Re: OGo through a reverse proxy (Apache2)

On Thu, 2009-03-19 at 07:48 +0000, Daniel Pocock wrote:
> > balancer. But on some links, e.g. generated in mails from OGo about 
> > appointments, then the wrong protocol was generated, http instead of https
> Has some of this stuff been fixed now?  Is there any easy way to scan 
> the code for such things?

I'm not certain it is necessarily broken.  ZideStore and the WebUI
generate relative likes so their operation shouldn't be a problem.
Notification e-mails, etc... are a problem [I think] in that it will use
the current server's names to build the links.

As for http:// vs. https:// OGo is [nicely] agnostic about such things.
If you want all your traffic to be encrypted [as we do] simply insert a
mod_rewrite rule that redirects all http:// requests to https://.  We
use that technique on all our sites and web applications.

    <IfModule mod_rewrite.c>
      RewriteEngine on
      RewriteCond %{SERVER_PORT} !443$
      RewriteRule ^(.*) https://iv4.mormail.com$1 [R,L]
    </IfModule>

This way you can just generate http:// links irregardless.

> > why not just using mod_ngobjweb in the apache?   
> I did think about that, but
> a) There appears to be some static content served with the `Alias' 
> directive, although I could probably use NFS to bring that across.

Or you could even place the static content out on the load balancers.

> b) Not sure if the Debian version of mod_ngobjweb works with the Centos 
> version of OGo

??? Of course not, but ngbobjweb works fine on CentOS, and there are
packages.

<http://whitemiceconsulting.blogspot.com/2009/03/packages-complete.html>
-- 
OpenGroupware developer: [email protected]
<http://whitemiceconsulting.blogspot.com/>
OpenGroupare & Cyrus IMAPd documenation @
<http://docs.opengroupware.org/Members/whitemice/wmogag/file_view>

-- 
OpenGroupware.org Users
[email protected]
http://mail.opengroupware.org/mailman/listinfo/users