Re: [mh] reverse proxy issue/questions

 blockquote, div.yahoo_quoted { margin-left: 0 !important; border-left:1px #715FFA solid !important; padding-left:1ex !important; background-color:white !important; } hi againlooks better now :)i get an authentication dialog !it would be wonderful to share how you setup the reverse proxy for MH to help others
GV




On Monday, March 21, 2022, 8:22 AM, Gianni Veloce via misterhouse-users <[email protected]> wrote:

 Hi TimothyDont know if you fixed smthng in the meantime but I tried https://mh.icanbrew.net/ and this was redirected  to https://mh.icanbrew.net/ia7 That means it works!!!But your MH is exposed to the INTERNET.Hope this is for testing only.
CheersGV




| 
| 
|  | 
MisterHouse 5.1


 |

 |

 |





    On Sunday, March 20, 2022, 11:59:44 PM GMT+2, Timothy Spaulding <[email protected]> wrote:  
 
  
Hello All,
 
  
 
I hope someone is able to guide me in the right direction to get my reverse proxy up and running.  I have never really had a need/desire for it until now.
 
  
 
I am using Apache2 2.4.52 on a Debian 11 Bullseye server
 
I have proxy, ssl, and proxy_http enabled
 
I have a virtual server that looks like this:
 
<IfModule mod_ssl.c>
 
                <VirtualHost mh.icanbrew.net:443>
 
                                ServerAdmin [email protected]
 
                                ServerName mh.icanbrew.net
 
#                             ServerAlias mh.icanbrew.net
 
                                UseCanonicalName On
 
  
 
                                DocumentRoot /var/www/icanbrew/mh
 
  
 
                                LogLevel info proxy:trace8 ssl:info
 
  
 
                                ErrorLog ${APACHE_LOG_DIR}/icanbrew/mh/error.log
 
                                CustomLog ${APACHE_LOG_DIR}/icanbrew/mh/access-https.log vhost_combined
 
  
 
                                SSLEngine on
 
  
 
  
 
                                ProxyPreserveHost On
 
                                ProxyRequests Off
 
                                ProxyPass "/" http://misterhouse.icb.net:9191/
 
                                ProxyPassReverse "/" http://misterhouse.icb.net:9191/
 
                </VirtualHost>
 
</IfModule>
 
  
 
When I connect to https://mh.icanbrew.net from a browser, I get cannot connect message.
 
When I connect with curl -Lkv https://mh.icanbrew.net, I get the following:
 
  
 
>curl -Lkv https://mh.icanbrew.net
 
*   Trying 192.168.1.1:443...
 
* Connected to mh.icanbrew.net (192.168.1.1) port 443 (#0)
 
* schannel: disabled automatic use of client certificate
 
* schannel: ALPN, offering http/1.1
 
* schannel: ALPN, server accepted to use http/1.1
 
> GET / HTTP/1.1
 
> Host: mh.icanbrew.net
 
> User-Agent: curl/7.79.1
 
> Accept: */*
 
>  
 
* Mark bundle as not supporting multiuse
 
< HTTP/1.1 302 Moved Temporarily
 
< Date: Sun, 20 Mar 2022 17:16:32 GMT
 
< Server: MisterHouse
 
< Location: http://mh.icanbrew.net:9191/ia7
 
< Content-Length: 0
 
< Cache-Control: no-cache
 
<  
 
* Connection #0 to host mh.icanbrew.net left intact
 
* Issue another request to this URL: 'http://mh.icanbrew.net:9191/ia7'
 
*   Trying 192.168.1.1:9191...
 
* connect to 192.168.1.1 port 9191 failed: Connection refused
 
* Failed to connect to mh.icanbrew.net port 9191 after 2023 ms: Connection refused
 
* Closing connection 1
 
curl: (7) Failed to connect to mh.icanbrew.net port 9191 after 2023 ms: Connection refused
 
  
 
The questions/issues I have are
    
   - The redirect/location keyword get rewritten to http instead of https as expected in the ProxyPassReverse directive
   - It also adds the :9191 port that my misterhouse listens on in the remap; I am under the impression that it should not do that
 
  
 
So far, all of this testing is from behind my firewall. My initial test from outside my firewall is that the virtual server doesn’t even seem to be engaged. That will be an additional question/issue when the above works.
 
  
 
Thanks
 
Tim
 ________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users

  ________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users

________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users