| SYSTEM INFORMATION | |
|---|---|
| Version Webmin | 2.651 |
| Version Usermin | 2.550 |
| Version Virtualmin | 8.1.0 GPL |
| Version Apache | 2.4.68 |
In Virtualmin > Domain.com > Web Configuration > Configure Website (SSL) > Edit Directives, I added a ProxyPass directive. Do you know if it is correctly placed?
Users are being redirected to a Node.js application that currently handles around 500 simultaneous connections.
Here is the current configuration:
SuexecUserGroup "#1011" "#1011"
ServerName tchat.domain.com
#ServerAlias www.tchat.domain.com
#ServerAlias mail.tchat.domain.com
#ServerAlias webmail.tchat.domain.com
#ServerAlias admin.tchat.domain.com
DocumentRoot /home/domain/domains/tchat.domain.com/public_html
ErrorLog /var/log/virtualmin/tchat.domain.com_error_log
CustomLog /var/log/virtualmin/tchat.domain.com_access_log combined
ScriptAlias /cgi-bin/ /home/domain/domains/tchat.domain.com/cgi-bin/
DirectoryIndex index.php index.php4 index.php5 index.htm index.html
<Directory /home/domain/domains/tchat.domain.com/public_html>
Options -Indexes +IncludesNOEXEC +SymLinksIfOwnerMatch
Require all granted
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
</Directory>
<Directory /home/domain/domains/tchat.domain.com/cgi-bin>
Require all granted
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
</Directory>
# Proxy de base
ProxyVia On
ProxyRequests Off
ProxyPreserveHost On
# Exclure certains chemins du proxy
ProxyPass /.well-known !
ProxyPass /errors/40x.html !
# Proxy vers le backend
ProxyPass / http://127.0.0.1:7780/
ProxyPassReverse / http://127.0.0.1:7780/
#RequestHeader set Host $host
#RequestHeader set X-Real-IP %{REMOTE_ADDR}s
#RequestHeader set X-Forwarded-For %{REMOTE_ADDR}s
RewriteEngine on
RewriteCond %{HTTP_HOST} =webmail.tchat.domain.com
RewriteRule ^(?!/.well-known)(.*) https://tchat.domain.com:20000/ [R]
RewriteCond %{HTTP_HOST} =admin.tchat.domain.com
RewriteRule ^(?!/.well-known)(.*) https://tchat.domain.com:10000/ [R]
# Reverse proxy websocket connections
# requires: a2enmod rewrite proxy proxy_wstunnel
#RewriteEngine On
# WebSocket support (backend local en ws://)
RewriteCond %{HTTP:Upgrade} websocket [NC]
RewriteCond %{HTTP:Connection} upgrade [NC]
RewriteRule .* ws://127.0.0.1:7778%{REQUEST_URI} [P,QSA,L]
# Headers
Header set Content-Security-Policy "frame-ancestors https://exemple1.com;"
# Set header to allow the irc connection to be marked as secure
# requires: a2enmod headers
RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
ErrorDocument 500 /errors/40x.html
ErrorDocument 502 /errors/40x.html
ErrorDocument 503 /errors/40x.html
ErrorDocument 504 /errors/40x.html
ErrorDocument 402 /errors/40x.html
ErrorDocument 403 /errors/40x.html
ErrorDocument 401 /errors/40x.html
<Proxy *>
Order allow,deny
Allow from all
</Proxy>
#RemoveHandler .php
#RemoveHandler .php8.2
#<FilesMatch \.php$>
#SetHandler proxy:unix:/run/php/17022683xxxxxx.sock|fcgi://127.0.0.1
#</FilesMatch>
SSLEngine on
SSLCertificateFile /etc/ssl/virtualmin/17022683xxxxxx/ssl.cert
SSLCertificateKeyFile /etc/ssl/virtualmin/17022683xxxxxx/ssl.key
SSLCACertificateFile /etc/ssl/virtualmin/17022683xxxxxx/ssl.ca
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
I am using Apache.
Can this ProxyPass configuration be optimized to improve performance?