View source for Lighttpd reverse proxy

This describes a example configuration to use lighttpd as a proxy for the thin webserver and to serve the static content.

<tt>mod_proxy</tt> has to be enabled using <tt>lighttpd-enable-mod proxy</tt> on the command line.

=== Proxy and Static Files ===

At the end of your '''lighttpd.conf''' append this section.

<pre>$HTTP[&quot;host&quot;] =~ &quot;(^|\.)pod\.url\.com$&quot; {
        server.document-root = &quot;/path/to/diaspora/public/&quot;
        url.rewrite  = (&quot;^/$&quot; =&gt; &quot;/users/sign_in&quot; )

        $HTTP[&quot;url&quot;] !~ &quot;\.(js|css|gif|jpg|png|ico|txt|swf|html|htm|svg|ttf|woff|gz)$&quot; {
             proxy.server = (&quot;&quot;    =&gt; (( &quot;host&quot; =&gt; &quot;127.0.0.1&quot;, &quot;port&quot; =&gt; 3000)))
        }

        # Bypass proxy for sidekiq assets
        $HTTP[&quot;url&quot;] =~ &quot;^/sidekiq&quot; {
                proxy.server = (&quot;&quot;    => (( &quot;host&quot; =&gt; &quot;127.0.0.1&quot;, &quot;port&quot; =&gt; 3000)))
        }
}</pre>
The first line filters all requests to your pod URL. So only requests to your pod are processed. In the second line replace the path to your diaspora public directory. The third line is optional and redirects first time visitors to the sign in page.

The inner section filters out all requests that do not hit static files and forwards them to the thin app server.

=== Secure Connections ===

To always use https add the following code within the previews block. <tt>mod_redirect</tt> has to be enabled.

<pre>$SERVER[&quot;socket&quot;]== &quot;:80&quot; {  # 
    url.redirect = (&quot;^/(.*)&quot; =&gt; &quot;https://pod.url.com/$1&quot;)
}</pre>
=== Curl Expect Header ===

There is a problem with curl. Curl adds an Expect header to its HTTP POST requests. lighttpd rejects these requests by default. To ignore the requests add the following line.

<pre>server.reject-expect-100-with-417 = &quot;disable&quot; </pre>

[[Category:Github transfer done]]
[[Category:Installation]]
[[Category:Podmin]]
[[Category:Technical]]