Apache som proxyserver i CentOS 7: Difference between revisions

From Peters wiki
Jump to navigation Jump to search
← Older edit
mNo edit summary
 
(4 intermediate revisions by the same user not shown)
Line 54: Line 54:
     ServerName centos1.kerwien.se
     ServerName centos1.kerwien.se
     RemoteIPHeader X-Forwarded-For
     RemoteIPHeader X-Forwarded-For
     RemoteIPInternalProxy centos1.kerwien.se
     RemoteIPInternalProxy 192.168.0.21
</VirtualHost>
</VirtualHost>
}}
}}
Line 61: Line 61:
{{RootCmd|<nowiki>setsebool -P httpd_can_network_connect_db=on</nowiki>
{{RootCmd|<nowiki>setsebool -P httpd_can_network_connect_db=on</nowiki>
|<nowiki>setsebool -P httpd_can_connect_ldap=on</nowiki>}}
|<nowiki>setsebool -P httpd_can_connect_ldap=on</nowiki>}}
{{RootCmd|<nowiki>yum --enablerepo=extras install epel-release</nowiki>}}


== Wordpress ==
== Wordpress ==
Line 75: Line 77:
}}
}}


== Roundcube ==
config.inc.php:
{{bc|1=
// List of trusted proxies                                                                                                                                     
// X_FORWARDED_* and X_REAL_IP headers are only accepted from these IPs                                                                                         
$config['proxy_whitelist'] = array('192.168.0.21');   
}}


[[Category:Guide]]
[[Category:GammalGuide]]

Latest revision as of 14:00, 12 August 2023

Under utveckling.

Proxyn

installera:

root # yum install httpd mod_ssl mod_proxy_html openssl
<VirtualHost *:80>
    ServerName centos1.kerwien.se
    ProxyPreserveHost On
    
    ProxyPass /app1 http://centos3.kerwien.se/app1
    ProxyPassReverse /app1 http://centos3.kerwien.se/app1

    ProxyPass /mediawiki http://centos3.kerwien.se/mediawiki
    ProxyPassReverse /mediawiki http://centos3.kerwien.se/mediawiki

    ProxyPass /wordpress http://centos3.kerwien.se/wordpress
    ProxyPassReverse /wordpress http://centos3.kerwien.se/wordpress

    ProxyPass /phpbb http://centos3.kerwien.se/phpbb
    ProxyPassReverse /phpbb http://centos3.kerwien.se/phpbb
</VirtualHost>

ssl.conf: 

ServerName centos1.kerwien.se:443
RequestHeader set X-Forwarded-Proto "https"

#ProxyRequests Off
#ProxyPreserveHost On

ProxyPass /app1 http://centos3.kerwien.se/app1
ProxyPassReverse /app1 http://centos3.kerwien.se/app1

ProxyPass /mediawiki http://centos3.kerwien.se/mediawiki
ProxyPassReverse /mediawiki http://centos3.kerwien.se/mediawiki

ProxyPass /wordpress http://centos3.kerwien.se/wordpress
ProxyPassReverse /wordpress http://centos3.kerwien.se/wordpress

ProxyPass /phpbb http://centos3.kerwien.se/phpbb
ProxyPassReverse /phpbb http://centos3.kerwien.se/phpbb

Servern

http.conf 

<VirtualHost *:80>
    ServerName centos1.kerwien.se
    RemoteIPHeader X-Forwarded-For
    RemoteIPInternalProxy 192.168.0.21
</VirtualHost>

Allmänt webserver

root # setsebool -P httpd_can_network_connect_db=on
root # setsebool -P httpd_can_connect_ldap=on
root # yum --enablerepo=extras install epel-release

Wordpress

wp-config.php: 

if ($_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https')
       $_SERVER['HTTPS']='on';

/**
 * Force login and administration over SSL.
 */
define('FORCE_SSL_ADMIN', true);

Roundcube

config.inc.php: 

// List of trusted proxies                                                                                                                                       
// X_FORWARDED_* and X_REAL_IP headers are only accepted from these IPs                                                                                          
$config['proxy_whitelist'] = array('192.168.0.21');
Retrieved from "http://www.kerwien.se/index.php?title=Apache_som_proxyserver_i_CentOS_7&oldid=3361"