diff options
| author | Peter Stone <thepeterstone@gmail.com> | 2026-03-26 01:00:07 +0000 |
|---|---|---|
| committer | Peter Stone <thepeterstone@gmail.com> | 2026-03-26 01:00:07 +0000 |
| commit | 6a15b8ab72d3a47fd99f90ffd950cfe15d9a5162 (patch) | |
| tree | a1b473d9076f01e535bfd452ed0b1780a94586f2 /deploy/apache/doot.terst.org-le-ssl.conf | |
| parent | b58787cfec0bd07abc316c66dc9be6c10b8113c6 (diff) | |
fix: add ws:// ProxyPass for /claudomator/api/ws; track Apache vhost in repo
Apache's catch-all ProxyPass / uses plain HTTP — mod_proxy_wstunnel
only activates on explicit ws:// rules. Without this, the Upgrade
header was dropped for Claudomator WebSocket connections.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'deploy/apache/doot.terst.org-le-ssl.conf')
| -rw-r--r-- | deploy/apache/doot.terst.org-le-ssl.conf | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/deploy/apache/doot.terst.org-le-ssl.conf b/deploy/apache/doot.terst.org-le-ssl.conf new file mode 100644 index 0000000..fca14c5 --- /dev/null +++ b/deploy/apache/doot.terst.org-le-ssl.conf @@ -0,0 +1,46 @@ +<IfModule mod_ssl.c> +<VirtualHost *:443> + ServerAdmin webmaster@terst.org + ServerName doot.terst.org + + DocumentRoot /site/doot.terst.org/public + <Directory /> + Options FollowSymLinks + AllowOverride None + </Directory> + <Directory /site/doot.terst.org/public/> + Options -Indexes +FollowSymLinks + AllowOverride None + Require all granted + + # Cache static assets + <FilesMatch "\.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2)$"> + Header set Cache-Control "max-age=31536000, public" + </FilesMatch> + </Directory> + + # Static files served by Apache + Alias /static /site/doot.terst.org/public + + # WebSocket support (Requires mod_proxy_wstunnel) + # Must be placed BEFORE the generic ProxyPass / + ProxyPass /ws/ ws://127.0.0.1:38080/ws/ + ProxyPassReverse /ws/ ws://127.0.0.1:38080/ws/ + ProxyPass /claudomator/api/ws ws://127.0.0.1:38080/claudomator/api/ws + ProxyPassReverse /claudomator/api/ws ws://127.0.0.1:38080/claudomator/api/ws + + + + # Proxy all other requests to Go application + ProxyPreserveHost On + + + ProxyPass /static ! + ProxyPass / http://127.0.0.1:38080/ + ProxyPassReverse / http://127.0.0.1:38080/ + + Include /etc/letsencrypt/options-ssl-apache.conf + SSLCertificateFile /etc/letsencrypt/live/terst.org-0001/fullchain.pem + SSLCertificateKeyFile /etc/letsencrypt/live/terst.org-0001/privkey.pem +</VirtualHost> +</IfModule> |