94 lines
2.9 KiB
Plaintext
94 lines
2.9 KiB
Plaintext
# ==================== APEX (SITO) ====================
|
||
# HTTP -> HTTPS
|
||
<VirtualHost *:80>
|
||
ServerName ${MIODOMINIO}
|
||
ServerAlias www.${MIODOMINIO}
|
||
|
||
RewriteEngine On
|
||
RewriteRule ^ https://${MIODOMINIO}%{REQUEST_URI} [R=301,L]
|
||
|
||
ErrorLog /var/log/apache2/${MIODOMINIO}-error.log
|
||
CustomLog /var/log/apache2/${MIODOMINIO}-access.log combined
|
||
</VirtualHost>
|
||
|
||
# HTTPS (servizio sito - NO proxy qui)
|
||
<VirtualHost *:443>
|
||
ServerName ${MIODOMINIO}
|
||
ServerAlias www.${MIODOMINIO}
|
||
|
||
DocumentRoot /var/www/${MIODOMINIO_COMPLETO}
|
||
|
||
SSLEngine on
|
||
SSLCertificateFile /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
|
||
SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
|
||
Include /etc/letsencrypt/options-ssl-apache.conf
|
||
Protocols h2 http/1.1
|
||
|
||
<Directory "/var/www/${MIODOMINIO_COMPLETO}">
|
||
Options Indexes FollowSymLinks
|
||
AllowOverride All
|
||
Require all granted
|
||
</Directory>
|
||
|
||
DirectoryIndex index.html
|
||
|
||
# (Opzionale per SPA Quasar/Vue)
|
||
# RewriteEngine On
|
||
# RewriteCond %{REQUEST_FILENAME} !-f
|
||
# RewriteCond %{REQUEST_FILENAME} !-d
|
||
# RewriteRule ^ /index.html [L]
|
||
|
||
ErrorLog /var/log/apache2/${MIODOMINIO}-error.log
|
||
CustomLog /var/log/apache2/${MIODOMINIO}-access.log combined
|
||
</VirtualHost>
|
||
|
||
|
||
# ==================== API ====================
|
||
# HTTP -> HTTPS
|
||
<VirtualHost *:80>
|
||
ServerName ${MIOURL_API}
|
||
|
||
RewriteEngine On
|
||
RewriteRule ^ https://${MIOURL_API}%{REQUEST_URI} [R=301,L]
|
||
|
||
ErrorLog /var/log/apache2/${MIOURL_API}-error.log
|
||
CustomLog /var/log/apache2/${MIOURL_API}-access.log combined
|
||
</VirtualHost>
|
||
|
||
# HTTPS (proxy verso backend)
|
||
<VirtualHost *:443>
|
||
ServerName ${MIOURL_API}
|
||
ServerAdmin surya@riso.app
|
||
|
||
SSLEngine on
|
||
SSLCertificateFile /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
|
||
SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
|
||
Include /etc/letsencrypt/options-ssl-apache.conf
|
||
Protocols h2 http/1.1
|
||
|
||
ProxyPreserveHost On
|
||
|
||
# ===== SCEGLI UNO DEI DUE BLOCCHI, in base al TUO backend su ${PORTA} =====
|
||
# --- Backend HTTP (più comune) ---
|
||
# ProxyPass / http://127.0.0.1:${PORTA}/ retry=0 timeout=310 connectiontimeout=30
|
||
# ProxyPassReverse / http://127.0.0.1:${PORTA}/
|
||
|
||
# --- Backend HTTPS (nel tuo caso probabile, visto l’“Empty reply” via HTTP) ---
|
||
SSLProxyEngine On
|
||
SSLProxyVerify none
|
||
SSLProxyCheckPeerName off
|
||
ProxyPass / https://127.0.0.1:${PORTA}/ retry=0 timeout=310 connectiontimeout=30
|
||
ProxyPassReverse / https://127.0.0.1:${PORTA}/
|
||
# ==========================================================================
|
||
|
||
<Proxy *>
|
||
Require all granted
|
||
</Proxy>
|
||
|
||
ProxyTimeout 310
|
||
Timeout 310
|
||
ProxyBadHeader Ignore
|
||
|
||
ErrorLog /var/log/apache2/${MIOURL_API}-error.log
|
||
CustomLog /var/log/apache2/${MIOURL_API}-access.log combined
|
||
</VirtualHost> |