nginx as a proxy and https

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi

Another question about caldav

I want to server it behind a proxy with nginx

Does someone have a conf example that work

because I have try this, but for the moment, I manage to make it work without problem with   davx, thunderbird, evolution  but not with  iphone (OS/13.3 ,iOS/10.3.4)

I'm not really sure that it come from nginx maybe it's because i have login like myuser1@xxxxxxxxxxxxxxxx

here is my log

81.82.83.84 - myuser1@xxxxxxxxxxxxxxxx [03/Feb/2020:11:28:05 +0100] "PROPFIND /.well-known/caldav HTTP/1.1" 301 0 "-" "iOS/10.3.4 (14G61) accountsd/1.0" 81.82.83.84 - myuser1@xxxxxxxxxxxxxxxx [03/Feb/2020:11:28:05 +0100] "PROPFIND / HTTP/1.1" 207 280 "-" "iOS/10.3.4 (14G61) accountsd/1.0" 81.82.83.84 - myuser1@xxxxxxxxxxxxxxxx [03/Feb/2020:11:28:05 +0100] "PROPFIND /principals/ HTTP/1.1" 405 347 "-" "iOS/10.3.4 (14G61) accountsd/1.0" 81.82.83.84 - myuser1@xxxxxxxxxxxxxxxx [03/Feb/2020:11:28:05 +0100] "PROPFIND /calendar/dav/myuser1%40dav.mydomain.com/user/ HTTP/1.1" 405 347 "-" "iOS/10.3.4 (14G61) accountsd/1.0"

but with davx i have (the %40 is replace by @)

81.82.83.84- myuser1@xxxxxxxxxxxxxxxx  [03/Feb/2020:19:21:35 +0100] "PROPFIND /dav/calendars/user/myuser1@xxxxxxxxxxxxxxxx/ HTTP/1.1" 207 616 "-" "DAVx5/2.6.3.1-ose (2020/01/18; dav4jvm; okhttp/3.12.6) Android/9"

here is my conf

server {
        listen       443 ssl;
        server_name  dav.mydomain.com;


        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
        ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
        ssl_session_cache shared:SSL:10m;
        #ssl_dhparam /etc/ssl/dhparam.pem;


        access_log /var/log/nginx/dav.ssl.access.log;
        root /home/public;
        location / {
    proxy_pass        http://192.168.12.24:8008/;
    proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_pass_header Authorization;


    proxy_set_header  Host $host;
    proxy_set_header  X-Real-IP $remote_addr;
    proxy_set_header  X-Forwarded-For $remote_addr;
    proxy_set_header  X-Forwarded-Host $remote_addr;
        }


    ssl_certificate /etc/letsencrypt/live/dav.mydomain.com/fullchain.pem; # managed by Certbot     ssl_certificate_key /etc/letsencrypt/live/dav.mydomain.com/privkey.pem; # managed by Certbot
}


thanks


----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus




[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux