svg

tmpl/ninegate-apache.conf

@@ -6,4 +6,19 @@ Alias /ninegate /var/www/html/ninegate/web
     Allow from All
     Options Indexes FollowSymLinks MultiViews
     php_admin_flag allow_url_fopen On
-</Directory>
+</Directory>
+
+Listen %%adresse_ip_eth0:%%ninegate_websocket_portexterne
+<VirtualHost %%adresse_ip_eth0:%%ninegate_websocket_portexterne>
+    ErrorLog /var/log/apache2/ssl_error.log
+    CustomLog /var/log/apache2/ssl_access.log common
+    SSLEngine on
+    SSLCertificateFile    %%server_cert
+    SSLCertificateKeyFile %%server_key
+    SSLProtocol all -SSLv3 -SSLv2
+    ServerName %%ninegate_websocket_url
+    RewriteEngine On
+  
+    ProxyPass / ws://%%adresse_ip_eth0:%%ninegate_websocket_portinterne retry=0 keepalive=On 
+    ProxyPassReverse / ws://%%adresse_ip_eth0:%%ninegate_websocket_portinterne retry=0 
+</VirtualHost>

tmpl/ninegate-posttemplate.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+if [ "$(CreoleGet activer_apache)" = 'oui' ];then
+    # gestion des modes apache
+    ENMOD="ssl rewrite authnz_ldap proxy headers proxy_http proxy_wstunnel"
+    CreoleRun "a2enmod $ENMOD >/dev/null" web
+fi
+
+exit 0

tmpl/ninegate.nginx.conf

@@ -1,24 +0,0 @@
-server {
-    listen %%ninegate_websocket_portexterne ssl;
-
-    ssl on;
-    ssl_certificate %%server_cert;
-    ssl_certificate_key %%server_key;
-
-    proxy_connect_timeout       600;
-    proxy_send_timeout          600;
-    proxy_read_timeout          600;
-    send_timeout                600;
-
-    location / {
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "Upgrade";
-        proxy_set_header Proxy "";
-        proxy_set_header Host $http_host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        proxy_pass http://%%web_url:%%ninegate_websocket_portinterne;
-    }
-}