This is not needed for reverse proxies: <Proxy *> Require all granted </Proxy>
On Wed, Jan 4, 2023 at 6:26 PM Florian Schwalm <f...@flo-films.de> wrote: > Nice, thank you for sharing the final result :) > > Am 5. Januar 2023 00:08:07 MEZ schrieb Jan Kohnert < > nospam001-li...@jan-kohnert.de>: >> >> Am Mittwoch, 28. Dezember 2022, 11:53:58 CET schrieb Jan Kohnert: >> >>> The config reads as: >>> ------------------------------ >>> RequestHeader add X-Forwarded-Ssl on >>> RequestHeader set X-Forwarded-Proto "https" >>> >>> <Proxy *> >>> Require all granted >>> </Proxy> >>> >>> <Location /> >>> ProxyPass unix:///opt/gitlab/gitlab/tmp/sockets/gitlab-workhorse.socket| >>> http://127.0.0.1/ >>> ProxyPassReverse unix:///opt/gitlab/gitlab/tmp/sockets/gitlab- >>> workhorse.socket|http://127.0.0.1/ >>> </Location> >>> >>> <Location /-/cable> >>> ProxyPass unix:///opt/gitlab/gitlab/tmp/sockets/gitlab-workhorse.socket| >>> ws://127.0.0.1/-/cable >>> ProxyPassReverse unix:///opt/gitlab/gitlab/tmp/sockets/gitlab- >>> workhorse.socket|ws://127.0.0.1/-/cable >>> </Location> >>> ------------------------------ >>> >> >> thanks to the help of the GitLab developers, I figured, I was missing >> ProxyPreserveHost. The working configuration including websockets reads as: >> ------------------------------ >> ProxyPreserveHost on >> RequestHeader add X-Forwarded-Ssl on >> RequestHeader set X-Forwarded-Proto "https" >> >> <Proxy *> >> Require all granted >> </Proxy> >> >> <Location /> >> ProxyPass unix:///opt/gitlab/gitlab/tmp/sockets/gitlab-workhorse.socket| >> http://127.0.0.1/ >> ProxyPassReverse unix:///opt/gitlab/gitlab/tmp/sockets/gitlab- >> workhorse.socket|http://127.0.0.1/ >> </Location> >> >> <Location /-/cable> >> ProxyPass unix:///opt/gitlab/gitlab/tmp/sockets/gitlab-workhorse.socket| >> ws://127.0.0.1/-/cable >> ProxyPassReverse unix:///opt/gitlab/gitlab/tmp/sockets/gitlab- >> workhorse.socket|ws://127.0.0.1/-/cable >> </Location> >> ------------------------------ >> >>
