<VirtualHost *:80>
  # alle unbekannten hostnamen auf die Webseite weiterleiten
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  DocumentRoot /var/www/html
  RedirectMatch permanent / https://reverseproxy.et-systems.de/
</VirtualHost>
<VirtualHost *:80>
  # APplus OSTicket Schnittstelle wird lokal ausgeführt, acme zugelassen
  ServerName osticketap.et-systems.de
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  DocumentRoot /var/www/osticketap
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName reverseproxy.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://reverseproxy.et-systems.de
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName git.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://git.et-systems.de
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName mediawiki.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://mediawiki.et-systems.de
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName owncloud.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://owncloud.et-systems.de
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName onlyoffice.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://onlyoffice.et-systems.de
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName checkmk.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://checkmk.et-systems.de
</VirtualHost>
<VirtualHost *:80>
  # alle Anfragen außer acme an https weiterleiten
  ServerName engomo.et-systems.de
  DocumentRoot /var/www/html
  CustomLog ${APACHE_LOG_DIR}/access.log combined
  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://engomo.et-systems.de
</VirtualHost>
#<VirtualHost *:80>
#  # alle Anfragen außer acme an https weiterleiten
#  ServerName autodiscover.et-systems.de
#  DocumentRoot /var/www/html
#  CustomLog ${APACHE_LOG_DIR}/access.log combined
#  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://autodiscover.et-systems.de
#</VirtualHost>
#<VirtualHost *:80>
#  # alle Anfragen außer acme an https weiterleiten
#  ServerName mail.et-systems.de
#  DocumentRoot /var/www/html
#  CustomLog ${APACHE_LOG_DIR}/access.log combined
#  RedirectMatch permanent ^(?!/\.well-known/acme-challenge/[\w-]{43}$) https://mail.et-systems.de
#</VirtualHost>
<IfModule mod_ssl.c>
  <VirtualHost *:443>
    # alle unbekannten hostnamen auf die Webseite weiterleiten
    DocumentRoot /var/www/html
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/reverseproxy.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/reverseproxy.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/reverseproxy.et-systems.de.pem
    RedirectMatch permanent / https://reverseproxy.et-systems.de/
  </VirtualHost>
  <VirtualHost *:443>
    # der Server selber, auch wenn er leer ist
    ServerName reverseproxy.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    DocumentRoot /var/www/html
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/reverseproxy.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/reverseproxy.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/reverseproxy.et-systems.de.pem
  </VirtualHost>
  <VirtualHost *:443>
    # APplus OSTicket Schnittstelle wird lokal ausgeführt, acme zugelassen
    ServerName osticketap.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    DocumentRoot /var/www/osticketap
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/osticketap.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/osticketap.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/osticketap.et-systems.de.pem
  </VirtualHost>
  <VirtualHost *:443>
    ServerName git.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/git.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/git.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/git.et-systems.de.pem
    ProxyPreserveHost On
    ProxyPass / http://192.168.89.97/
    ProxyPassReverse / http://192.168.89.97/
  </VirtualHost>
  <VirtualHost *:443>
    ServerName mediawiki.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/mediawiki.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/mediawiki.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/mediawiki.et-systems.de.pem
    ProxyPreserveHost On
    ProxyPass / http://192.168.89.96/
    ProxyPassReverse / http://192.168.89.96/
  </VirtualHost>
  <VirtualHost *:443>
    ServerName owncloud.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/owncloud.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/owncloud.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/owncloud.et-systems.de.pem
    ProxyPreserveHost On
    ProxyPass / http://192.168.89.95/
    ProxyPassReverse / http://192.168.89.95/
  </VirtualHost>
  <VirtualHost *:443>
    ServerName onlyoffice.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/onlyoffice.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/onlyoffice.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/onlyoffice.et-systems.de.pem
    ProxyPreserveHost On
    ProxyPass / http://192.168.89.93/
    ProxyPassReverse / http://192.168.89.93/
    SetEnvIf Host "^(.*)$" THE_HOST=$1
    RequestHeader setifempty X-Forwarded-Proto https
    RequestHeader setifempty X-Forwarded-Host %{THE_HOST}e
    ProxyAddHeaders Off
    ProxyPassMatch (.*)(\/websocket)$ "ws://192.168.89.93/$1$2"
  </VirtualHost>
  <VirtualHost *:443>
    ServerName checkmk.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/checkmk.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/checkmk.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/checkmk.et-systems.de.pem
    ProxyPreserveHost On
    ProxyPass / http://192.168.89.98/
    ProxyPassReverse / http://192.168.89.98/
  </VirtualHost>
  <VirtualHost *:443>
    ServerName engomo.et-systems.de
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/private/engomo.et-systems.de.crt
    SSLCertificateKeyFile /etc/apache2/private/engomo.et-systems.de.key
    SSLCertificateChainFile /etc/apache2/private/engomo.et-systems.de.pem
    ProxyPass /composer/websocket ws://192.168.89.16:8080/engomo/composer/websocket
    ProxyPreserveHost On
    ProxyPass / http://192.168.89.16/
    ProxyPassReverse / http://192.168.89.16/engomo/
    ProxyPassReverseCookiePath /engomo /
    SetOutputFilter DEFLATE
  </VirtualHost>
#  <VirtualHost *:443>
#    ServerName autodiscover.et-systems.de
#    CustomLog ${APACHE_LOG_DIR}/access.log combined
#    SSLEngine on
#    SSLCertificateFile /etc/apache2/private/autodiscover.et-systems.de.crt
#    SSLCertificateKeyFile /etc/apache2/private/autodiscover.et-systems.de.key
#    SSLCertificateChainFile /etc/apache2/private/autodiscover.et-systems.de.pem
#    SSLProxyEngine On
#    ProxyPreserveHost On
#    ProxyPass / https://192.168.89.2/ connectiontimeout=1800 timeout=1800
#    ProxyPassReverse / https://192.168.89.2/
#    SSLProxyCheckPeerExpire off
#  </VirtualHost>
#  <VirtualHost *:443>
#    ServerName mail.et-systems.de
#    CustomLog ${APACHE_LOG_DIR}/access.log combined
#    SSLEngine on
#    SSLCertificateFile /etc/apache2/private/mail.et-systems.de.crt
#    SSLCertificateKeyFile /etc/apache2/private/mail.et-systems.de.key
#    SSLCertificateChainFile /etc/apache2/private/mail.et-systems.de.pem
#    SSLProxyEngine On
#    ProxyPreserveHost On
#    ProxyPass / https://192.168.89.2/ connectiontimeout=1800 timeout=1800
#    ProxyPassReverse / https://192.168.89.2/
#    SSLProxyCheckPeerExpire off
#  </VirtualHost>
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet