Re: [mh] reverse proxy issue/questions

Thanks for looking again and confirming you see a password request.

Richard’s email response helped with a few pieces of sample.

I’ll certainly try to write up my findings, but at the end of the day, I tried so much and did so much digging to where I am not so sure I know what is what anymore.

From: Gianni Veloce <[email protected]>
Sent: Wednesday, March 23, 2022 12:57 AM
To: [email protected]; Timothy Spaulding <[email protected]>
Subject: Re: [mh] reverse proxy issue/questions

hi again
looks better now :)
i get an authentication dialog !
it would be wonderful to share how you setup the reverse proxy for MH to help others

GV



On Monday, March 21, 2022, 8:22 AM, Gianni Veloce via misterhouse-users <[email protected]<mailto:[email protected]>> wrote:
Hi Timothy
Dont know if you fixed smthng in the meantime but
I tried https://mh.icanbrew.net/ and this was redirected  to https://mh.icanbrew.net/ia7
That means it works!!!
But your MH is exposed to the INTERNET.
Hope this is for testing only.

Cheers
GV




MisterHouse 5.1




On Sunday, March 20, 2022, 11:59:44 PM GMT+2, Timothy Spaulding <[email protected]<mailto:[email protected]>> wrote:



Hello All,



I hope someone is able to guide me in the right direction to get my reverse proxy up and running.  I have never really had a need/desire for it until now.



I am using Apache2 2.4.52 on a Debian 11 Bullseye server

I have proxy, ssl, and proxy_http enabled

I have a virtual server that looks like this:

<IfModule mod_ssl.c>

                <VirtualHost mh.icanbrew.net:443>

                                ServerAdmin [email protected]<mailto:[email protected]>

                                ServerName mh.icanbrew.net

#                             ServerAlias mh.icanbrew.net

                                UseCanonicalName On



                                DocumentRoot /var/www/icanbrew/mh



                                LogLevel info proxy:trace8 ssl:info



                                ErrorLog ${APACHE_LOG_DIR}/icanbrew/mh/error.log

                                CustomLog ${APACHE_LOG_DIR}/icanbrew/mh/access-https.log vhost_combined



                                SSLEngine on





                                ProxyPreserveHost On

                                ProxyRequests Off

                                ProxyPass "/" http://misterhouse.icb.net:9191/

                                ProxyPassReverse "/" http://misterhouse.icb.net:9191/

                </VirtualHost>

</IfModule>



When I connect to https://mh.icanbrew.net from a browser, I get cannot connect message.

When I connect with curl -Lkv https://mh.icanbrew.net, I get the following:



>curl -Lkv https://mh.icanbrew.net

*   Trying 192.168.1.1:443...

* Connected to mh.icanbrew.net (192.168.1.1) port 443 (#0)

* schannel: disabled automatic use of client certificate

* schannel: ALPN, offering http/1.1

* schannel: ALPN, server accepted to use http/1.1

> GET / HTTP/1.1

> Host: mh.icanbrew.net

> User-Agent: curl/7.79.1

> Accept: */*

>

* Mark bundle as not supporting multiuse

< HTTP/1.1 302 Moved Temporarily

< Date: Sun, 20 Mar 2022 17:16:32 GMT

< Server: MisterHouse

< Location: http://mh.icanbrew.net:9191/ia7

< Content-Length: 0

< Cache-Control: no-cache

<

* Connection #0 to host mh.icanbrew.net left intact

* Issue another request to this URL: 'http://mh.icanbrew.net:9191/ia7'

*   Trying 192.168.1.1:9191...

* connect to 192.168.1.1 port 9191 failed: Connection refused

* Failed to connect to mh.icanbrew.net port 9191 after 2023 ms: Connection refused

* Closing connection 1

curl: (7) Failed to connect to mh.icanbrew.net port 9191 after 2023 ms: Connection refused



The questions/issues I have are

  *   The redirect/location keyword get rewritten to http instead of https as expected in the ProxyPassReverse directive
  *   It also adds the :9191 port that my misterhouse listens on in the remap; I am under the impression that it should not do that



So far, all of this testing is from behind my firewall. My initial test from outside my firewall is that the virtual server doesn’t even seem to be engaged. That will be an additional question/issue when the above works.



Thanks

Tim
________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users
________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users

________________________________________________________
To unsubscribe from this list, go to: https://lists.sourceforge.net/lists/listinfo/misterhouse-users