Can you proxy to another IP that only supports https

markareait · December 7, 2020, 10:07am

Is there a way to setup a .stpl and .tpl file to reverse proxy to a different server IP that only supports https?

I have managed to get reverse proxy to work to http sites with a little bit of trial and error.

For those interested I found that the “Proxy Extensions” in the web gui “Edit Web Domain” needed items like “jpeg” removed otherwise those static items would not proxy from remote server.

Note - you can not delete all item in “Proxy Extensions” otherwise is self populates again on submission, in my case I left only “exe”. You can not use something like"none" either otherwise you get strange error in other parts of Hestia.

Thank you in advance…

Raphael · December 7, 2020, 10:37am

Yes, you can create a custom template and adjust the proxy_pass:

github.com

hestiacp/hestiacp/blob/a23603548436e49bda149ab9157518124de544f3/install/deb/templates/web/nginx/default.stpl#L18


server_name %domain_idn% %alias_idn%;
ssl_certificate      %ssl_pem%;
ssl_certificate_key  %ssl_key%;
ssl_stapling on;
ssl_stapling_verify on;
error_log  /var/log/%web_system%/domains/%domain%.error.log error;
include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;
location / {
    proxy_pass      https://%ip%:%web_ssl_port%;
    location ~* ^.+\.(%proxy_extentions%)$ {
        root           %sdocroot%;
        access_log     /var/log/%web_system%/domains/%domain%.log combined;
        access_log     /var/log/%web_system%/domains/%domain%.bytes bytes;
        expires        max;
        try_files      $uri @fallback;
    }
}
location /error/ {

For custom templates follow our docs: https://docs.hestiacp.com/admin_docs/server_management.html#how-do-web-templates-work

markareait · December 7, 2020, 11:01am

Maybe you misunderstand me.

I have already created these template files (which work fine with http proxy) but after they I submit the change to use the proxy template Hestia will not proxy to the https site.

If I do a restart of nginx it will not restart until I remove that template from use. It looks like there is an issue with https://[differnet IP the Heastia]:[different port] or it is not supported.

Raphael · December 7, 2020, 11:47am

Any error message on restart? The proxy_pass value is correct and should work, doesnt matter which port or protocol.

markareait · December 7, 2020, 7:26pm

Thank you for confirming it should be working and is supported.

I tracked down syntax error in my two different template files I was testing with the help of command nginx -t . The screenshot I attached for example was missing and end “}”

Thank you for this great project.