From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: mail.toke.dk; spf=pass (mailfrom) smtp.mailfrom=webweaving.org (client-ip=148.251.234.232; helo=weser.webweaving.org; envelope-from=dirkx@webweaving.org; receiver=) Authentication-Results: mail.toke.dk; dkim=pass (1024-bit key; unprotected) header.d=webweaving.org header.i=@webweaving.org header.a=rsa-sha256 header.s=shared header.b=Xg8RkwD8 Received: from weser.webweaving.org (weser.webweaving.org [148.251.234.232]) by mail.toke.dk (Postfix) with ESMTPS id 4DEF5A58DE2 for ; Sun, 3 Mar 2024 17:07:27 +0100 (CET) Received: from smtpclient.apple (fiber.static.cbizz.nl [185.142.248.117] (may be forged)) (authenticated bits=0) by weser.webweaving.org (8.17.1/8.17.1) with ESMTPA id 423G4FWi028114 for ; Sun, 3 Mar 2024 17:04:56 +0100 (CET) (envelope-from dirkx@webweaving.org) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=webweaving.org; s=shared; t=1709481896; bh=lKyAkDfB4ZkrCBJT3j/bdSx64b0Tcz1gaZBJDZiX9Fg=; h=Subject:From:Resent-From:In-Reply-To:Date:Resent-Date:Resent-To: References:To; b=Xg8RkwD8ELFJN2I/ddx+5LL8cWC+XusPrq7rqbyS/8+ehqawD9dW5rPAt6w3PStLg PXYsiO4dh4fDP6ZXONbtgl5viUSUDG4/7HQL0b2DCLnD5ECYxBC58kaoquI6dE66k5 qXLH1IvIDvTR1SYavvYdH8YlOmZUrfT/K+S4c5ms= Resent-Message-Id: <202403031604.423G4FWi028114@weser.webweaving.org> X-Authentication-Warning: weser.webweaving.org: Host fiber.static.cbizz.nl [185.142.248.117] (may be forged) claimed to be smtpclient.apple Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.400.31\)) Content-Type: text/plain; charset=utf-8 From: Dirk-Willem van Gulik Resent-From: Dirk-Willem van Gulik In-Reply-To: <170947981403.1000.17286547855683116289@gauss.local> Date: Sun, 3 Mar 2024 17:04:14 +0100 Content-Transfer-Encoding: quoted-printable Resent-Date: Sun, 3 Mar 2024 17:04:56 +0100 Message-Id: <7940BE01-0345-41E5-BAAD-C11A9E579690@webweaving.org> Resent-To: galene@lists.galene.org References: <87jzmursig.wl-jch@irif.fr> <87o7c5purn.wl-jch@irif.fr> <87msrppqos.wl-jch@irif.fr> <87jzmtpkyh.wl-jch@irif.fr> <87il2dpjex.wl-jch@irif.fr> <87frxg7qb3.wl-jch@irif.fr> <87r0grfikb.wl-jch@irif.fr> <170947981403.1000.17286547855683116289@gauss.local> To: Dianne Skoll X-Mailer: Apple Mail (2.3774.400.31) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (weser.webweaving.org [148.251.234.232]); Sun, 03 Mar 2024 17:04:56 +0100 (CET) Message-ID-Hash: MTMT4B3MNRQ4UTFSQ7G3TXLZTQPY42JN X-Message-ID-Hash: MTMT4B3MNRQ4UTFSQ7G3TXLZTQPY42JN X-MailFrom: dirkx@webweaving.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9 Precedence: list Subject: [Galene] Re: Behind reverse proxy, not at the root List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: On 3 Mar 2024, at 16:30, Dianne Skoll via Galene = wrote: > On Sun, 03 Mar 2024 16:20:36 +0100 Juliusz Chroboczek = wrote: >=20 >> The obvious solution would be to make these pages dynamically >> generated, but that in turn would make it difficult for people to >> customise them as they wish. Since I think that allowing easy >> customisation is more important than making Galene easy to use with >> reverse proxies, I haven't done that. ... > href=3D"%WEBROOT%/whatever/the/link/is=E2=80=9D Alternatively - given that, if one drops the leading =E2=80=98/=E2=80=98 = on src/href all these links end up being, I think, of the style https://galene.domain.com/PREFIX/group//=E2=80=A6. Such as for the group =E2=80=9CWw": https://galene.domain.com/PREFIX/group/Ww/galene.js = https://galene.domain.com/PREFIX/group/Ww/external/fontawesome/css/regular= .min.css Mapped in general from https://galene.domain.com/PREFIX(.*) to http://127.0.0.1:8888/$1; Where 127.0.0.1:8888 is what is the ' -http 127.0.0.1:8888 =E2=80=98 arg = of Galene says. So we just strip =E2=80=98PREFIX=E2=80=99 here. With = only a few exemptions from that rule for: https://galene.domain.com/PREFIX/ws (websocket only) https://galene.domain.com/PREFIX/group/Ww/ (as is) https://galene.domain.com/PREFIX/group/Ww/.status.json That need to be mapped routed to their original places. This works well = enough for me against Freebsd-ports and an apache/nginx (TLS stripping, = reverse proxy) to Jail (galena, http) setting. And with below =E2=80=98jus= t strip out the /=E2=80=98 approach. I think it only breaks in one place = =E2=80=94 at the 404 not found that wants to send you to the root. That may be an easy thing to add to galene perhaps. With kind regards, Dw. diff -r galene.old/404.html galene/404.html 7,8c7,8 < < --- > > 10,12c10,12 < < < --- > > > 25c25 < Back to home --- > diff -r galene.old/galene.html galene/galene.html 8,9c8,9 < < --- > > 11,15c11,15 < < < < < --- > > > > > 299,302c299,302 < < < < --- > > > > diff -r galene.old/index.html galene/index.html 7,9c7,9 < < < --- > > > 36c36 < --- > diff -r galene.old/stats.html galene/stats.html 7c7 < --- > 15c15 < --- >