From d636f9ba67e0e5f6c25657987193be8831b1e385 Mon Sep 17 00:00:00 2001 From: Unrud Date: Sat, 21 Apr 2018 10:17:08 +0200 Subject: [PATCH] Apache example: split into two examples --- proxy.md | 26 +++++++++++++++++++------- 1 file changed, 19 insertions(+), 7 deletions(-) diff --git a/proxy.md b/proxy.md index 4f5a397f..a8171b87 100644 --- a/proxy.md +++ b/proxy.md @@ -18,21 +18,15 @@ location /radicale/ { # The trailing / is important! } ``` -Example **Apache** configuration using front end authentication: +Example **Apache** configuration: ```apache RewriteEngine On RewriteRule ^/radicale$ /radicale/ [R,L] - AuthType Basic - AuthName "Radicale - Password Required" - AuthUserFile "/etc/radicale/htpasswd" - Require valid-user - ProxyPass http://localhost:5232/ retry=0 ProxyPassReverse http://localhost:5232/ RequestHeader set X-Script-Name /radicale/ - RequestHeader set X-Remote-User expr=%{REMOTE_USER} ``` @@ -59,6 +53,24 @@ location /radicale/ { } ``` +Example **Apache** configuration: +```apache +RewriteEngine On +RewriteRule ^/radicale$ /radicale/ [R,L] + + + AuthType Basic + AuthName "Radicale - Password Required" + AuthUserFile "/etc/radicale/htpasswd" + Require valid-user + + ProxyPass http://localhost:5232/ retry=0 + ProxyPassReverse http://localhost:5232/ + RequestHeader set X-Script-Name /radicale/ + RequestHeader set X-Remote-User expr=%{REMOTE_USER} + +``` + **Security:** Untrusted clients should not be able to access the Radicale server directly. Otherwise, they can authenticate as any user.