Apache Reverse Proxy for OpenTalk

Please note that I do the SSL-certification on another part of my Apache config for all domains and not in the virtual part. If you do so, you need to implement the certs in this config too.

*********** Domain: ************

<Proxy *>
     Order Allow,Deny
     Allow from all
     AllowOverride all
     Header set Access-Control-Allow-Origin "*"
        </proxy>

<Location />
    Order allow,deny
    Allow from all
    Require all granted
  </Location>

<ifmodule mod_headers.c>
Header always edit Set-Cookie (.*) "$1; SameSite=strict"
</ifmodule> 

RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPreserveHost On
ProxyRequests Off
AllowEncodedSlashes NoDecode
Header add Access-Control-Allow-Origin "*"

RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPass /.well-known/ !
ProxyPass / http://127.0.0.1:7080/ retry=1 acquire=3000 timeout=600 Keepalive=On
ProxyPassReverse / http://127.0.0.1:7080/

RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule ^/ws/(.*)    wss://localhost:7080/$1 [P,L]
ProxyRequests off
ProxyPreserveHost on

SSLProxyVerify none 
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off




************** accounts **************

<Proxy *>
     Order Allow,Deny
     Allow from all
     AllowOverride all
     Header set Access-Control-Allow-Origin "*"
        </proxy>

<Location />
    Order allow,deny
    Allow from all
    Require all granted
  </Location>

<ifmodule mod_headers.c>
Header always edit Set-Cookie (.*) "$1; SameSite=strict"
</ifmodule> 

RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPreserveHost On
ProxyRequests Off
AllowEncodedSlashes NoDecode
Header add Access-Control-Allow-Origin "*"

RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPass /.well-known/ !
ProxyPass / http://127.0.0.1:7087/ retry=1 acquire=3000 timeout=600 Keepalive=On
ProxyPassReverse / http://127.0.0.1:7087/

RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule ^/ws/(.*)    wss://localhost:7087/$1 [P,L]
ProxyRequests off
ProxyPreserveHost on

SSLProxyVerify none 
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off





**************** controller ***************


<Proxy *>
     Order Allow,Deny
     Allow from all
     AllowOverride all
     Header set Access-Control-Allow-Origin "*"
        </proxy>

ProxyPreserveHost On
ProxyPass /.well-known/ !
ProxyPass / http://127.0.0.1:7090/ retry=1 acquire=3000 timeout=600 Keepalive=On
ProxyPassReverse / http://127.0.0.1:7090/

RewriteEngine on
RewriteCond %{HTTP:Upgrade} websocket [NC]
RewriteCond %{HTTP:Connection} upgrade [NC]
RewriteRule ^/?(.*) "ws://localhost:7090/$1" [P,L]

ProxyRequests off

SSLProxyVerify none 
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off