third-party-mirrors/EDDN
1
0
Fork 0
mirror of https://github.com/EDCD/EDDN.git synced 2025-06-06 10:23:08 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

contrib: apache-eddn.conf: Attempt to correct for new "no direct access"

Browse Source 
As we've changed things to default to *not* doing TLS on the actual
services, and thus relying on reverse proxying of all the relevant
end points, this needed updating.

Not yet tested, that will come when I put this on dev.eddn.edcd.io.
This commit is contained in:
Athanasius 2022-03-13 16:56:21 +00:00
parent bd3fdce53b
commit 0e8e22a146
1 changed files with 63 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

77
contrib/apache-eddn.conf
View File

@ -103,6 +103,8 @@
Require all denied Require all denied
</LimitExcept> </LimitExcept>
</LocationMatch> </LocationMatch>
# /netdata/ - for the host performance stats
<IfModule mod_proxy.c> <IfModule mod_proxy.c>
SSLProxyEngine On SSLProxyEngine On
SSLProxyVerify none SSLProxyVerify none
@ -112,10 +114,67 @@
ProxyPass "/netdata/" "http://127.0.0.1:19999/" ProxyPass "/netdata/" "http://127.0.0.1:19999/"
</IfModule> </IfModule>
# The various EDDN stats/status endpoints
<IfModule mod_proxy.c>
####################################
# Only uncomment the following if you are setting non-empty
# CERT_FILE, and KEY_FILE in the main EDDN config.json
####################################
# SSLProxyEngine On
# SSLProxyVerify none
####################################
ProxyPreserveHost On
ProxyRequests Off
####################################
# Monitor, /getSoftwares/ etc
####################################
<Location "/monitor/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:9091/"
</Location>
####################################
####################################
# Relay, /getSoftwares/ etc
####################################
<Location "/relay/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:9091/"
</Location>
####################################
####################################
# Gateway /stats/ and /health_check/
####################################
# May as well allow for /upload/ on this port as well
<Location "/upload/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/upload/"
</Location>
<Location "/stats/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/stats/"
</Location>
<Location "/health_check/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/health_check/"
</Location>
####################################
</IfModule>
</VirtualHost> </VirtualHost>
</IfModule> </IfModule>
# This is for the Gateway public URLs # This handles the uploads on port 4430
<IfModule mod_ssl.c> <IfModule mod_ssl.c>
# This will need to be commented out/disabled for initial LetsEncrypt # This will need to be commented out/disabled for initial LetsEncrypt
# certificate request, as you don't have the certificate yet! # certificate request, as you don't have the certificate yet!
@ -162,22 +221,12 @@
ProxyRequests Off ProxyRequests Off
#################################### ####################################
# Gateway, both /upload/ and /stats/ etc # Gateway /upload/
#################################### ####################################
<Location "/"> <Location "/upload/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in # Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https. # the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/" ProxyPass "http://127.0.0.1:8081/upload/"
</Location>
####################################
####################################
# Monitor, /getSoftwares/ etc
####################################
<Location "/monitor/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:9091/"
</Location> </Location>
#################################### ####################################