehnerts.com
+    SSLProxyEngine on
+    SSLProxyVerify require
+    SSLProxyVerifyDepth 2
+    SSLProxyCACertificatePath /etc/ssl/certs
+    SSLProxyCheckPeerName on
+    ProxyPass "/"  "https://zulip.lushan-vms.dehnerts.com/"
+    ProxyPassReverse "/"  "https://zulip.lushan-vms.dehnerts.com/"
+    ProxyPreserveHost on
+    Include sites-common/ssl-common
+    SSLCertificateFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
+    SSLCertificateChainFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/zulip.dehnerts.com/privkey.pem
+</VirtualHost>
+</IfModule>