Server

apache-vhost.conf

@@ -0,0 +1,42 @@
+# GeoSus Admin Panel - Apache Virtual Host
+# 
+# Required modules:
+#   sudo a2enmod proxy proxy_http proxy_wstunnel rewrite headers ssl
+#
+# Installation:
+#   1. sudo cp apache-vhost.conf /etc/apache2/sites-available/geosus.conf
+#   2. sudo a2ensite geosus && sudo systemctl reload apache2
+#   3. sudo certbot --apache -d geosus.honzuvkod.dev
+
+<VirtualHost *:80>
+    ServerName geosus.honzuvkod.dev
+    
+    ErrorLog ${APACHE_LOG_DIR}/geosus_error.log
+    CustomLog ${APACHE_LOG_DIR}/geosus_access.log combined
+    
+    ProxyPreserveHost On
+    ProxyRequests Off
+    
+    RewriteEngine On
+    RewriteCond %{HTTP:Upgrade} websocket [NC]
+    RewriteCond %{HTTP:Connection} upgrade [NC]
+    RewriteRule ^/admin/ws/(.*)$ ws://127.0.0.1:8088/admin/ws/$1 [P,L]
+    
+    ProxyPass /admin http://127.0.0.1:8088/admin
+    ProxyPassReverse /admin http://127.0.0.1:8088/admin
+    
+    ProxyPass /api http://127.0.0.1:8088/api
+    ProxyPassReverse /api http://127.0.0.1:8088/api
+    
+    ProxyPass /health http://127.0.0.1:8088/health
+    ProxyPassReverse /health http://127.0.0.1:8088/health
+    
+    Header always set X-Content-Type-Options "nosniff"
+    Header always set X-Frame-Options "SAMEORIGIN"
+    Header always set X-XSS-Protection "1; mode=block"
+    Header always set Referrer-Policy "strict-origin-when-cross-origin"
+    
+    ProxyTimeout 3600
+    SetEnv proxy-nokeepalive 0
+    SetEnv proxy-initial-not-pooled 1
+</VirtualHost>