Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <VirtualHost *:443>
- ServerName ***
- Protocols h2 http/1.1
- # SSL configuration, you may want to take the easy route instead and use Lets Encrypt!
- SSLEngine on
- SSLCertificateFile /etc/letsencrypt/live/***/cert.pem
- SSLCertificateChainFile /etc/letsencrypt/live/***/chain.pem
- SSLCertificateKeyFile /etc/letsencrypt/live/***/privkey.pem
- SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
- SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-$
- SSLHonorCipherOrder on
- # Encoded slashes need to be allowed
- AllowEncodedSlashes NoDecode
- # Container uses a unique non-signed certificate
- SSLProxyEngine On
- SSLProxyVerify None
- SSLProxyCheckPeerCN Off
- SSLProxyCheckPeerName Off
- # keep the host
- ProxyPreserveHost On
- # static html, js, images, etc. served from loolwsd
- # loleaflet is the client part of LibreOffice Online
- ProxyPass /loleaflet https://127.0.0.1:9980/loleaflet retry=0
- ProxyPassReverse /loleaflet https://127.0.0.1:9980/loleaflet
- # WOPI discovery URL
- ProxyPass /hosting/discovery https://127.0.0.1:9980/hosting/discovery retry=0
- ProxyPassReverse /hosting/discovery https://127.0.0.1:9980/hosting/discovery
- # Main websocket
- ProxyPassMatch "/lool/(.*)/ws$" wss://127.0.0.1:9980/lool/$1/ws nocanon
- # Admin Console websocket
- ProxyPass /lool/adminws wss://127.0.0.1:9980/lool/adminws
- # Download as, Fullscreen presentation and Image upload operations
- ProxyPass /lool https://127.0.0.1:9980/lool
- ProxyPassReverse /lool https://127.0.0.1:9980/lool
- # Endpoint with information about availability of various features
- ProxyPass /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities retry=0
- ProxyPassReverse /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities
- SetOutputFilter BROTLI_COMPRESS
- SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png)$ no-brotli
- </VirtualHost>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement