summaryrefslogtreecommitdiff
path: root/deploy/apache/doot.terst.org-le-ssl.conf
blob: fca14c53dc04aaf3ec8c531324b7abb70d143b22 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
<IfModule mod_ssl.c>
<VirtualHost *:443>
  ServerAdmin webmaster@terst.org
  ServerName doot.terst.org

  DocumentRoot /site/doot.terst.org/public
  <Directory />
    Options FollowSymLinks
    AllowOverride None
  </Directory>
  <Directory /site/doot.terst.org/public/>
    Options -Indexes +FollowSymLinks
    AllowOverride None
    Require all granted

    # Cache static assets
    <FilesMatch "\.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2)$">
        Header set Cache-Control "max-age=31536000, public"
    </FilesMatch>
  </Directory>

  # Static files served by Apache
  Alias /static /site/doot.terst.org/public

  # WebSocket support (Requires mod_proxy_wstunnel)
  # Must be placed BEFORE the generic ProxyPass /
  ProxyPass /ws/ ws://127.0.0.1:38080/ws/
  ProxyPassReverse /ws/ ws://127.0.0.1:38080/ws/
  ProxyPass /claudomator/api/ws ws://127.0.0.1:38080/claudomator/api/ws
  ProxyPassReverse /claudomator/api/ws ws://127.0.0.1:38080/claudomator/api/ws



  # Proxy all other requests to Go application
  ProxyPreserveHost On
  

  ProxyPass /static !
  ProxyPass / http://127.0.0.1:38080/
  ProxyPassReverse / http://127.0.0.1:38080/

  Include /etc/letsencrypt/options-ssl-apache.conf
  SSLCertificateFile /etc/letsencrypt/live/terst.org-0001/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/terst.org-0001/privkey.pem
</VirtualHost>
</IfModule>