Hi Alex,
Maybe this bit of Apache VirtualHost magic from an production
environment I have running well help you.
RewriteEngine on
#RewriteRule ^/idp$
https://ipsilon01.example.nl/idp/ [L]
#ProxyPass "/idp/" "https://192.168.40.20/idp/"
#ProxyPassReverse "/idp/" "https://192.168.40.20/idp/"
#RedirectMatch ^/$ /idp/
#ProxyPass /idp !
ProxyPass /
https://ipsilon02.example.lan/
ProxyPassReverse /
https://ipsilon02.example.lan/
#ProxyPass "/" "https://ipsilon02.example.lan/"
#ProxyPassReverse "/" "https://ipsilon02.example.lan/"
ProxyPassReverseCookieDomain ipsilon02.example.lan ipsilon02.example.nl
RequestHeader edit Referer ^https://ipsilon02\.example\.nl/
https://ipsilon02.example.lan/
Header set Content-Security-Policy "frame-ancestors 'self'
mail.example.org;"
Kind regards,
Jelle de Jong
On 3/11/23 14:01, Alex Corcoles wrote:
> Hi!
>
> I was running an Ipsilon instance on EL7, connected to FreeIPA. I am migrating away
from EL7 to newer versions of EL. After migrating FreeIPA from EL7 to EL9, I'm
tackling Ipsilon.
>
> I was happy to see the new EPEL 8 packages, and the work to package it for EPEL
9[1].
>
> I'm getting started in deploying it to EL8, and I'm facing some issues.
>
> First, some of the docs had me stumbling for a bit. I submitted a patch here[2], so
hopefully that's good. However, now I'm trying to set up a reverse proxy(3), and
I'm finding a different issue[4]. Currently, when accessing Ipsilon through the
reverse proxy, I am redirected to the real FQDN of the hostname.
>
> I have done some Python web development, so I could try to send another patch- but
before starting work on that I'd like to know if someone's running Ipsilon behind
a reverse proxy successfully (so I'm doing something wrong), if the patch would be
accepted (the doc patch is still pending, although I did submit it very recently), etc.
>
> Thanks!
>
> Álex
>
> [1]
https://bugzilla.redhat.com/show_bug.cgi?id=2154170
> [2]
https://pagure.io/ipsilon/issue/387
> (3) I'm running this on Proxmox, and I don't really want to acquire public
IPv4 addresses.
> [4]
https://pagure.io/ipsilon/issue/388
>
> p.s. I think Ipsilon is a bit underrated- the FreeIPA support, RPM availability, etc.
make it much more suitable for my use case than Keycloak. I think it's just that
FreeIPA and Ipsilon are not well-known enough, but with more awareness, they are pretty
attractive!
> _______________________________________________
> ipsilon mailing list -- ipsilon(a)lists.fedorahosted.org
> To unsubscribe send an email to ipsilon-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/ipsilon@lists.fedorahosted.org
> Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue