2017-05-22 20:11:43 +00:00
|
|
|
# Please make sure that you have the modules mod_ssl, mod_headers,
|
|
|
|
|
# mod_proxy and mod_proxy_http enabled. If not, you can use following
|
|
|
|
|
# command:
|
|
|
|
|
# $ sudo a2enmod ssl headers proxy proxy_http
|
|
|
|
|
|
2017-05-20 20:36:04 +00:00
|
|
|
<VirtualHost *:443>
|
2017-05-22 20:11:43 +00:00
|
|
|
ServerName localhost
|
2017-05-20 20:36:04 +00:00
|
|
|
|
|
|
|
|
# Enable secure communication using HTTPS
|
2017-05-22 20:11:43 +00:00
|
|
|
# Adjust the paths to the certificates files to your environment
|
2017-05-20 20:36:04 +00:00
|
|
|
SSLEngine on
|
2017-05-22 20:11:43 +00:00
|
|
|
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
|
|
|
|
|
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
|
|
|
|
|
|
2017-05-20 20:36:04 +00:00
|
|
|
# Tell tusd that the HTTPS protocol is used, in order to
|
|
|
|
|
# allow constructing correct upload URLs.
|
|
|
|
|
RequestHeader set X-Forwarded-Proto "https"
|
|
|
|
|
|
|
|
|
|
# Pass requests to tusd server
|
|
|
|
|
ProxyPass /files http://localhost:1080/files
|
|
|
|
|
ProxyPassReverse /files http://localhost:1080/files
|
|
|
|
|
</VirtualHost>
|
2017-05-22 20:11:43 +00:00
|
|
|
|
|
|
|
|
# This SSL configuration has been taken from Mozilla SSL Generator:
|
|
|
|
|
# https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=nginx-1.10.1&openssl=1.0.1e&hsts=no&profile=intermediate
|
|
|
|
|
SSLProtocol all -SSLv3
|
|
|
|
|
SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-$
|
|
|
|
|
SSLHonorCipherOrder on
|
|
|
|
|
SSLCompression off
|
|
|
|
|
|
|
|
|
|
# OCSP Stapling, only in httpd 2.3.3 and later
|
|
|
|
|
SSLUseStapling on
|
|
|
|
|
SSLStaplingResponderTimeout 5
|
|
|
|
|
SSLStaplingReturnResponderErrors off
|
|
|
|
|
SSLStaplingCache shmcb:/var/run/ocsp(128000)
|
