Thank you.
On my Apache Reverse Proxy, I have a .conf as below:
# cat /etc/httpd/conf.d/reverse_proxy.conf
<VirtualHost *:80>
ProxyPreserveHost On
ProxyPass / http://192.168.56.9/
ProxyPassReverse / http://192.168.56.9/
</VirtualHost>
And my website configuration file is on "192.168.56.9" server. Thus, if I setup Let's Encrypt on my Apache Reverse Proxy Server, then I just need below lines in a separate .conf file?
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin root@localhost
ServerName Example.example
ServerAlias www.Example.example
ErrorLog /var/log/httpd/error.log
CustomLog /var/log/httpd/access.log common
SSLEngine On
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/Example.example/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/Example.example/privkey.pem
</VirtualHost>
</IfModule>
About about self-signed certificate, could above file contain two separate certification?
On Monday, April 19, 2021, 02:48:24 PM GMT+4:30, Michael Wechner <michael.wechner@xxxxxxxxx> wrote:
Hi Jason
Definitely "Apache Reverse Proxy (Public IP)", whereas you could use for
example
https://letsencrypt.org/
https://certbot.eff.org/
Depending on how your connection between "Apache Reverse Proxy (Public
IP) ---> Web Site (Internal IP)" is protected, you might also want to
consider a self-signed certificate for "Web Site (Internal IP)"
HTH
Michael
Am 19.04.21 um 12:07 schrieb Jason Long:
> Hello,
> In below diagram, which server must use HTTPS certification?
>
> The Internet ---> Apache Reverse Proxy (Public IP) ---> Web Site (Internal IP)
>
>
> Thank you.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|