search

outroll / vesta

VESTA Control Panel
http://vestacp.com
GNU General Public License v3.0
2.93k stars 1.02k forks source link

Broken shttpd.conf with apache-tomcat proxy section after renew LE sert #1329

Open piatachki opened 6 years ago

piatachki commented 6 years ago

Operating System (OS/VERSION):

CentOS 6.9

VestaCP Version:

0.9.8 (x86_64) R17

Installed Software (what you got with the installer):

apache, nginx, mysql, jdk

Steps to Reproduce:

Set up web domain, add Let'sEncrypt Sert to domain, add section to proxy apache tomcat from 8600 port (for.ex) to 80. 3 month after when update sert is coming updater broke shttpd.conf and apache can't restart.

Other Notes:

shttpd.conf before sert update:

<VirtualHost 91.218.230.33:8443>

    ServerName st.bankmeister.ru
    ServerAlias st.bankmeister.ru
    ServerAdmin info@st.bankmeister.ru
    DocumentRoot /home/bankmeister/web/st.bankmeister.ru/public_html
    ScriptAlias /cgi-bin/ /home/bankmeister/web/st.bankmeister.ru/cgi-bin/
    Alias /vstats/ /home/bankmeister/web/st.bankmeister.ru/stats/
    Alias /error/ /home/bankmeister/web/st.bankmeister.ru/document_errors/
    #SuexecUserGroup bankmeister bankmeister
    CustomLog /var/log/httpd/domains/st.bankmeister.ru.bytes bytes
    CustomLog /var/log/httpd/domains/st.bankmeister.ru.log combined
    ErrorLog /var/log/httpd/domains/st.bankmeister.ru.error.log
    <Directory /home/bankmeister/web/st.bankmeister.ru/public_html>
        AllowOverride All
        SSLRequireSSL
        Options +Includes -Indexes +ExecCGI
        php_admin_value open_basedir /home/bankmeister/web/st.bankmeister.ru/public_html:/home/bankmeister/tmp
        php_admin_value upload_tmp_dir /home/bankmeister/tmp
        php_admin_value session.save_path /home/bankmeister/tmp
    </Directory>
    <Directory /home/bankmeister/web/st.bankmeister.ru/stats>
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /home/bankmeister/conf/web/ssl.st.bankmeister.ru.crt
    SSLCertificateKeyFile /home/bankmeister/conf/web/ssl.st.bankmeister.ru.key
    SSLCertificateChainFile /home/bankmeister/conf/web/ssl.st.bankmeister.ru.ca

    <IfModule mod_ruid2.c>
        RMode config
        RUidGid bankmeister bankmeister
        RGroups apache
    </IfModule>
    <IfModule itk.c>
        AssignUserID bankmeister bankmeister
    </IfModule>

    Include /home/bankmeister/conf/web/shttpd.st.bankmeister.ru.conf*

</VirtualHost>

<VirtualHost 91.218.230.33:8443>

    ServerName crdp.ru

    ServerAdmin info@crdp.ru
    DocumentRoot /home/bankmeister/web/crdp.ru/public_html
    ScriptAlias /cgi-bin/ /home/bankmeister/web/crdp.ru/cgi-bin/
    Alias /vstats/ /home/bankmeister/web/crdp.ru/stats/
    Alias /error/ /home/bankmeister/web/crdp.ru/document_errors/
    #SuexecUserGroup bankmeister bankmeister
    CustomLog /var/log/httpd/domains/crdp.ru.bytes bytes
    CustomLog /var/log/httpd/domains/crdp.ru.log combined
    ErrorLog /var/log/httpd/domains/crdp.ru.error.log
    <Directory /home/bankmeister/web/crdp.ru/public_html>
        AllowOverride All
        SSLRequireSSL
        Options +Includes -Indexes +ExecCGI
        php_admin_value open_basedir /home/bankmeister/web/crdp.ru/public_html:/home/bankmeister/tmp
        php_admin_value upload_tmp_dir /home/bankmeister/tmp
        php_admin_value session.save_path /home/bankmeister/tmp
    </Directory>
    <Directory /home/bankmeister/web/crdp.ru/stats>
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /home/bankmeister/conf/web/ssl.crdp.ru.crt
    SSLCertificateKeyFile /home/bankmeister/conf/web/ssl.crdp.ru.key
    SSLCertificateChainFile /home/bankmeister/conf/web/ssl.crdp.ru.ca

    <IfModule mod_ruid2.c>
        RMode config
        RUidGid bankmeister bankmeister
        RGroups apache
    </IfModule>
    <IfModule itk.c>
        AssignUserID bankmeister bankmeister
    </IfModule>

    Include /home/bankmeister/conf/web/shttpd.crdp.ru.conf*

</VirtualHost>

<VirtualHost 91.218.230.33:8443>

    ServerName bankmeister.ru

    ServerAdmin info@bankmeister.ru
    DocumentRoot /home/bankmeister/web/bankmeister.ru/public_html
    ScriptAlias /cgi-bin/ /home/bankmeister/web/bankmeister.ru/cgi-bin/
    Alias /vstats/ /home/bankmeister/web/bankmeister.ru/stats/
    Alias /error/ /home/bankmeister/web/bankmeister.ru/document_errors/
    #SuexecUserGroup bankmeister bankmeister
    CustomLog /var/log/httpd/domains/bankmeister.ru.bytes bytes
    CustomLog /var/log/httpd/domains/bankmeister.ru.log combined
    ErrorLog /var/log/httpd/domains/bankmeister.ru.error.log
    <Directory /home/bankmeister/web/bankmeister.ru/public_html>
        AllowOverride All
        SSLRequireSSL
        Options +Includes -Indexes +ExecCGI
        php_admin_value open_basedir /home/bankmeister/web/bankmeister.ru/public_html:/home/bankmeister/tmp
        php_admin_value upload_tmp_dir /home/bankmeister/tmp
        php_admin_value session.save_path /home/bankmeister/tmp
    </Directory>
    <Directory /home/bankmeister/web/bankmeister.ru/stats>
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /home/bankmeister/conf/web/ssl.bankmeister.ru.crt
    SSLCertificateKeyFile /home/bankmeister/conf/web/ssl.bankmeister.ru.key
    SSLCertificateChainFile /home/bankmeister/conf/web/ssl.bankmeister.ru.ca

    <IfModule mod_ruid2.c>
        RMode config
        RUidGid bankmeister bankmeister
        RGroups apache
    </IfModule>
    <IfModule itk.c>
        AssignUserID bankmeister bankmeister
    </IfModule>

    Include /home/bankmeister/conf/web/shttpd.bankmeister.ru.conf*

    ProxyPreserveHost on
    ProxyPass "/" "http://bankmeister.ru:8600" nocanon
    ProxyPassReverse "/" "http://bankmeister.ru:8600"
    AllowEncodedSlashes On

</VirtualHost>

and those file after update

    ProxyPassReverse "/" "http://bankmeister.ru:8600"
    AllowEncodedSlashes On

</VirtualHost>

<VirtualHost 91.218.230.33:8443>

    ServerName st.bankmeister.ru
    ServerAlias st.bankmeister.ru
    ServerAdmin info@st.bankmeister.ru
    DocumentRoot /home/bankmeister/web/st.bankmeister.ru/public_html
    ScriptAlias /cgi-bin/ /home/bankmeister/web/st.bankmeister.ru/cgi-bin/
    Alias /vstats/ /home/bankmeister/web/st.bankmeister.ru/stats/
    Alias /error/ /home/bankmeister/web/st.bankmeister.ru/document_errors/
    #SuexecUserGroup bankmeister bankmeister
    CustomLog /var/log/httpd/domains/st.bankmeister.ru.bytes bytes
    CustomLog /var/log/httpd/domains/st.bankmeister.ru.log combined
    ErrorLog /var/log/httpd/domains/st.bankmeister.ru.error.log
    <Directory /home/bankmeister/web/st.bankmeister.ru/public_html>
        AllowOverride All
        SSLRequireSSL
        Options +Includes -Indexes +ExecCGI
        php_admin_value open_basedir /home/bankmeister/web/st.bankmeister.ru/public_html:/home/bankmeister/tmp
        php_admin_value upload_tmp_dir /home/bankmeister/tmp
        php_admin_value session.save_path /home/bankmeister/tmp
    </Directory>
    <Directory /home/bankmeister/web/st.bankmeister.ru/stats>
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /home/bankmeister/conf/web/ssl.st.bankmeister.ru.crt
    SSLCertificateKeyFile /home/bankmeister/conf/web/ssl.st.bankmeister.ru.key
    SSLCertificateChainFile /home/bankmeister/conf/web/ssl.st.bankmeister.ru.ca

    <IfModule mod_ruid2.c>
        RMode config
        RUidGid bankmeister bankmeister
        RGroups apache
    </IfModule>
    <IfModule itk.c>
        AssignUserID bankmeister bankmeister
    </IfModule>

    Include /home/bankmeister/conf/web/shttpd.st.bankmeister.ru.conf*

</VirtualHost>

<VirtualHost 91.218.230.33:8443>

    ServerName crdp.ru

    ServerAdmin info@crdp.ru
    DocumentRoot /home/bankmeister/web/crdp.ru/public_html
    ScriptAlias /cgi-bin/ /home/bankmeister/web/crdp.ru/cgi-bin/
    Alias /vstats/ /home/bankmeister/web/crdp.ru/stats/
    Alias /error/ /home/bankmeister/web/crdp.ru/document_errors/
    #SuexecUserGroup bankmeister bankmeister
    CustomLog /var/log/httpd/domains/crdp.ru.bytes bytes
    CustomLog /var/log/httpd/domains/crdp.ru.log combined
    ErrorLog /var/log/httpd/domains/crdp.ru.error.log
    <Directory /home/bankmeister/web/crdp.ru/public_html>
        AllowOverride All
        SSLRequireSSL
        Options +Includes -Indexes +ExecCGI
        php_admin_value open_basedir /home/bankmeister/web/crdp.ru/public_html:/home/bankmeister/tmp
        php_admin_value upload_tmp_dir /home/bankmeister/tmp
        php_admin_value session.save_path /home/bankmeister/tmp
    </Directory>
    <Directory /home/bankmeister/web/crdp.ru/stats>
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /home/bankmeister/conf/web/ssl.crdp.ru.crt
    SSLCertificateKeyFile /home/bankmeister/conf/web/ssl.crdp.ru.key
    SSLCertificateChainFile /home/bankmeister/conf/web/ssl.crdp.ru.ca

    <IfModule mod_ruid2.c>
        RMode config
        RUidGid bankmeister bankmeister
        RGroups apache
    </IfModule>
    <IfModule itk.c>
        AssignUserID bankmeister bankmeister
    </IfModule>

    Include /home/bankmeister/conf/web/shttpd.crdp.ru.conf*

</VirtualHost>

<VirtualHost 91.218.230.33:8443>

    ServerName bankmeister.ru

    ServerAdmin info@bankmeister.ru
    DocumentRoot /home/bankmeister/web/bankmeister.ru/public_html
    ScriptAlias /cgi-bin/ /home/bankmeister/web/bankmeister.ru/cgi-bin/
    Alias /vstats/ /home/bankmeister/web/bankmeister.ru/stats/
    Alias /error/ /home/bankmeister/web/bankmeister.ru/document_errors/
    #SuexecUserGroup bankmeister bankmeister
    CustomLog /var/log/httpd/domains/bankmeister.ru.bytes bytes
    CustomLog /var/log/httpd/domains/bankmeister.ru.log combined
    ErrorLog /var/log/httpd/domains/bankmeister.ru.error.log
    <Directory /home/bankmeister/web/bankmeister.ru/public_html>
        AllowOverride All
        SSLRequireSSL
        Options +Includes -Indexes +ExecCGI
        php_admin_value open_basedir /home/bankmeister/web/bankmeister.ru/public_html:/home/bankmeister/tmp
        php_admin_value upload_tmp_dir /home/bankmeister/tmp
        php_admin_value session.save_path /home/bankmeister/tmp
    </Directory>
    <Directory /home/bankmeister/web/bankmeister.ru/stats>
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLVerifyClient none
    SSLCertificateFile /home/bankmeister/conf/web/ssl.bankmeister.ru.crt
    SSLCertificateKeyFile /home/bankmeister/conf/web/ssl.bankmeister.ru.key
    SSLCertificateChainFile /home/bankmeister/conf/web/ssl.bankmeister.ru.ca

    <IfModule mod_ruid2.c>
        RMode config
        RUidGid bankmeister bankmeister
        RGroups apache
    </IfModule>
    <IfModule itk.c>
        AssignUserID bankmeister bankmeister
    </IfModule>

    Include /home/bankmeister/conf/web/shttpd.bankmeister.ru.conf*

</VirtualHost>
piatachki commented 6 years ago

Also on firstly adding ssl to web domain with ProxyPass directive