You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Followings are the settings I use for my server

<VirtualHost *:80>
        ServerName gitlab.its-newid.net

        ProxyRequests   Off
        ProxyVia        Off
        ProxyPreserveHost       On

        <Proxy *>
                Require all granted
        </Proxy>

        ProxyPass / https://192.168.10.8/ nocanon
        ProxyPassReverse / https://192.168.10.8/ nocanon
        AllowEncodedSlashes NoDecode
        RequestHeader set X-Forwarded-Proto "https"
</VirtualHost>

<VirtualHost *:443>
        ServerName gitlab.its-newid.net

        ProxyRequests   Off
        SSLProxyEngine on
        ProxyVia        Off
        ProxyPreserveHost       On

        <Proxy *>
                Require all granted
        </Proxy>

        ProxyPass / https://192.168.10.8/ nocanon
        ProxyPassReverse / https://192.168.10.8/ nocanon
        AllowEncodedSlashes NoDecode
        RequestHeader set X-Forwarded-Proto "https"

        SSLEngine on
        SSLProtocol all -SSLv2 -SSLv3
        SSLCipherSuite HIGH:MEDIUM:!SSLv2:!PSK:!SRP:!ADH:!AECDH
        SSLCertificateKeyFile "/opt/ssl/newid.key"
        SSLCertificateFile "/opt/ssl/STAR_its-newid_net.crt.pem"
        SSLCACertificateFile "/opt/ssl/STAR_its-newid_net.ca-bundle"
</VirtualHost>


  • No labels