Commit Graph
39 Commits
Author SHA1 Message Date
hollerandgitadmin d3f333d3d2 Rework Apache vhost for SSL-terminating reverse proxy
TLS is terminated at the proxy; Apache receives plain HTTP on :80.
Merge all rules into a single *:80 vhost (the :443 vhost was never
reached) and make the HTTPS redirect conditional on
X-Forwarded-Proto: http. Fixes ERR_TOO_MANY_REDIRECTS.
2026-07-16 09:21:52 +02:00
bruhn_b 94405196cd fix omny
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-07-16 08:34:29 +02:00
hollerandgitadmin c2dc78b958 First version of server config for omny
Apache vhost for omny-test.psi.ch (migration from lighttpd)
This config replaces the lighttpd setup for the OMNY status page. All authentication is done at the PHP level via rewrite rules — there is no mod_auth usage. Requests to the administrators:

Enable mod_rewrite and mod_ssl. Note: the vhost will fail configtest without mod_rewrite — this is intentional (without the rewrite rules, Apache would serve all files with no authentication, so failing loudly is the safe mode).
Certificate: the SSLCertificateFile / SSLCertificateKeyFile paths are placeholders in Let's Encrypt layout — please adjust to the actual certificate location for omny-test.psi.ch, or let us know how TLS is provisioned on this host.
PHP execution must be active for .php files under /var/www/omny (PHP-FPM, CGI/FastCGI, or mod_php — whichever is standard on this host is fine; the code requires PHP ≥ 7.1, no extensions beyond the defaults).
Please confirm whether any reverse proxy / load balancer sits in front of Apache. Several endpoints (upload.php, session_query.php, set_password.php) authorize by client IP (REMOTE_ADDR); if requests arrive via a proxy, we need to know so we can adapt the whitelist logic.
After deployment: apachectl configtest and reload. A quick functional check is opening https://omny-test.psi.ch/login.php — the login form should render (if PHP source code is shown instead, PHP execution is not wired up; please don't leave it in that state, as the source contains a secret).

The optional HSTS header is present but commented out (would additionally require mod_headers)
2026-07-14 14:46:46 +02:00
bruhn_b f46a1a4f6d rename niagadm to sinqimaging
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-02-13 11:10:03 +01:00
bruhn_b 867acacec4 deploy omny test
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-27 15:45:52 +01:00
bruhn_b 0c90f99336 again
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-27 09:15:47 +01:00
bruhn_b cd4ed024df location in apache config
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-27 09:14:36 +01:00
bruhn_b 44bf788ec2 folder location
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-27 09:11:20 +01:00
bruhn_b a89cdd3129 deploy niagadm
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-23 13:49:32 +01:00
ebner dde2521dc1 remove obsolete stuff 2026-01-22 12:55:02 +01:00
bruhn_b 26ecd4f9f9 rename gfa status to cas-status and file location to cas_status
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-22 10:02:31 +01:00
ebner df2c05ba11 revert 2026-01-21 15:16:33 +01:00
ebner 844a2be9d0 test 2026-01-21 15:14:25 +01:00
ebner 0ebccfdec9 test 2026-01-21 15:10:57 +01:00
ebner 3de832b7b2 update 2026-01-21 12:39:07 +01:00
ebner 14c2916f57 add apache config 2026-01-21 12:19:53 +01:00
bruhn_b 00cb196e95 megiwiki run on apache php infra
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2026-01-19 15:22:54 +01:00
ebner 9333c15cba retrofit a change that was done manually on the hosting server 2026-01-13 15:25:19 +01:00
bruhn_b e0b97741de simple docker mount and sls2
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 16:22:49 +01:00
bruhn_b 0587cb20b4 srem only to NFS
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 15:50:52 +01:00
bruhn_b acd0bbfc99 no cgi in root folder
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 11:13:19 +01:00
bruhn_b 5a76038aee disable layout wrapping
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 11:07:43 +01:00
bruhn_b e0c259ede1 shtml handler for shtml parsing...
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 10:48:57 +01:00
bruhn_b 95b21ecb96 include for /static
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 10:44:34 +01:00
bruhn_b b1df7508de includes and shtml
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 10:34:55 +01:00
bruhn_b 64b4935631 srem
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-25 09:47:38 +01:00
bruhn_b 1a464fe1b1 folder location
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-24 10:41:55 +01:00
bruhn_b f2d6ca9c83 move fluid to apache
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-24 10:33:04 +01:00
bruhn_b 106d05bedb apache config error
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 15:21:11 +01:00
bruhn_b a543867ffd gfa-status-test
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 14:48:26 +01:00
bruhn_b 570cd243e2 finally
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 13:18:58 +01:00
bruhn_b 50b7cf64c5 apache
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 13:10:36 +01:00
bruhn_b 0f0ceb374b apache mal wieder
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 13:07:57 +01:00
bruhn_b 4fb595ea66 fail
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 12:48:33 +01:00
bruhn_b fb522a5a89 apache ist soooooooo kompliziert
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 12:47:03 +01:00
bruhn_b a455dcc032 change index
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 12:44:55 +01:00
bruhn_b 2280fb03ad make apache config modular
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 12:42:02 +01:00
bruhn_b fe99b08bdd apache config document root disable
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 12:26:57 +01:00
bruhn_b 572398fe57 add apache php / cgi container for future apps and rfmwtools
Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-11 12:21:04 +01:00