deploy cas-status to dmz

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
This commit is contained in:
2026-01-22 16:00:34 +01:00
parent 98834e8cdf
commit f4f668af71
3 changed files with 52 additions and 0 deletions
+30
View File
@@ -0,0 +1,30 @@
<VirtualHost *:80>
ServerName cas-status.psi.ch
DocumentRoot /var/www/cas_status/web
ErrorLog /proc/self/fd/2
CustomLog /proc/self/fd/1 combined
Header set Access-Control-Allow-Origin "*"
# PHP configuration
<FilesMatch ".+\.ph(p[345]?|t|tml)$">
SetHandler application/x-httpd-php
</FilesMatch>
php_admin_value upload_tmp_dir /var/www/clients/client45/web70/tmp
php_admin_value session.save_path /var/www/clients/client45/web70/tmp
php_admin_value open_basedir /var/www/clients/client45/web70/web:/var/www/clients/client45/web70/private:/var/www/clients/client45/web70/tmp:/var/www/cas_status/web:/tmp:/usr/share/php:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin:/var/www/error/
<Directory /var/www/cas_status/web>
Options +FollowSymLinks +Includes
AllowOverride All
Require all granted
# SSI support
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
</Directory>
</VirtualHost>
+21
View File
@@ -0,0 +1,21 @@
server {
listen 80;
server_name cas-status.psi.ch;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name cas-status.psi.ch;
ssl_certificate /etc/nginx/certs/lx-docker-dmz-01.psi.ch.crt;
ssl_certificate_key /etc/nginx/private/lx-docker-dmz-01.psi.ch.key;
location / {
proxy_pass http://apache_app:80;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
+1
View File
@@ -30,6 +30,7 @@ services:
volumes:
- /opt/webcontent/DMZ/rfmwtools:/var/www/rfmwtools:ro
- /opt/webcontent/DMZ/fluid-eos:/var/www/fluid-eos:rw
- /opt/webcontent/DMZ/cas_status:/var/www/cas_status:rw
- /mount/srem/webhosting:/var/www/srem:rw
- ./apache/conf:/etc/apache2/sites-enabled:ro
networks: