- creato editor di Pagine (iniziato)

- fix: mancano i "t," su alcuni componenti...
2025-09-02 16:22:31 +02:00
parent fcbc64cea8
commit 7ba408c053
25 changed files with 321 additions and 260 deletions
--- a/docs/apache2/sites-available/000-default-ssl.conf
+++ b/docs/apache2/sites-available/000-default-ssl.conf
@@ -0,0 +1,11 @@
+<VirtualHost *:443>
+    ServerName _default_
+    SSLEngine on
+    SSLCertificateFile    /etc/letsencrypt/live/riso.app/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/riso.app/privkey.pem
+    Include /etc/letsencrypt/options-ssl-apache.conf
+    Protocols h2 http/1.1
+
+    # Puoi anche fare un 403:
+    Redirect 403 /
+</VirtualHost>
--- a/docs/apache2/sites-available/50_ssl_test.abitaregliiblei.it.conf
+++ b/docs/apache2/sites-available/50_ssl_test.abitaregliiblei.it.conf
@@ -1,39 +0,0 @@
-Include /etc/apache2/sites-available/dominioinclude_test.abitaregliiblei.it.conf
-
-# Configurazione per HTTP
-<VirtualHost 65.108.222.97:80>
-    ServerName ${MIODOMINIO_COMPLETO}
-    DocumentRoot /var/www/${MIODOMINIO_COMPLETO}
-
-    RewriteEngine on
-    # Redirigi tutto il traffico HTTP verso HTTPS
-    RewriteCond %{SERVER_NAME} =${MIODOMINIO_COMPLETO} [OR]
-    RewriteCond %{SERVER_NAME} =www.${MIODOMINIO_COMPLETO}
-    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
-
-    ErrorLog /var/www/${MIODOMINIO_COMPLETO}/logs/error.log
-    CustomLog /var/www/${MIODOMINIO_COMPLETO}/logs/access.log combined
-</VirtualHost>
-
-
-# Configurazione per HTTPS
-<IfModule mod_ssl.c>
-  <VirtualHost 65.108.222.97:443>
-      ServerName ${MIODOMINIO_COMPLETO}
-      DocumentRoot /var/www/${MIODOMINIO_COMPLETO}
-
-      ErrorLog /var/www/${MIODOMINIO_COMPLETO}/logs/error.log
-      CustomLog /var/www/${MIODOMINIO_COMPLETO}/logs/access.log combined
-
-      <Directory /var/www/${MIODOMINIO_COMPLETO}/>
-          Options -Indexes +IncludesNOEXEC +SymLinksIfOwnerMatch +ExecCGI
-          AllowOverride All
-          Require all granted
-      </Directory>
-
-      RewriteEngine on
-      Include /etc/letsencrypt/options-ssl-apache.conf
-      SSLCertificateFile /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
-      SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
-  </VirtualHost>
-</IfModule>
--- a/docs/apache2/sites-available/dominioinclude.riso.app.conf
+++ b/docs/apache2/sites-available/dominioinclude.riso.app.conf
@@ -0,0 +1,4 @@
+Define MIODOMINIO riso.app
+Define MIODOMINIO_COMPLETO riso.app
+Define MIOURL_API api.riso.app
+Define PORTA 3006
--- a/docs/apache2/sites-available/dominioinclude_piuchebuono.app.conf
+++ b/docs/apache2/sites-available/dominioinclude_piuchebuono.app.conf
@@ -1,4 +0,0 @@
-Define MIODOMINIO piuchebuono.app
-Define MIODOMINIO_COMPLETO piuchebuono.app
-Define MIOURL_API api.piuchebuono.app
-Define PORTA 3000
--- a/docs/apache2/sites-available/dominioinclude_test.abitaregliiblei.it.conf
+++ b/docs/apache2/sites-available/dominioinclude_test.abitaregliiblei.it.conf
@@ -1,4 +0,0 @@
-Define MIODOMINIO abitaregliiblei.it
-Define MIODOMINIO_COMPLETO test.abitaregliiblei.it
-Define MIOURL_API testapi.abitaregliiblei.it
-Define PORTA 3021
--- a/docs/apache2/sites-available/nodejs_3000_api.piuchebuono.app.conf
+++ b/docs/apache2/sites-available/nodejs_3000_api.piuchebuono.app.conf
@@ -1,3 +0,0 @@
-Include /etc/apache2/sites-available/dominioinclude_piuchebuono.app.conf
-
-Include /etc/apache2/sites-available/nodejs_virtualhost_ssl_http_https.conf
--- a/docs/apache2/sites-available/nodejs_virtualhost_ssl_http_https.conf
+++ b/docs/apache2/sites-available/nodejs_virtualhost_ssl_http_https.conf
@@ -1,47 +0,0 @@
-# Configurazione per HTTP
-<VirtualHost 65.108.222.97:80>
-    ServerName ${MIOURL_API}
-
-    RewriteEngine on
-    # Redirigi tutto il traffico HTTP verso HTTPS
-    RewriteCond %{SERVER_NAME} =${MIOURL_API} [OR]
-    RewriteCond %{SERVER_NAME} =www.${MIOURL_API}
-    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
-
-    ErrorLog /var/www/${MIODOMINIO_COMPLETO}/logs/error.log
-    CustomLog /var/www/${MIODOMINIO_COMPLETO}/logs/access.log combined
-</VirtualHost>
-
-<VirtualHost 65.108.222.97:443>
-  ServerName ${MIOURL_API}
-  ServerAdmin surya@riso.app
-
-  SSLEngine On
-  SSLProtocol -ALL +TLSv1.2 +TLSv1.3
-  SSLCompression Off
-  SSLHonorCipherOrder off
-  SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:E>
-  SSLVerifyDepth 10
-  SSLCertificateFile /etc/letsencrypt/live/${MIODOMINIO}/cert.pem
-  SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
-
-  ProxyPreserveHost On
-  SSLProxyEngine On
-  SSLProxyVerify None
-  SSLProxyCheckPeerCN Off
-  SSLProxyCheckPeerName Off
-  ProxyPass / https://localhost:${PORTA}/ retry=0 timeout=5 connectiontimeout=2
-  ProxyPassReverse / https://localhost:${PORTA}/
-
-  ProxyTimeout 5
-
-  LogLevel warn
-  ErrorLog /var/www/${MIODOMINIO_COMPLETO}/logs/error.log
-  CustomLog /var/www/${MIODOMINIO_COMPLETO}/logs/access.log combined
-
-  <Location />
-    ProxyPassReverse /
-    SetEnv force-proxy-request-1.0 1
-    SetEnv proxy-nokeepalive 1
-  </Location>
-</VirtualHost>
--- a/docs/apache2/sites-available/websites_ssl.riso.app.conf
+++ b/docs/apache2/sites-available/websites_ssl.riso.app.conf
@@ -0,0 +1,3 @@
+Include /etc/apache2/sites-available/dominioinclude.riso.app.conf
+
+Include /etc/apache2/sites-available/websites_ssl_virtualhost.conf
--- a/docs/apache2/sites-available/websites_ssl_piuchebuono.app.conf
+++ b/docs/apache2/sites-available/websites_ssl_piuchebuono.app.conf
@@ -1,3 +0,0 @@
-Include /etc/apache2/sites-available/dominioinclude_piuchebuono.app.conf
-
-Include /etc/apache2/sites-available/websites_ssl_virtualhost.conf
--- a/docs/apache2/sites-available/websites_ssl_test.abitaregliiblei.it.conf
+++ b/docs/apache2/sites-available/websites_ssl_test.abitaregliiblei.it.conf
@@ -1,3 +0,0 @@
-Include /etc/apache2/sites-available/dominioinclude_test.abitaregliiblei.it.conf
-
-Include /etc/apache2/sites-available/websites_ssl_virtualhost.conf
--- a/docs/apache2/sites-available/websites_ssl_test.riso.app.conf
+++ b/docs/apache2/sites-available/websites_ssl_test.riso.app.conf
@@ -0,0 +1,3 @@
+Include /etc/apache2/sites-available/dominioinclude_test.riso.app.conf
+
+Include /etc/apache2/sites-available/websites_ssl_virtualhost_sottodomini.conf
--- a/docs/apache2/sites-available/websites_ssl_virtualhost.conf
+++ b/docs/apache2/sites-available/websites_ssl_virtualhost.conf
@@ -1,30 +1,94 @@
-<VirtualHost 65.108.222.97:80>
-    ServerName ${MIODOMINIO_COMPLETO}
-    RewriteEngine On
+# ==================== APEX (SITO) ====================
+# HTTP -> HTTPS
+<VirtualHost *:80>
+    ServerName ${MIODOMINIO}
+    ServerAlias www.${MIODOMINIO}

-    # Forza la connessione HTTPS
-    RewriteCond %{HTTPS} off
-    RewriteRule ^ https://${MIODOMINIO_COMPLETO}%{REQUEST_URI} [L,R=301]
+    RewriteEngine On
+    RewriteRule ^ https://${MIODOMINIO}%{REQUEST_URI} [R=301,L]
+
+    ErrorLog  /var/log/apache2/${MIODOMINIO}-error.log
+    CustomLog /var/log/apache2/${MIODOMINIO}-access.log combined
 </VirtualHost>

-<VirtualHost 65.108.222.97:443>
-  ServerName ${MIODOMINIO_COMPLETO}
-  DocumentRoot /var/www/${MIODOMINIO_COMPLETO}
-  ServerAdmin surya@riso.app
-  SSLEngine On
-  SSLProtocol -ALL +TLSv1.2
-  SSLCompression Off
-  SSLHonorCipherOrder off
-  SSLCipherSuite ECDH+AESGCM:ECDH+AES256:!aNULL:!MD5:!DSS:!DH:!AES128
-  SSLVerifyDepth 10
-  SSLCertificateFile /etc/letsencrypt/live/${MIODOMINIO}/cert.pem
-  SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
-  <Directory /var/www/${MIODOMINIO_COMPLETO}/>
-    CGIPassAuth On
-    Require all granted
-    AllowOverride All
-  </Directory>
-  LogLevel warn
-  ErrorLog "/var/www/${MIODOMINIO_COMPLETO}/logs/error.log"
-  CustomLog "/var/www/${MIODOMINIO_COMPLETO}/logs/access.log" combined
+# HTTPS (servizio sito - NO proxy qui)
+<VirtualHost *:443>
+    ServerName ${MIODOMINIO}
+    ServerAlias www.${MIODOMINIO}
+
+    DocumentRoot /var/www/${MIODOMINIO_COMPLETO}
+
+    SSLEngine on
+    SSLCertificateFile    /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
+    Include /etc/letsencrypt/options-ssl-apache.conf
+    Protocols h2 http/1.1
+
+    <Directory "/var/www/${MIODOMINIO_COMPLETO}">
+        Options Indexes FollowSymLinks
+        AllowOverride All
+        Require all granted
+    </Directory>
+
+    DirectoryIndex index.html
+
+    # (Opzionale per SPA Quasar/Vue)
+    # RewriteEngine On
+    # RewriteCond %{REQUEST_FILENAME} !-f
+    # RewriteCond %{REQUEST_FILENAME} !-d
+    # RewriteRule ^ /index.html [L]
+
+    ErrorLog  /var/log/apache2/${MIODOMINIO}-error.log
+    CustomLog /var/log/apache2/${MIODOMINIO}-access.log combined
+</VirtualHost>
+
+
+# ==================== API ====================
+# HTTP -> HTTPS
+<VirtualHost *:80>
+    ServerName ${MIOURL_API}
+
+    RewriteEngine On
+    RewriteRule ^ https://${MIOURL_API}%{REQUEST_URI} [R=301,L]
+
+    ErrorLog  /var/log/apache2/${MIOURL_API}-error.log
+    CustomLog /var/log/apache2/${MIOURL_API}-access.log combined
+</VirtualHost>
+
+# HTTPS (proxy verso backend)
+<VirtualHost *:443>
+    ServerName ${MIOURL_API}
+    ServerAdmin surya@riso.app
+
+    SSLEngine on
+    SSLCertificateFile    /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
+    Include /etc/letsencrypt/options-ssl-apache.conf
+    Protocols h2 http/1.1
+
+    ProxyPreserveHost On
+
+    # ===== SCEGLI UNO DEI DUE BLOCCHI, in base al TUO backend su ${PORTA} =====
+    # --- Backend HTTP (più comune) ---
+    # ProxyPass        / http://127.0.0.1:${PORTA}/ retry=0 timeout=310 connectiontimeout=30
+    # ProxyPassReverse / http://127.0.0.1:${PORTA}/
+
+    # --- Backend HTTPS (nel tuo caso probabile, visto l’“Empty reply” via HTTP) ---
+    SSLProxyEngine On
+    SSLProxyVerify none
+    SSLProxyCheckPeerName off
+    ProxyPass        / https://127.0.0.1:${PORTA}/ retry=0 timeout=310 connectiontimeout=30
+    ProxyPassReverse / https://127.0.0.1:${PORTA}/
+    # ==========================================================================
+
+    <Proxy *>
+        Require all granted
+    </Proxy>
+
+    ProxyTimeout 310
+    Timeout 310
+    ProxyBadHeader Ignore
+
+    ErrorLog  /var/log/apache2/${MIOURL_API}-error.log
+    CustomLog /var/log/apache2/${MIOURL_API}-access.log combined
 </VirtualHost>
--- a/docs/apache2/sites-available/websites_ssl_virtualhost_sottodomini.conf
+++ b/docs/apache2/sites-available/websites_ssl_virtualhost_sottodomini.conf
@@ -0,0 +1,92 @@
+# ==================== APEX (SITO) ====================
+# HTTP -> HTTPS
+<VirtualHost *:80>
+    ServerName ${MIODOMINIO_COMPLETO}
+
+    RewriteEngine On
+    RewriteRule ^ https://${MIODOMINIO_COMPLETO}%{REQUEST_URI} [R=301,L]
+
+    ErrorLog  /var/log/apache2/${MIODOMINIO_COMPLETO}-error.log
+    CustomLog /var/log/apache2/${MIODOMINIO_COMPLETO}-access.log combined
+</VirtualHost>
+
+# HTTPS (servizio sito - NO proxy qui)
+<VirtualHost *:443>
+    ServerName ${MIODOMINIO_COMPLETO}
+
+    DocumentRoot /var/www/${MIODOMINIO_COMPLETO}
+
+    SSLEngine on
+    SSLCertificateFile    /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
+    Include /etc/letsencrypt/options-ssl-apache.conf
+    Protocols h2 http/1.1
+
+    <Directory "/var/www/${MIODOMINIO_COMPLETO}">
+        Options Indexes FollowSymLinks
+        AllowOverride All
+        Require all granted
+    </Directory>
+
+    DirectoryIndex index.html
+
+    # (Opzionale per SPA Quasar/Vue)
+    # RewriteEngine On
+    # RewriteCond %{REQUEST_FILENAME} !-f
+    # RewriteCond %{REQUEST_FILENAME} !-d
+    # RewriteRule ^ /index.html [L]
+
+    ErrorLog  /var/log/apache2/${MIODOMINIO_COMPLETO}-error.log
+    CustomLog /var/log/apache2/${MIODOMINIO_COMPLETO}-access.log combined
+</VirtualHost>
+
+
+# ==================== API ====================
+# HTTP -> HTTPS
+<VirtualHost *:80>
+    ServerName ${MIOURL_API}
+
+    RewriteEngine On
+    RewriteRule ^ https://${MIOURL_API}%{REQUEST_URI} [R=301,L]
+
+    ErrorLog  /var/log/apache2/${MIOURL_API}-error.log
+    CustomLog /var/log/apache2/${MIOURL_API}-access.log combined
+</VirtualHost>
+
+# HTTPS (proxy verso backend)
+<VirtualHost *:443>
+    ServerName ${MIOURL_API}
+    ServerAdmin surya@riso.app
+
+    SSLEngine on
+    SSLCertificateFile    /etc/letsencrypt/live/${MIODOMINIO}/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/${MIODOMINIO}/privkey.pem
+    Include /etc/letsencrypt/options-ssl-apache.conf
+    Protocols h2 http/1.1
+
+    ProxyPreserveHost On
+
+    # ===== SCEGLI UNO DEI DUE BLOCCHI, in base al TUO backend su ${PORTA} =====
+    # --- Backend HTTP (più comune) ---
+    # ProxyPass        / http://127.0.0.1:${PORTA}/ retry=0 timeout=310 connectiontimeout=30
+    # ProxyPassReverse / http://127.0.0.1:${PORTA}/
+
+    # --- Backend HTTPS (nel tuo caso probabile, visto l’“Empty reply” via HTTP) ---
+    SSLProxyEngine On
+    SSLProxyVerify none
+    SSLProxyCheckPeerName off
+    ProxyPass        / https://127.0.0.1:${PORTA}/ retry=0 timeout=310 connectiontimeout=30
+    ProxyPassReverse / https://127.0.0.1:${PORTA}/
+    # ==========================================================================
+
+    <Proxy *>
+        Require all granted
+    </Proxy>
+
+    ProxyTimeout 310
+    Timeout 310
+    ProxyBadHeader Ignore
+
+    ErrorLog  /var/log/apache2/${MIOURL_API}-error.log
+    CustomLog /var/log/apache2/${MIOURL_API}-access.log combined
+</VirtualHost>