Revision b869fa2c
Added by Alexis Mousset over 7 years ago
| rudder-server-relay/SOURCES/rudder-apache-relay-common.conf | ||
|---|---|---|
|
# Load relay-api
|
||
|
WSGIScriptAlias /rudder/relay-api /opt/rudder/share/relay-api/relay-api.wsgi
|
||
|
|
||
|
# Disallow by default
|
||
|
<Location /rudder/relay-api/>
|
||
|
|
||
|
<IfVersion < 2.4>
|
||
|
Order deny,allow
|
||
|
Deny from all
|
||
|
</IfVersion>
|
||
|
<IfVersion >= 2.4>
|
||
|
Require all denied
|
||
|
</IfVersion>
|
||
|
|
||
|
</Location>
|
||
|
|
||
|
<Location /rudder/relay-api/shared-files>
|
||
|
|
||
|
# rudder-networks.conf / rudder-networks-24.conf is automatically
|
||
| ... | ... | |
|
</IfVersion>
|
||
|
|
||
|
</Location>
|
||
|
|
||
|
<Location /rudder/relay-api/>
|
||
|
|
||
|
<IfVersion < 2.4>
|
||
|
Order deny,allow
|
||
|
Deny from all
|
||
|
</IfVersion>
|
||
|
<IfVersion >= 2.4>
|
||
|
Require all denied
|
||
|
</IfVersion>
|
||
|
|
||
|
</Location>
|
||
| rudder-webapp/SOURCES/rudder-apache-webapp-nossl.conf | ||
|---|---|---|
|
RewriteCond %{REQUEST_URI} !^/inventories/?
|
||
|
RewriteCond %{REQUEST_URI} !^/inventory-updates/?
|
||
|
RewriteCond %{REQUEST_URI} !^/api/?
|
||
|
RewriteCond %{REQUEST_URI} !^/rudder/relay-api/?
|
||
|
|
||
|
# Rule 2 - Restrict redirection to Rudder webapp
|
||
|
RewriteCond %{REQUEST_URI} ^/rudder/?
|
||
| rudder-webapp/SOURCES/rudder-apache-webapp-ssl.conf | ||
|---|---|---|
|
RewriteEngine on
|
||
|
RewriteRule ^/$ /rudder [R]
|
||
|
|
||
|
<Location /rudder/relay-api>
|
||
|
# Avoid proxy pass on relay api
|
||
|
ProxyPass !
|
||
|
</Location>
|
||
|
|
||
|
ProxyPass "/rudder" "http://localhost:8080/rudder" retry=0
|
||
|
ProxyPassReverse "/rudder" "http://localhost:8080/rudder"
|
||
|
ProxyRequests Off
|
||
Also available in: Unified diff
Fixes #9971: Missing permission for wsgi