我的服务器正在运行centos 6和apache 2.3 web服务器; 我想在我的cpanel主域上configurationSSL终止反向代理。 我使用whm已经在域上安装了SSL证书,但是我需要的是在此示例中configuration反向代理:
SSLStrictSNIVHostCheck off <VirtualHost *:80> Redirect permanent / https://www.example.com/ ServerName example.com ServerAlias www.example.com </VirtualHost> <VirtualHost *:443> ServerName www.example.com ProxyPreserveHost On ProxyPass / http://localhost:3000/ ProxyPassReverse / http://localhost:3000/ SSLEngine on SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS SSLCertificateFile "/private/etc/apache2/server.crt" SSLCertificateKeyFile "/private/etc/apache2/server.key" SSLCompression off # not always present Header always edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" ServerSignature Off </VirtualHost>
我不知道该怎么做,以及如何使用cpanel和whm apacheconfiguration文件不应该被手动修改,以避免被cpanel程序自动生成时被删除。
另一件事是我经历了configuration和/var/cpanel/userdata/cpaneluser/domain.com_SSL,发现:
--- documentroot: /home/domain/public_html group: domain hascgi: 1 homedir: /home/domain ip: 192.168.53.12 ipv6: ~ owner: root phpopenbasedirprotect: ~ port: 443 secruleengineoff: ~ serveradmin: [email protected] serveralias: mail.domain.com www.domain.com servername: domain.com ssl: 1 usecanonicalname: 'Off' user: cpaneluser userdirprotect: ''
并在/var/cpanel/userdata/cpaneluser/domain.comfind:
--- customlog: - format: combined target: /usr/local/apache/domlogs/domain.com - format: "\"%{%s}t %I .\\n%{%s}t %O .\"" target: /usr/local/apache/domlogs/domain.com-bytes_log documentroot: /home/domain/public_html group: domain hascgi: 1 homedir: /home/domain ip: 192.168.53.12 owner: root phpopenbasedirprotect: 1 port: 80 scriptalias: - path: /home/domain/public_html/cgi-bin url: /cgi-bin/ serveradmin: [email protected] serveralias: mail.domain.com www.domain.com servername: domain.com usecanonicalname: 'Off' user: cpaneluser
我不明白几乎所有的configuration文件,使我很难根据我想要的反向代理configuration来适应它们。