92 lines
3.1 KiB
Plaintext
92 lines
3.1 KiB
Plaintext
<IfModule mod_ssl.c>
|
||
<VirtualHost *:443>
|
||
ServerName coll.f7cloud.ru
|
||
AllowEncodedSlashes NoDecode
|
||
ProxyPreserveHost On
|
||
|
||
|
||
# static html, js, images, etc. served from coolwsd
|
||
# browser is the client part of Collabora Online
|
||
ProxyPass /browser http://127.0.0.1:9980/browser retry=0
|
||
ProxyPassReverse /browser http://127.0.0.1:9980/browser
|
||
|
||
<Location "/browser/">
|
||
Header unset Cache-Control
|
||
Header unset Expires
|
||
Header unset ETag
|
||
Header always set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
|
||
Header always set Pragma "no-cache"
|
||
Header always set Expires "0"
|
||
ExpiresActive On
|
||
ExpiresDefault "now"
|
||
FileETag None
|
||
|
||
# Критично: не сжимать повторно
|
||
SetEnv no-gzip 1
|
||
SetEnv no-brotli 1
|
||
# На время отладки можно вообще попросить backend не присылать gzip/br:
|
||
# RequestHeader unset Accept-Encoding
|
||
</Location>
|
||
|
||
Alias "/f7cloud-loading-preview" "/usr/share/coolwsd/browser/dist/f7cloud"
|
||
<Directory "/usr/share/coolwsd/browser/dist/f7cloud">
|
||
Options -Indexes +FollowSymLinks
|
||
AllowOverride None
|
||
Require all granted
|
||
DirectoryIndex loading-preview.html
|
||
</Directory>
|
||
|
||
<Location "/loleaflet/">
|
||
Header unset Cache-Control
|
||
Header unset Expires
|
||
Header unset ETag
|
||
Header always set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
|
||
Header always set Pragma "no-cache"
|
||
Header always set Expires "0"
|
||
ExpiresActive On
|
||
ExpiresDefault "now"
|
||
FileETag None
|
||
|
||
SetEnv no-gzip 1
|
||
SetEnv no-brotli 1
|
||
# RequestHeader unset Accept-Encoding # (включи, если снова увидишь Content-Length: 0)
|
||
</Location>
|
||
|
||
|
||
# WOPI discovery URL
|
||
ProxyPass /hosting/discovery http://127.0.0.1:9980/hosting/discovery retry=0
|
||
ProxyPassReverse /hosting/discovery http://127.0.0.1:9980/hosting/discovery
|
||
|
||
|
||
# Capabilities
|
||
ProxyPass /hosting/capabilities http://127.0.0.1:9980/hosting/capabilities retry=0
|
||
ProxyPassReverse /hosting/capabilities http://127.0.0.1:9980/hosting/capabilities
|
||
|
||
|
||
# Main websocket
|
||
ProxyPassMatch "/cool/(.*)/ws$" ws://127.0.0.1:9980/cool/$1/ws nocanon
|
||
|
||
|
||
# Admin Console websocket
|
||
ProxyPass /cool/adminws ws://127.0.0.1:9980/cool/adminws
|
||
|
||
|
||
# Download as, Fullscreen presentation and Image upload operations
|
||
ProxyPass /cool http://127.0.0.1:9980/cool
|
||
ProxyPassReverse /cool http://127.0.0.1:9980/cool
|
||
# Compatibility with integrations that use the /lool/convert-to endpoint
|
||
ProxyPass /lool http://127.0.0.1:9980/cool
|
||
ProxyPassReverse /lool http://127.0.0.1:9980/cool
|
||
RewriteEngine on
|
||
# Some rewrite rules in this file were disabled on your HTTPS site,
|
||
# because they have the potential to create redirection loops.
|
||
|
||
# RewriteCond %{SERVER_NAME} =coll.f7cloud.ru
|
||
# RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
|
||
|
||
SSLCertificateFile /etc/letsencrypt/live/coll.f7cloud.ru/fullchain.pem
|
||
SSLCertificateKeyFile /etc/letsencrypt/live/coll.f7cloud.ru/privkey.pem
|
||
Include /etc/letsencrypt/options-ssl-apache.conf
|
||
</VirtualHost>
|
||
</IfModule>
|