2020-04-30 05:06:49 -05:00
|
|
|
# Configuration for {{ gitea_url }}
|
|
|
|
|
# vim:ft=apache:
|
|
|
|
|
|
|
|
|
|
# Accept connections from non-SNI clients
|
|
|
|
|
SSLStrictSNIVHostCheck off
|
2020-04-30 07:38:06 -05:00
|
|
|
# Need this for SSL proxying, apparently
|
|
|
|
|
SSLProxyEngine on
|
2020-04-30 05:06:49 -05:00
|
|
|
|
|
|
|
|
# Website configuration
|
|
|
|
|
<VirtualHost *:80>
|
|
|
|
|
ServerName {{ gitea_url }}
|
|
|
|
|
Redirect permanent / https://{{ gitea_url }}
|
|
|
|
|
</VirtualHost>
|
|
|
|
|
<VirtualHost *:443>
|
|
|
|
|
SSLEngine on
|
|
|
|
|
SSLCertificateFile /etc/pki/cert/crt/{{ gitea_url }}.crt
|
|
|
|
|
SSLCertificateKeyFile /etc/pki/cert/private/{{ gitea_url }}.key
|
|
|
|
|
SSLCertificateChainFile /etc/pki/cert/crt/{{ gitea_url }}-fullchain.crt
|
2020-06-04 19:35:59 -05:00
|
|
|
SSLProtocol {{ ssl_protocol }}
|
2020-06-03 06:07:11 -05:00
|
|
|
SSLCipherSuite {{ ssl_cipher_suite }}
|
2020-04-30 05:06:49 -05:00
|
|
|
ServerName {{ gitea_url }}
|
|
|
|
|
DocumentRoot {{ gitea_webroot }}
|
|
|
|
|
<Directory "{{ gitea_webroot }}">
|
|
|
|
|
Require all granted
|
|
|
|
|
AllowOverride All
|
|
|
|
|
Options MultiViews FollowSymlinks
|
|
|
|
|
</Directory>
|
2020-06-21 10:50:59 -05:00
|
|
|
|
|
|
|
|
RequestHeader set X_FORWARDED_PROTO 'https'
|
|
|
|
|
RequestHeader set X-Forwarded-Ssl on
|
|
|
|
|
</VirtualHost>
|
|
|
|
|
<VirtualHost *:8448>
|
|
|
|
|
SSLEngine on
|
|
|
|
|
SSLCertificateFile /etc/pki/cert/crt/{{ gitea_url }}.crt
|
|
|
|
|
SSLCertificateKeyFile /etc/pki/cert/private/{{ gitea_url }}.key
|
|
|
|
|
SSLCertificateChainFile /etc/pki/cert/crt/{{ gitea_url }}-fullchain.crt
|
|
|
|
|
SSLProtocol {{ ssl_protocol }}
|
|
|
|
|
SSLCipherSuite {{ ssl_cipher_suite }}
|
|
|
|
|
ServerName {{ gitea_url }}
|
2020-04-30 06:21:25 -05:00
|
|
|
ProxyPreserveHost On
|
|
|
|
|
ProxyRequests Off
|
2020-04-30 07:38:06 -05:00
|
|
|
ProxyPass / http://127.0.0.1:3000/ nocanon retry=1
|
2020-04-30 05:06:49 -05:00
|
|
|
ProxyPassReverse / https://127.0.0.1:3000/
|
|
|
|
|
|
|
|
|
|
RequestHeader set X_FORWARDED_PROTO 'https'
|
|
|
|
|
RequestHeader set X-Forwarded-Ssl on
|
|
|
|
|
</VirtualHost>
|
