Apache config to proxy entire site with 1 exception

jnojr · 05-19-2024, 12:03 PM

I have a website www.example.com on a hosting provider. We use that provider because it has a simple site builder my wife uses to maintain the site. Moving off of it isn't an option for this exercise.

I want to create an Apache proxy that can accept traffic for www.example.com that will simple pass all requests along to that hosted site, which is a vhost so hostname must be retained. I want to do this so I can use that proxy to add TLS (the hosting provider won't let us without charging triple - yes, they suck, but again, leaving isn't an option).

What I've got so far:

Code:

<VirtualHost *:80>
    ServerName www.example.com
    ServerAlias exxample.com
    RequestHeader set Host "www.example.com"
    ProxyPreserveHost on
    ProxyPass / http://192.168.193.133 # IP of providers vhost
    ProxyPassreverse / http://192.168.193.133
    RewriteEngine On
</VirtualHost>

bathory · 05-20-2024, 03:57 AM

Hi,

If I understand well, you want to create a SSL reverse proxy in front of the actual website.
If that's the case then you'll have to setup a SSL server like this:

Code:

<VirtualHost *:443>
 ServerName www.example.com
# Put SSL related stuff, like cert, key etc...
  SSLEngine On
  SSLCertificateFile ...
  SSLCertificateKeyFile ...
  SSLProtocol
  ...
# Proxy directives:
   RequestHeader set Host "www.example.com"
   ProxyPreserveHost on
   ProxyPass / http://192.168.193.133/ # IP of providers vhost
   ProxyPassreverse / http://192.168.193.133/
   ...
</VirtualHost>

Mind that the trailing slash is important in the ProxyPass/ProxyPassreverse directives!

Regards

jnojr · 05-20-2024, 09:03 AM

Quote:

Originally Posted by bathory

Hi,

If I understand well, you want to create a SSL reverse proxy in front of the actual website.
If that's the case then you'll have to setup a SSL server like this:

Code:

<VirtualHost *:443>
 ServerName www.example.com
# Put SSL related stuff, like cert, key etc...
  SSLEngine On
  SSLCertificateFile ...
  SSLCertificateKeyFile ...
  SSLProtocol
  ...
# Proxy directives:
   RequestHeader set Host "www.example.com"
   ProxyPreserveHost on
   ProxyPass / http://192.168.193.133/ # IP of providers vhost
   ProxyPassreverse / http://192.168.193.133/
   ...
</VirtualHost>

Mind that the trailing slash is important in the ProxyPass/ProxyPassreverse directives!

Regards

Didn't work, because I need to pass the hostname 'www.example.com' to the hoster... it's a vhost, visiting the IP gets you an error.

bathory · 05-20-2024, 12:02 PM

Quote:

Didn't work, because I need to pass the hostname 'www.example.com' to the hoster... it's a vhost, visiting the IP gets you an error.

What is the error you get?
Maybe you should change your dns so the IP resolves to the SSL host and then use a non-SSL vhost in the backend webserver with the same hostname...