From a9b5ea0161e95e547dff79cf27ff3b39e1d1b99f Mon Sep 17 00:00:00 2001
From: Wolfram Schneider <wosch@indexdata.dk>
Date: Wed, 22 Jan 2014 11:38:06 +0000
Subject: [PATCH] HTTPS config for mkws.indexdata.com, MKWS-102

---
 tools/apache2/mkws-ssl-px |   48 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 tools/apache2/mkws-ssl-px

diff --git a/tools/apache2/mkws-ssl-px b/tools/apache2/mkws-ssl-px
new file mode 100644
index 0000000..d160cc1
--- /dev/null
+++ b/tools/apache2/mkws-ssl-px
@@ -0,0 +1,48 @@
+# A very simple configuration to proxy the irspy
+
+<VirtualHost *:443>
+    ServerName mkws.indexdata.com 
+    ServerAlias mkws-dev.indexdata.com
+
+  <IfModule mod_ssl.c>
+    SSLEngine on
+    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
+
+    #SSLCertificateFile /etc/ssl/certs/indexdata.com/id.cert
+    #SSLCertificateKeyFile /etc/ssl/certs/indexdata.com/id.key
+
+    SSLProxyEngine on
+  </IfModule>
+
+    # Remove the X-Forwarded-For header, as the proxy appends to it,
+    # and we need a clean ip address for the statistics
+    # RequestHeader unset X-Forwarded-For early
+    # Never mind
+
+    # ProxyRequests off
+    <Proxy *>
+      Order deny,allow
+      Allow from all
+    </Proxy>
+
+    ProxyPreserveHost On
+    ProxyPass         / http://caliban/
+    ProxyPassReverse  / http://caliban/
+
+    # Experiments to hunt down bu 3716
+    # Increase buffer size so that we don't go for chunked stuff
+    # ProxyIOBufferSize 8192
+    # Didn't help
+    # Disable gzipping
+    # RequestHeader unset Accept-Encoding
+    # Didn't help 
+    # ProxyReceiveBufferSize 8192
+    # Didn't help 
+    SetEnv force-proxy-request-1.0 1
+    SetEnv proxy-nokeepalive 1
+
+    # These are the logs for the proxying operation
+    ErrorLog     /var/log/apache2/mkws-ssl-error.log
+    CustomLog    /var/log/apache2/mkws-ssl-access.log combined
+</VirtualHost>
+
-- 
1.7.10.4