initial release

2023-10-12 16:09:33 +02:00
commit bc4589259a
10 changed files with 286 additions and 0 deletions
--- a/code.opendoor.fr.conf
+++ b/code.opendoor.fr.conf
@@ -0,0 +1,70 @@
+<VirtualHost *:80>                                                                                                                                                                                                  
+   Servername code.opendoor.fr
+      DocumentRoot /srv/airline.opendoor.fr/www
+   <Directory /srv/airline.opendoor.fr/www>
+      require all granted
+      Options -indexes
+   </Directory>
+	RewriteEngine on
+   RewriteCond %{HTTPS} off
+   RewriteCond %{REQUEST_URI}  "!^/\.well-known"
+   RewriteRule (.*) https://%{SERVER_NAME}$1 [R,L]
+ </VirtualHost>
+
+<VirtualHost *:443>
+  ServerName code.opendoor.fr
+
+  SSLEngine on
+  SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+  SSLCipherSuite HIGH:3DES:!aNULL:!MD5:!SEED:!IDEA
+  SSLCertificateChainFile /etc/letsencrypt/live/airline.opendoor.fr/fullchain.pem
+  SSLCertificateFile      /etc/letsencrypt/live/airline.opendoor.fr/cert.pem
+  SSLCertificateKeyFile   /etc/letsencrypt/live/airline.opendoor.fr/privkey.pem
+  #SetEnvIf Host "^(.*)$" THE_HOST=$1
+  #RequestHeader setifempty X-Forwarded-Proto https
+  #RequestHeader setifempty X-Forwarded-Host %{THE_HOST}e
+  #ProxyAddHeaders Off
+  ErrorLog /var/log/httpd/code_error.log
+  CustomLog /var/log/httpd//code_access.log combined
+
+  SSLCertificateFile              /etc/letsencrypt/live/code.opendoor.fr/cert.pem
+  SSLCertificateChainFile /etc/letsencrypt/live/code.opendoor.fr/fullchain.pem
+  SSLCertificateKeyFile   /etc/letsencrypt/live/code.opendoor.fr/privkey.pem
+
+  AllowEncodedSlashes NoDecode
+  ProxyPreserveHost On
+
+# static html, js, images, etc. served from coolwsd
+# browser is the client part of Collabora Online                                                                              
+
+  ProxyPass           /browser http://127.0.0.1:9980/browser retry=0
+  ProxyPassReverse    /browser http://127.0.0.1:9980/browser
+
+# WOPI discovery URL                                          
+
+  ProxyPass           /hosting/discovery http://127.0.0.1:9980/hosting/discovery retry=0
+  ProxyPassReverse    /hosting/discovery http://127.0.0.1:9980/hosting/discovery
+
+# Capabilities
+
+  ProxyPass           /hosting/capabilities http://127.0.0.1:9980/hosting/capabilities retry=0
+  ProxyPassReverse    /hosting/capabilities http://127.0.0.1:9980/hosting/capabilities
+
+# Main websocket
+
+  ProxyPassMatch      "/cool/(.*)/ws$"      ws://127.0.0.1:9980/cool/$1/ws nocanon
+
+# Admin Console websocket
+
+  ProxyPass           /cool/adminws ws://127.0.0.1:9980/cool/adminws
+
+# Download as, Fullscreen presentation and Image upload operations
+
+  ProxyPass           /cool http://127.0.0.1:9980/cool
+  ProxyPassReverse    /cool http://127.0.0.1:9980/cool
+
+# Compatibility with integrations that use the /lool/convert-to endpoint
+  ProxyPass           /lool http://127.0.0.1:9980/cool
+  ProxyPassReverse    /lool http://127.0.0.1:9980/cool
+
+</VirtualHost>