'loolwsd' service was (changed and) renamed to 'coolwsd'. so we add example vhos configuration (Proxy settings) for Apache2 and also Ngins webserver.

This commit is contained in:
2021-11-29 19:38:02 +01:00
parent 39f31af175
commit f2db40968b
4 changed files with 191 additions and 25 deletions

View File

@ -1,3 +1,20 @@
# Required Apache2 modules
# ========================
#
# Apache2 web server is modular. We need to enable the required modules for this reverse
# proxy setup. We can use the a2enmod command to enable modules. If a module has been
# enabled already, nothing happens.
#
# Enable proxy in general: a2enmod proxy
#
# Enable proxy for HTTP protocol: a2enmod proxy_http
#
# Enable SSL support: a2enmod proxy_connect
#
# Enable proxy of websockets: a2enmod proxy_wstunnel
<VirtualHost <IPV4-ADDRESS>:443 [IPV6-ADDRESS]:443>
ServerName <FULL-QUALIFIED-SITE-NAME>
@ -16,33 +33,38 @@
# keep the host
ProxyPreserveHost On
# static html, js, images, etc. served from loolwsd
# loleaflet is the client part of Collabora Online
ProxyPass /loleaflet https://localhost:9980/loleaflet retry=0
ProxyPassReverse /loleaflet https://localhost:9980/loleaflet
# static html, js, images, etc. served from coolwsd
# browser is the client part of Collabora Online
ProxyPass /browser https://127.0.0.1:9980/browser retry=0
ProxyPassReverse /browser https://127.0.0.1:9980/browser
# WOPI discovery URL
ProxyPass /hosting/discovery https://localhost:9980/hosting/discovery retry=0
ProxyPassReverse /hosting/discovery https://localhost:9980/hosting/discovery
ProxyPass /hosting/discovery https://127.0.0.1:9980/hosting/discovery retry=0
ProxyPassReverse /hosting/discovery https://127.0.0.1:9980/hosting/discovery
# Capabilities
ProxyPass /hosting/capabilities https://localhost:9980/hosting/capabilities retry=0
ProxyPassReverse /hosting/capabilities https://localhost:9980/hosting/capabilities
ProxyPass /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities retry=0
ProxyPassReverse /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities
# Main websocket
ProxyPassMatch "/lool/(.*)/ws$" wss://localhost:9980/lool/$1/ws nocanon
ProxyPassMatch "/cool/(.*)/ws$" wss://127.0.0.1:9980/cool/$1/ws nocanon
# Admin Console websocket
ProxyPass /lool/adminws wss://localhost:9980/lool/adminws
ProxyPass /cool/adminws wss://127.0.0.1:9980/cool/adminws
# Download as, Fullscreen presentation and Image upload operations
ProxyPass /lool https://localhost:9980/lool
ProxyPassReverse /lool https://localhost:9980/lool
ProxyPass /cool https://127.0.0.1:9980/cool
ProxyPassReverse /cool https://127.0.0.1:9980/cool
# Endpoint with information about availability of various features
ProxyPass /hosting/capabilities https://localhost:9980/hosting/capabilities retry=0
ProxyPassReverse /hosting/capabilities https://localhost:9980/hosting/capabilities
# Compatibility with integrations that use the /lool/convert-to endpoint
ProxyPass /lool https://127.0.0.1:9980/cool
ProxyPassReverse /lool https://127.0.0.1:9980/cool
SSLEngine on

View File

@ -0,0 +1,58 @@
<VirtualHost <IPV4-ADDRESS>:443 [IPV6-ADDRESS]:443>
ServerName <FULL-QUALIFIED-SITE-NAME>
Options -Indexes
# Encoded slashes need to be allowed
AllowEncodedSlashes NoDecode
# Container uses a unique non-signed certificate
SSLProxyEngine On
SSLProxyVerify None
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off
# keep the host
ProxyPreserveHost On
# static html, js, images, etc. served from loolwsd
# loleaflet is the client part of Collabora Online
ProxyPass /loleaflet https://localhost:9980/loleaflet retry=0
ProxyPassReverse /loleaflet https://localhost:9980/loleaflet
# WOPI discovery URL
ProxyPass /hosting/discovery https://localhost:9980/hosting/discovery retry=0
ProxyPassReverse /hosting/discovery https://localhost:9980/hosting/discovery
# Capabilities
ProxyPass /hosting/capabilities https://localhost:9980/hosting/capabilities retry=0
ProxyPassReverse /hosting/capabilities https://localhost:9980/hosting/capabilities
# Main websocket
ProxyPassMatch "/lool/(.*)/ws$" wss://localhost:9980/lool/$1/ws nocanon
# Admin Console websocket
ProxyPass /lool/adminws wss://localhost:9980/lool/adminws
# Download as, Fullscreen presentation and Image upload operations
ProxyPass /lool https://localhost:9980/lool
ProxyPassReverse /lool https://localhost:9980/lool
# Endpoint with information about availability of various features
ProxyPass /hosting/capabilities https://localhost:9980/hosting/capabilities retry=0
ProxyPassReverse /hosting/capabilities https://localhost:9980/hosting/capabilities
SSLEngine on
SSLCertificateFile /var/lib/dehydrated/certs/<FULL-QUALIFIED-SITE-NAME>/fullchain.pem
SSLCertificateKeyFile /var/lib/dehydrated/certs/<FULL-QUALIFIED-SITE-NAME>/privkey.pem
CustomLog /var/log/apache2/ip_requests.log base_requests
CustomLog /var/log/apache2/<FULL-QUALIFIED-SITE-NAME>.log combined
ErrorLog /var/log/apache2/<FULL-QUALIFIED-SITE-NAME>-error.log
</VirtualHost>