Skip to content

Latest commit

 

History

History
83 lines (52 loc) · 2.24 KB

apache2.md

File metadata and controls

83 lines (52 loc) · 2.24 KB
Raw

If you want to serve the web interface of the SinusBot encrypted or with the rest of your website, you usually want to setup a reverse proxy. Most of the time, you already have a web server (like apache2 or nginx) in place, which you can use to forward the incoming traffic to the SinusBot.

First you need to add a DNS record (A) which is pointing from your subdomain (e.g. sinusbot.example.com) to the IP of your server. After that, create a file at /etc/apache2/sites-available/sinusbot.conf with the following content.

Adjust the value of the following variables in the configuration examples below:

  • ServerName
  • ProxyPass and ProxyPassReverse (port of your sinusbot)
  • SSLCertificate* (SSL only!)

If you are using no SSL (http):

<VirtualHost *:80>
    ServerName sinusbot.example.com
    
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    ProxyPreserveHost On

    ProxyPass / http://127.0.0.1:8087/
    ProxyPassReverse / http://127.0.0.1:8087/

</VirtualHost>

If you are using SSL (https) with http->https redirect:

<VirtualHost *:80>
    ServerName sinusbot.example.com
    
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    RewriteEngine on
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
</VirtualHost>

<VirtualHost *:443>
    ServerName bot.example.tld
    
    SSLEngine On
    SSLCertificateFile    /opt/ssl/cert.pem
    SSLCertificateKeyFile /opt/ssl/privkey.pem
    SSLCertificateChainFile /opt/ssl/fullchain.pem
    
    ProxyPass / http://127.0.0.1:8087/
    ProxyPassReverse / http://127.0.0.1:8087/
    
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

Afterwards you need to link the file to the sites-enabled directory:

ln -sf /etc/apache2/sites-available/sinusbot.conf /etc/apache2/sites-enabled

Enable the proxy-module:

a2enmod proxy

Enable the http-proxy-module:

a2enmod proxy_http

Enable the SSL-module

a2enmod ssl

Enable the rewrite-module:

a2enmod rewrite

Restart apache2:

systemctl restart apache2

Now just follow the common adaptations for reverse proxies.