Tag Info

Hot answers tagged

2

Came across the same issue with Server version: Apache/2.4.6 As per the documentation at [1], "In 2.4.5 and later, SSLProxyCheckPeerCN has been superseded by SSLProxyCheckPeerName, and its setting is only taken into account when SSLProxyCheckPeerName off is specified at the same time." So adding following entry did the trick.. SSLProxyCheckPeerName off ...


1

Actually I had that problem too. You need to enable static assets in your config. Since Gitlab was designed to be run with Apache, they turn off Unicorn's static asset sharing. To enable it, simply run sudo -u git vim /home/git/gitlab/config/environments/production.rb and at about line 12, change config.serve_static_assets to true.


1

As of 1.4.35, mod_proxy doesn't let you modify response headers. But I really needed the simple functionality of changing Location response headers from http to https, so I hacked it into mod_proxy.c. Here is the patch in case it's useful to anyone else. After applying this patch and then rebuilding and installing from source, you can add ...


1

Assuming your clients always connect remotely via TLS, then yes, using basic authentication is reasonably secure. Caveat: one significant drawback of basic auth is that it requires the password be stored in cleartext (or some other easily-reversible encryption) on the server. For this reason, you may want to consider SSL client certs or at the very least ...


1

To get the HTTP requests to redirect instead of proxying, you should do two things: Move your proxying config (SSLProxyEngine through ProxyPassReverse into the SSL virtual host in /etc/httpd/conf.d/ssl.conf, so that it'll only apply there Create an HTTP virtual host which will redirect - probably in a new .conf file in /etc/httpd/conf.d: <VirtualHost ...


1

I think you solve your problem in a pretty universal way by putting your reverse proxy configuration inside a <Location> tag and make use of how internally Apache merges directives and sets precedence. <Location> directives are applied last and should overrule the <Directory> directive. <VirtualHost *:80> ServerName ...



Only top voted, non community-wiki answers of a minimum length are eligible