From 391259b321850a0a87c29b09c9c3b718ab5fa796 Mon Sep 17 00:00:00 2001 From: Dobrica Pavlinusic Date: Fri, 23 Mar 2018 11:35:37 +0100 Subject: [PATCH] switch proxied sites to https using let's encrypt --- index.html | 50 +++++++++---------- p.vbz.ffzg.hr.conf | 119 +++++++++++++++++++++++++++++++++++---------- ssl.conf | 5 ++ 3 files changed, 123 insertions(+), 51 deletions(-) create mode 100644 ssl.conf diff --git a/index.html b/index.html index 8f6b036..d06a9cc 100644 --- a/index.html +++ b/index.html @@ -1,29 +1,29 @@ 
diff --git a/p.vbz.ffzg.hr.conf b/p.vbz.ffzg.hr.conf
index b0622b4..c16cea3 100644
--- a/p.vbz.ffzg.hr.conf
+++ b/p.vbz.ffzg.hr.conf
@@ -1,7 +1,8 @@
 # test with
 # wget --server-response -O /dev/null http://www.nature.com.p.vbz.ffzg.hr/
 
-
+
+	Include /srv/via-proxy/ssl.conf
 	ServerName muse.jhu.edu.p.vbz.ffzg.hr
 	SSLProxyEngine on
 	ProxyPass / https://muse.jhu.edu/
@@ -15,7 +16,9 @@
 
 # https://www.oclc.org/support/services/ezproxy/documentation/db/cambridgecore.en.html
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.cambridge.org.p.vbz.ffzg.hr
 	SSLProxyEngine on
 	ProxyAddHeaders Off
@@ -52,7 +55,9 @@ FilterChain NEWPATHS
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName search.proquest.com.p.vbz.ffzg.hr
 	SSLProxyEngine on
 	ProxyPass / https://search.proquest.com/
@@ -73,7 +78,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName academic.oup.com.p.vbz.ffzg.hr
 	SSLProxyEngine on
 	ProxyPass        / https://academic.oup.com/
@@ -96,7 +103,9 @@ FilterChain NEWPATHS2
 
 
 # https://www.oclc.org/support/services/ezproxy/documentation/db/ovid.en.html
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName ovidsp.tx.ovid.com.p.vbz.ffzg.hr
 	SSLProxyEngine on
 	ProxyPass        / https://ovidsp.tx.ovid.com/
@@ -118,7 +127,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName onlinelibrary.wiley.com.p.vbz.ffzg.hr
 #	SSLProxyEngine on
 
@@ -131,7 +142,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName journals.sagepub.com.p.vbz.ffzg.hr
 
 	ProxyPass        / http://journals.sagepub.com/
@@ -143,7 +156,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName pubs.rsc.org.p.vbz.ffzg.hr
 
 	ProxyPass        / http://pubs.rsc.org/
@@ -156,7 +171,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.brepolis.net.p.vbz.ffzg.hr
 
 	ProxyPass        / http://www.brepolis.net/
@@ -177,7 +194,9 @@ FilterChain NEWPATHS2
 
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName apps.brepolis.net.p.vbz.ffzg.hr
 
 	ProxyPass        / http://apps.brepolis.net/
@@ -199,7 +218,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.cairn.info.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -213,7 +234,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.degruyter.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -227,7 +250,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.emeraldinsight.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -240,7 +265,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.webofknowledge.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -262,7 +289,9 @@ FilterProvider NEWPATHS2 SUBSTITUTE "%{Content_Type} =~ m|^application/javascrip
 FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName apps.webofknowledge.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -276,7 +305,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.jstor.org.p.vbz.ffzg.hr
 
 	#SSLProxyEngine on
@@ -316,7 +347,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.nature.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -338,7 +371,9 @@ FilterChain NEWPATHS2
 #FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName idp.nature.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -353,7 +388,9 @@ FilterChain NEWPATHS2
 
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.palgrave.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -366,7 +403,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName link.springer.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -379,7 +418,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.tandfonline.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -392,7 +433,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.sciencedirect.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -406,7 +449,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName www.scopus.com.p.vbz.ffzg.hr
 
 	SSLProxyEngine on
@@ -419,7 +464,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName journals.bmj.com.p.vbz.ffzg.hr
 
 	#SSLProxyEngine on
@@ -432,7 +479,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName journals.bmj.com.p.vbz.ffzg.hr
 
 	#SSLProxyEngine on
@@ -445,7 +494,9 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
-
+
+	Include /srv/via-proxy/ssl.conf
+
 	ServerName ieeexplore.ieee.org.p.vbz.ffzg.hr
 
 	# IEEE Xplore is transitioning to HTTPS on 9 April 2018.
@@ -459,6 +510,20 @@ FilterChain NEWPATHS2
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
 
+NameVirtualHost *:443
+
+
+	Include /srv/via-proxy/ssl.conf
+
+	DocumentRoot /srv/via-proxy
+	
+		Require all granted
+	
+	ServerName p.vbz.ffzg.hr
+	ServerAlias *.p.vbz.ffzg.hr
+	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
+
+
 
 
 	DocumentRoot /srv/via-proxy
@@ -469,5 +534,7 @@ FilterChain NEWPATHS2
 	ServerAlias *.p.vbz.ffzg.hr
 	CustomLog /var/log/apache2/access-p.vbz.ffzg.hr.log vhost_combined
 
+	Redirect / https://p.vbz.ffzg.hr
+
 
 
diff --git a/ssl.conf b/ssl.conf
new file mode 100644
index 0000000..a37752e
--- /dev/null
+++ b/ssl.conf
@@ -0,0 +1,5 @@
+
+	SSLEngine on
+	SSLCertificateFile	/etc/letsencrypt/live/proxy.knjiznice.ffzg.hr/cert.pem
+	SSLCertificateKeyFile	/etc/letsencrypt/live/proxy.knjiznice.ffzg.hr/privkey.pem
+	SSLCertificateChainFile	/etc/letsencrypt/live/proxy.knjiznice.ffzg.hr/chain.pem
-- 
2.20.1