81 lines
3.2 KiB
Plaintext
81 lines
3.2 KiB
Plaintext
# =============================================================================
|
|
# Zoraxy - Configuration reverse proxy pour photomaton
|
|
# =============================================================================
|
|
# Installation: ~/zoraxy/
|
|
# Config: ~/zoraxy/conf/proxy/
|
|
# Admin panel: http://127.0.0.1:5487 (localhost only)
|
|
# =============================================================================
|
|
#
|
|
# ROLE DE ZORAXY:
|
|
# - Reverse proxy HTTPS devant tous les services
|
|
# - Gestion des certificats TLS
|
|
# - Necessaire pour le QR code (HTTPS requis sur mobile)
|
|
#
|
|
# PORTS ZORAXY:
|
|
# 80 : HTTP (redirect -> HTTPS)
|
|
# 443 : HTTPS (reverse proxy)
|
|
# 5487 : Admin panel (localhost only)
|
|
# 8001 : Admin panel (expose via sous-domaine)
|
|
#
|
|
# =============================================================================
|
|
# PROXIES CONFIGURES
|
|
# =============================================================================
|
|
#
|
|
# 1. photomaton.lessapinsduweb.com -> 127.0.0.1:8083 (photobooth-app)
|
|
# - WebSocket: OUI (EnableWebsocketCustomHeaders: true)
|
|
# - ChunkedTransfer: DESACTIVE (necessaire pour photobooth-app)
|
|
# - C'est le proxy principal pour les utilisateurs
|
|
#
|
|
# 2. photomaton-nodered.lessapinsduweb.com -> 127.0.0.1:1880 (Node-RED)
|
|
# - Dashboard admin impression
|
|
# - Acces: auth propre a Node-RED
|
|
#
|
|
# 3. photomaton-raspap.lessapinsduweb.com -> 127.0.0.1:8082 (RaspAP/lighttpd)
|
|
# - Config WiFi
|
|
# - Acces: auth propre a RaspAP
|
|
#
|
|
# 4. photomaton-zoraxy.lessapinsduweb.com -> 127.0.0.1:8001 (Zoraxy admin)
|
|
# - Admin du reverse proxy lui-meme
|
|
# - Acces: auth propre a Zoraxy
|
|
#
|
|
# =============================================================================
|
|
# ARCHITECTURE RESEAU COMPLETE
|
|
# =============================================================================
|
|
#
|
|
# [Telephone utilisateur]
|
|
# |
|
|
# | WiFi "Photomaton" (RaspAP, dnsmasq :53)
|
|
# v
|
|
# [Zoraxy :443 HTTPS]
|
|
# |
|
|
# +-- photomaton.lessapinsduweb.com ---------> photobooth-app :8083
|
|
# +-- photomaton-nodered.lessapinsduweb.com -> Node-RED :1880
|
|
# +-- photomaton-raspap.lessapinsduweb.com --> lighttpd/RaspAP :8082
|
|
# +-- photomaton-zoraxy.lessapinsduweb.com --> Zoraxy admin :8001
|
|
#
|
|
# Services locaux (non proxies):
|
|
# - CUPS :631 (impression, acces local)
|
|
# - uvicorn :8081 (API backend RaspAP, /etc/raspap/api/)
|
|
# - Zoraxy admin :5487 (localhost only)
|
|
# - SSH :22
|
|
# - rpcbind :111 (INUTILE - a desactiver)
|
|
#
|
|
# =============================================================================
|
|
# NOTES IMPORTANTES
|
|
# =============================================================================
|
|
#
|
|
# - DisableChunkedTransferEncoding: true sur photomaton.lessapinsduweb.com
|
|
# C'est necessaire pour que le livestream photobooth fonctionne correctement
|
|
#
|
|
# - SkipCertValidations: true sur photomaton.lessapinsduweb.com
|
|
# Parce que l'upstream est en HTTP, pas HTTPS
|
|
#
|
|
# - Tous les sous-domaines resolvent vers la meme IP (le Pi)
|
|
# via dnsmasq de RaspAP
|
|
#
|
|
# - rpcbind sur le port 111 est inutile et peut etre desactive:
|
|
# sudo systemctl disable rpcbind.service rpcbind.socket
|
|
# sudo systemctl stop rpcbind.service rpcbind.socket
|
|
#
|
|
# =============================================================================
|