NS7 Virtualhost page proposal going on

[davidep (Davide Principi)]

@fasttech

wordpress, joomla, etc, is the way to go.

We hope Virtual hosts page is good enough also for those use cases.

• FTP upload and permissions management
• upstream-compliant httpd config,
• Let’s Encrypt certificates

Are the main ingredients of the “Web hosting” support.

We’d like to add a MariaDB/PostgreSQL plugin for DB management. What do you think? Are we missing something important?

[filippo_carletti]

@davidep

We’d like to add a MariaDB/PostgreSQL plugin for DB management.

I think that phpMyAdmin it’s the de-facto standard tool to manage the sql database.
Some documentation could probably solve the problem of creating a database for an application.

[davidep (Davide Principi)]

@filippo_carletti

standard tool to manage the sql database

I agree it’s good for manage, but I was thinking about creating a DB and initializing an administrative account for it, like we do for FTP.

phpMyAdmin itself allows authentication based on DB accounts. Like FTP, I’d prefer DB accounts on system accounts.

Once the plugin creates the administrative account it’s safe to use it from phpMyAdmin, to generate a restricted DB account or use the administrative account itself to configure a web application… what do you think?

[WillZen (Stefan)]

@fasttech
I don’t see that wordpress, joomla, etc will be the only one to create a home page. I am working on my home page with HTML5 and CSS only.

[Walter_Schoenly]

So do we have a priority list for new features? I’m seeing S/FTP, and DB features/additions. What about the ProxyPass interface? Is that on the list any where?

[Hunv (Kristian Reukauff)]

Also keep in mind, that not everything is always running on Nethserver or Linux.
For me I primary use Nethserver as a Firewall and configured the Nethserver as a virtual host to forward the different subdomains to different servers based on Windows and Linux.
So for me this is what needs to be managed.
The advanced topic on this is to (auto-)configure SSL-Certificates. You should be able to use your own certificates or click on a button that is named “Use Let’s Encrypt” and don’t take care about certificates anymore because Nethserver is managing this.
BTW: There is also another service like Let’s Encrypt: Start Encrypt. Maybe Let’s encrypt should not be the only focus (but it would be OK for me if it is).
https://www.startssl.com/StartEncrypt

I can draw a picture how I like the interface to be, but I only know exactly the use-case I wrote above so I think I will miss all other cases when I do this.

[davidep (Davide Principi)]

@Walter_Schoenly

What about the ProxyPass interface? Is that on the list any where?

Yes! Do you want to start a new thread about it?

@Hunv

For me I primary use Nethserver as a Firewall and configured the Nethserver as a virtual host to forward the different subdomains to different servers based on Windows and Linux.

I think this is an use case for the “Proxy Pass” page. As said, it’d be distinct from Virtual hosts. Moreover , I think Proxy Pass should integrate with Docker too.

[Walter_Schoenly]

@davidep

Yes! Do you want to start a new thread about it?

I have no objections to a new thread. I just wouldn’t know how to start it off. I’m just excited that it is on the list.

[davidep (Davide Principi)]

I’m sorry, I’ve just recalled you already did it

It seems we can’t decide where to put this feature

Reverse Proxy Web Interface (Proxy Pass)

It appears that NethServer has the option of providing reverse proxy functionality via proxy pass. While I might sound lazy, I think a webgui for this functionality within the control panel of Nethserver would be helpful to allow intuitive control and reduce syntax error.

[Walter_Schoenly]

Yes, there was that as well.

[alefattorini (Alessio Fattorini)]

Do we want to separate Proxypass from Virtualhost or not? @davidep are you sure that we need a separate panel? How do other products handle this?

[davidep (Davide Principi)]

Think about a network firewall: it does not serve web sites directly nor has FTP service to upload contents, it is configured to act as reverse proxy only.

The only place where ProxyPass and VirtualHosts overlap is the virtual host name. A validator could check if a ServerName is already used by another object.

I’d like to hear about other products! Did anyone experiment them?

[alefattorini (Alessio Fattorini)]

@davidep

Think about a network firewall: it does not serve web sites directly nor has FTP service to upload contents, it is configured to act as reverse proxy only.

You had me, it looks more versatile.

[GG_jr (Gabriel GHEORGHIU)]

@davidep

It seems we can’t decide where to put this feature

@davidep

Think about a network firewall: it does not serve web sites directly nor has FTP service to upload contents, it is configured to act as reverse proxy only.

I think it must be put as separate submenu in Gateway section: Gateway → Reverse Proxy.

It’s a part of Gateway/Firewall.

Reverse proxy - Wikipedia
What Is a Reverse Proxy? | F5
Forward Proxy vs. Reverse Proxy Servers | JSCAPE

Gabriel

[alefattorini (Alessio Fattorini)]

It’s fair. So move on in that discussion.

[gerald_FS (Gerald)]

hi Guys
So I must say that the new module for virtual hosts, is very well done!

Finally works without irgenwelche adjustments phpmyadmin and wordpress.
Brilliant!

Creating virtual server orginal reinkopieren data, customize it!

Like great!

greetings
Gerald

[WillZen (Stefan)]

@gerald_FS

without irgenwelche adjustments
…
orginal reinkopieren data

Great language mix

I have this problem as well especially when I am tired and my brain works only with my mother language.

[Hunv (Kristian Reukauff)]

Hi,
yesterday and today I installed a Nethserver v7 to use the virtual Host feature.
What I really miss is the possibility to configure ProxyPass. I can configure everything that is hosted on the nethserver but the services that are on other server I still have to configure manually in the Apache configs.

Examples what I like to do using the Nethserver GUI:

<VirtualHost *:80>
    ServerName subdomain.topdomain.de
    ProxyPreserveHost On
    ProxyPass / http://10.1.0.101/
    ProxyPassReverse / http://10.1.0.101/
</VirtualHost>

and

<VirtualHost *:443>
    ServerName subdomain.topdomain.de
    ProxyPreserveHost On
    SSLEngine On
    SSLProxyEngine Off
    SSLCertificateFile /etc/httpd/conf.d/my.pem
    SSLCertificateKeyFile /etc/httpd/conf.d/my.key
    SSLCertificateChainFile /etc/httpd/conf.d/my_intermediate.pem
    SSLCACertificateFile /etc/httpd/conf.d/my_root.pem
    ProxyPass /.wellknown !
    ProxyPass / http://10.1.0.101/
    ProxyPassReverse / http://10.1.0.101/
</VirtualHost>

Basically it is just something like “forward all queries to subdomain.topdomain.de to server 10.1.0.101 on Port 80 and 443. For 443 also add a certificate”. In the 443-example the certificate is added by the proxy. The webserver itself severs it’s content to the proxy only on 80.

[filippo_carletti]

yum install nethserver-httpd-proxypass

Reverse proxy menu, in the Gateway section.

[alefattorini (Alessio Fattorini)]

We have split it into a different page as discussed below!

Reverse proxy page

The package nethserver-httpd-2.6.0-1.4.g57616ba.ns7.noarch.rpm is available from the nethserver-testing repository. It ships the new “Reverse proxy” page, that allows managing from the server manager what we used to do manually in the past. We should now update also updated the following page: http://docs.nethserver.org/en/v7b/proxy_pass.html [image] [image]

http://community.nethserver.org/t/reverse-proxy-web-interface-proxy-pass/3496/6