From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: mail.toke.dk; spf=pass (mailfrom) smtp.mailfrom=skoll.ca (client-ip=144.217.161.9; helo=dianne.skoll.ca; envelope-from=dianne@skoll.ca; receiver=) Authentication-Results: mail.toke.dk; dkim=pass (2048-bit key; secure) header.d=skoll.ca header.i=@skoll.ca header.a=rsa-sha256 header.s=canit2 header.b=x7cTCEqs Received: from dianne.skoll.ca (dianne.skoll.ca [144.217.161.9]) by mail.toke.dk (Postfix) with ESMTPS id 49D8CA58D8E for ; Sun, 3 Mar 2024 16:30:10 +0100 (CET) Received: from pi4.skoll.ca ([192.168.84.18]) by dianne.skoll.ca (8.17.1.9/8.17.1.9/Debian-2) with ESMTP id 423FU8Sp148955 for ; Sun, 3 Mar 2024 10:30:08 -0500 Received: from gato.skoll.ca (gato.skoll.ca [192.168.83.21]) by pi4.skoll.ca (Postfix) with ESMTPS id 4Tnm3h0rZgzgd52W for ; Sun, 3 Mar 2024 10:30:08 -0500 (EST) Date: Sun, 3 Mar 2024 10:30:06 -0500 From: Dianne Skoll To: galene@lists.galene.org Message-ID: <20240303103006.2fe79336@gato.skoll.ca> In-Reply-To: <87r0grfikb.wl-jch@irif.fr> References: <87jzmursig.wl-jch@irif.fr> <87o7c5purn.wl-jch@irif.fr> <87msrppqos.wl-jch@irif.fr> <87jzmtpkyh.wl-jch@irif.fr> <87il2dpjex.wl-jch@irif.fr> <87frxg7qb3.wl-jch@irif.fr> <87r0grfikb.wl-jch@irif.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=skoll.ca; h=date :from:to:subject:message-id:in-reply-to:references:mime-version :content-type:content-transfer-encoding; s=canit2; bh=NjTnkMocv5 zkejorFeb51Ka0+V8tHg2fQO6+jxE/09o=; b=x7cTCEqsozBT9zFYiHAsHEemnE GiP2Xju1KRUSn08gzVI8S5rYs9XehXieZgd8nMyd1pZvAYK6uT7/AiGEXNJAH0W7 TDmRkfI0mXTjM6ANir7p/OEe2Um4K13fyRBsPCZPDTNQjMTzjxHHJMczmAN5RSFW 8w/fRI9I7ZYYc5HklOvRCEC8TO+SUhttuEia+BplwAuKrETjd+KeQINKQSgv2STG iRkfdixfNoCk+vo10UuR0AE80+tWb3J3arG/up8ifWsZGqn0L6TD+IA5I4zrJD3c g5CneGqy5RPoxqDsyBLat/mdygvAepixnO+9JmsRE9QA1tmVMhwvtJsFW0Og== X-Scanned-By: CanIt (www . roaringpenguin . com) X-Scanned-By: mailmunge 3.16 on 192.168.83.18 X-Spam-Score: undef - relay 192.168.84.18 marked with skip_spam_scan X-CanIt-Geo: No geolocation information available for 192.168.84.18 X-CanItPRO-Stream: outbound (inherits from default) X-Canit-Stats-ID: Bayes signature not available X-CanIt-Archive-Cluster: tWKWaF/NcZkqjWIj0BEJTBHJhwY X-CanIt-Archived-As: base/20240303 / 01bSfu817 Message-ID-Hash: 2F2MVZBH5KPRP4MVGIET6H364E4S2G32 X-Message-ID-Hash: 2F2MVZBH5KPRP4MVGIET6H364E4S2G32 X-MailFrom: dianne@skoll.ca X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9 Precedence: list Subject: [Galene] Re: Behind reverse proxy, not at the root List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: On Sun, 03 Mar 2024 16:20:36 +0100 Juliusz Chroboczek wrote: > The obvious solution would be to make these pages dynamically > generated, but that in turn would make it difficult for people to > customise them as they wish. Since I think that allowing easy > customisation is more important than making Galene easy to use with > reverse proxies, I haven't done that. I think if you replace all links of the form: href="/whatever/the/link/is" with: href="%WEBROOT%/whatever/the/link/is" it wouldn't hurt customizability very much. Of course, you then have the cost of running all the pages through a filter to replace %WEBROOT% with either the empty string for the default case or the prefix if Galene is not installed under /. Maybe it's not worth it. Setting up virtual hosts is easy and LetsEncrypt gives out free wildcard certs, so IMO it's better to use a dedicated hostname for Galene. Regards, Dianne.