giellatekno/gtweb-apy-conf

Configuration for gtweb's apertium-apy and apertium-html-tools installations

gtweb-apy-conf's Issues

jorgal.uit.no doesn't work under ssl

SSL_ERROR_BAD_CERT_DOMAIN
If we had Apache exposed, it'd be just a new virtual host entry + an extra -d jorgal.uit.no to certbot, but gtweb has Apache behind nginx:

$ head -999 /etc/nginx/sites-enabled/*_apache_proxy.conf
==> /etc/nginx/sites-enabled/gtweb_apache_proxy.conf <==
## This handles proxying to apache. Anything going to gtweb.uit.no will be sent
## transparently. Apache should be running on 3080.

server {
    listen 80;
    server_name gtweb.uit.no ;
    root /var/www/html/ ;

    # Proxy logs: NB, apache will also have its own logs.
    access_log /var/www/logs/nginx.proxy.access.log;
    error_log /var/www/logs/nginx.proxy.error.log;

    if ($http_host != "gtweb.uit.no") {
         rewrite ^ http://gtweb.uit.no$request_uri$args permanent;
    }

    index index.php index.html;

    # location / {
    #      try_files $uri @proxy;
    # }

    # location ~* \.(js|css|jpg|jpeg|gif|png|svg|ico|pdf|html|htm)$ {
    #      expires      30d;
    # }

    location / {
         proxy_pass http://127.0.0.1:3080;
         include /etc/nginx/apache.proxy.confs;
    }

    # Also pass PHP to the proxy.
    location ~* \.php$ {
         proxy_pass http://127.0.0.1:3080;
         include /etc/nginx/apache.proxy.confs;
    }

    location ~ /\.ht {
            deny all;
    }

}

==> /etc/nginx/sites-enabled/jorgal_apache_proxy.conf <==
## This handles proxying to apache. Anything going to gtweb.uit.no will be sent
## transparently. Apache should be running on 3080.

server {
    listen 80;
    server_name jorgal.uit.no ;
    root /var/www/html/ ;

    # Proxy logs: NB, apache will also have its own logs.
    access_log /var/www/logs/nginx.proxy.access.log;
    error_log /var/www/logs/nginx.proxy.error.log;

    if ($http_host != "jorgal.uit.no") {
         rewrite ^ http://jorgal.uit.no$request_uri$args permanent;
    }
    rewrite ^/(.*)$ /jorgal/$1;

    index index.php index.html;

    location / {
         proxy_pass http://127.0.0.1:3080;
         include /etc/nginx/apache.proxy.confs;
    }

    # Also pass PHP to the proxy.
    location ~* \.php$ {
         proxy_pass http://127.0.0.1:3080;
         include /etc/nginx/apache.proxy.confs;
    }

    location ~ /\.ht {
            deny all;
    }

}

– do we need an nginx certificate just for jorgal?

https proxy for website translation

e.g. translating http://samas.no when loading jorgal under https makes it fail loading external (http-only) resources, try

https://jorgal.uit.no/index.sme.html?dir=sme-nob&qP=http%3A%2F%2Fsamas.no#webpageTranslation

vs

http://jorgal.uit.no/index.sme.html?dir=sme-nob&qP=http%3A%2F%2Fsamas.no#webpageTranslation