Merge pull request #34 from resoli/patch-2

Updated reverse_proxy.md Apace section.
This commit is contained in:
Matthew Wild 2021-03-06 08:20:34 +00:00 committed by GitHub
commit 43c244d55d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 3 deletions

View File

@ -113,9 +113,12 @@ protocols:
### apache
**Note**: The following configuration is for reverse proxying from another machine
(other from the one hosting snikket containers). If the containers are on the same machine
(other from the one hosting Snikket containers). A prerequisite is a mechanism to sync
Snikket-managed letsencrypt TLS key and cert to `/opt/chat/letsencrypt`. This is required because
Apache 2.4 is not able to revproxying based on SNI, routing encrypted TLS directly to the Snikket machine.
If the containers are on the same machine
of the reverse proxy, you have to tweak HTTP/S ports as indicated before, and you don't need
to proxy over SSL
to proxy over SSL.
```
<VirtualHost *:443>
@ -154,7 +157,7 @@ to proxy over SSL
ServerAdmin webmaster@localhost
ScumentRoot /var/www/chat
DocumentRoot /var/www/chat
ProxyPreserveHost On