third-party-mirrors/EDDN
1
0
Fork 0
mirror of https://github.com/EDCD/EDDN.git synced 2025-04-23 03:50:30 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

contrib: apache-eddn.conf: Attempt to correct for new "no direct access"

Browse Source 
As we've changed things to default to *not* doing TLS on the actual
services, and thus relying on reverse proxying of all the relevant
end points, this needed updating.

Not yet tested, that will come when I put this on dev.eddn.edcd.io.
This commit is contained in:
Athanasius 2022-03-13 16:56:21 +00:00
parent 8ca813c6ab
commit ede9abb95e
No known key found for this signature in database
GPG Key ID: 8C392035DD80FD62
1 changed files with 63 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

77
contrib/apache-eddn.conf
View File

@ -103,6 +103,8 @@
Require all denied
</LimitExcept>
</LocationMatch>
# /netdata/ - for the host performance stats
<IfModule mod_proxy.c>
SSLProxyEngine On
SSLProxyVerify none
@ -112,10 +114,67 @@
ProxyPass "/netdata/" "http://127.0.0.1:19999/"
</IfModule>
# The various EDDN stats/status endpoints
<IfModule mod_proxy.c>
####################################
# Only uncomment the following if you are setting non-empty
# CERT_FILE, and KEY_FILE in the main EDDN config.json
####################################
# SSLProxyEngine On
# SSLProxyVerify none
####################################
ProxyPreserveHost On
ProxyRequests Off
####################################
# Monitor, /getSoftwares/ etc
####################################
<Location "/monitor/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:9091/"
</Location>
####################################
####################################
# Relay, /getSoftwares/ etc
####################################
<Location "/relay/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:9091/"
</Location>
####################################
####################################
# Gateway /stats/ and /health_check/
####################################
# May as well allow for /upload/ on this port as well
<Location "/upload/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/upload/"
</Location>
<Location "/stats/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/stats/"
</Location>
<Location "/health_check/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/health_check/"
</Location>
####################################
</IfModule>
</VirtualHost>
</IfModule>
# This is for the Gateway public URLs
# This handles the uploads on port 4430
<IfModule mod_ssl.c>
# This will need to be commented out/disabled for initial LetsEncrypt
# certificate request, as you don't have the certificate yet!
@ -162,22 +221,12 @@
ProxyRequests Off
####################################
# Gateway, both /upload/ and /stats/ etc
# Gateway /upload/
####################################
<Location "/">
<Location "/upload/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:8081/"
</Location>
####################################
####################################
# Monitor, /getSoftwares/ etc
####################################
<Location "/monitor/">
# Plain http if setting **empty** CERT_FILE and KEY_FILE in
# the EDDN config.json, else https.
ProxyPass "http://127.0.0.1:9091/"
ProxyPass "http://127.0.0.1:8081/upload/"
</Location>
####################################