Updates in the setup

2018-12-21 20:21:03 +01:00 · 2018-12-21 20:21:03 +01:00 · 89a2aa15a4
commit 89a2aa15a4
parent 5a16d789a0
10 changed files with 138 additions and 545 deletions
--- a/setup/mailtrain-apache-sample.conf
+++ b/setup/mailtrain-apache-sample.conf
@ -0,0 +1,101 @@
+# This example sets up virtual domains for mailtrain protected by HTTPS (including redirect from http to https)
+# Note that you will need mod_proxy and mod_ssl modules installed and enabled
+
+# This setup assumes three DNS names:
+# - mail.example.org - public endpoint used for subscriptions, campaign images, etc.
+# - mailtrain.example.org - UI for administration and send out emails
+# - sbox.mailtrain.example.org - sandbox for templates (to prevent potential XSS attacks in templates)
+
+# It is OK to point all the three DNS entries to the same IP address
+
+# You will need to customize this for your setup. In the least, this means:
+# - replace "example.org" with your domain
+# - point to your certificate (look for /etc/letsencrypt/live/mail.example.org in the config below)
+
+<VirtualHost mail.example.org:80>
+    ServerName mail.example.org
+
+    ServerSignature Off
+
+    RewriteEngine On
+    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]
+
+    ErrorLog logs/mail.example.org_redirect_error.log
+    LogLevel warn
+</VirtualHost>
+
+<VirtualHost mailtrain.example.org:80>
+    ServerName mailtrain.example.org
+
+    ServerSignature Off
+
+    RewriteEngine On
+    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]
+
+    ErrorLog logs/mailtrain.example.org_redirect_error.log
+    LogLevel warn
+</VirtualHost>
+
+<VirtualHost sbox.mailtrain.example.org:80>
+    ServerName sbox.mailtrain.example.org
+
+    ServerSignature Off
+
+    RewriteEngine On
+    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]
+
+    ErrorLog logs/sbox.mailtrain.example.org_redirect_error.log
+    LogLevel warn
+</VirtualHost>
+
+<VirtualHost mail.example.org:443>
+    ServerName mail.example.org:443
+
+    ErrorLog logs/mail.example.org_ssl_error.log
+    TransferLog logs/mail.example.org_ssl_access.log
+    LogLevel warn
+
+    SSLEngine on
+    SSLCertificateFile /etc/letsencrypt/live/mail.example.org/cert.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/mail.example.org/privkey.pem
+    SSLCertificateChainFile /etc/letsencrypt/live/mail.example.org/chain.pem
+
+    ProxyPreserveHost On
+    ProxyPass "/" "http://127.0.0.1:3004/"
+    ProxyPassReverse "/" "http://127.0.0.1:3004/"
+</VirtualHost>
+
+<VirtualHost mailtrain.example.org:443>
+    ServerName mailtrain.example.org:443
+
+    ErrorLog logs/mailtrain.example.org_ssl_error.log
+    TransferLog logs/mailtrain.example.org_ssl_access.log
+    LogLevel warn
+
+    SSLEngine on
+    SSLCertificateFile /etc/letsencrypt/live/mail.example.org/cert.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/mail.example.org/privkey.pem
+    SSLCertificateChainFile /etc/letsencrypt/live/mail.example.org/chain.pem
+
+    ProxyPreserveHost On
+    ProxyPass "/" "http://127.0.0.1:3000/"
+    ProxyPassReverse "/" "http://127.0.0.1:3000/"
+</VirtualHost>
+
+<VirtualHost sbox.mailtrain.example.org:443>
+    ServerName sbox.mailtrain.example.org:443
+
+    ErrorLog logs/sbox.mailtrain.example.org_ssl_error.log
+    TransferLog logs/sbox.mailtrain.example.org_ssl_access.log
+    LogLevel warn
+
+    SSLEngine on
+    SSLCertificateFile /etc/letsencrypt/live/mail.example.org/cert.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/mail.example.org/privkey.pem
+    SSLCertificateChainFile /etc/letsencrypt/live/mail.example.org/chain.pem
+
+    ProxyPreserveHost On
+    ProxyPass "/" "http://127.0.0.1:3003/"
+    ProxyPassReverse "/" "http://127.0.0.1:3003/"
+</VirtualHost>
+