Re: OGo through a reverse proxy (Apache2)
Sebastian Reitenbach <[email protected]> Thu, 19 Mar 2009 07:41:51 +0100
| Newsgroups | gmane.comp.cms.opengroupware.user |
|---|---|
| Organization | L00 bugdead prods. |
| Message-ID | <[email protected]> |
On Wednesday 18 March 2009 21:47:02 Daniel Pocock wrote: > Hi, > > I'd just like to confirm what is a reasonable configuration for a > reverse proxy. > > I have my SSL certificate on one server (Apache2, Debian) and OGo on a > second server (Centos5). I'd like the SSL server to proxy all the > requests to the real server. > > The configuration is below, it seems to work, but I have some questions: > - Does this seem reasonable? > - Can I do without ProxyPassMatch? > - Does OGo need to know the real https URL so that it can generate any > links properly? IIRC, ogo had problems to generate the right links, when I had it running behind pound reverse proxy. Pound terminated SSL, and then redirecting to a bunch of OGo instances, behind Apache on port 80. I used it as a load balancer. But on some links, e.g. generated in mails from OGo about appointments, then the wrong protocol was generated, http instead of https why not just using mod_ngobjweb in the apache? Sebastian > > <VirtualHost secure-host:443> > SSL-config....... > ProxyRequests off > ProxyPassMatch ^/OpenGroupware http://centos-box > ProxyPassReverse /OpenGroupware http://centos-box > ProxyPass /ArticleImages http://centos-box/ArticleImages > ProxyPassReverse /ArticleImages http://centos-box > ProxyPassMatch ^/RPC2 http://centos-box > ProxyPassReverse /RPC2 http://centos-box > ProxyPass ^/zidestore/ http://centos-box > ProxyPassReverse /zidestore/ http://centos-box > </VirtualHost> > > Regards, > > Daniel -- OpenGroupware.org Users [email protected] http://mail.opengroupware.org/mailman/listinfo/users