up

README.md

@@ -238,6 +238,23 @@ RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
 ```
 
 ```
+#PORT 80 
+<VirtualHost ruscomap.myserver:80>
+
+DocumentRoot /var/www/html/leaflet/ruscomap/public
+ServerName ruscomap.myserver
+
+ProxyPass / http://localhost:3000/
+ProxyPassReverse /  http://localhost:3000/
+
+RewriteEngine on
+RewriteCond %{HTTP:Upgrade} =websocket
+RewriteRule /(.*) ws://localhost:3000/$1 [P,L]
+
+RewriteCond %{SERVER_NAME} =ruscomap.myserver
+RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
+</VirtualHost>
+
 #443
 <VirtualHost _default_:443>
 
@@ -246,12 +263,12 @@ ServerName ruscomap.myserver
 
 Protocols h2 http/2
 
-ProxyPass / http://localhost:3232/
-ProxyPassReverse /  http://localhost:3232/
+ProxyPass / http://localhost:3000/
+ProxyPassReverse /  http://localhost:3000/
 
 RewriteEngine on
 RewriteCond %{HTTP:Upgrade} =websocket
-RewriteRule /(.*) ws://localhost:3232/$1 [P,L]
+RewriteRule /(.*) ws://localhost:3000/$1 [P,L]
 
 LogFormat "%t %h \"%r\" %>s \"%{User-Agent}i\"" custom
 
@@ -261,6 +278,12 @@ CustomLog ${APACHE_LOG_DIR}/ruscomap-access.log custom
 SSLCertificateFile /etc/letsencrypt/live/ruscomap.myserver/fullchain.pem
 SSLCertificateKeyFile /etc/letsencrypt/live/ruscomap.myserver/privkey.pem
 
+#  HSTS una settimana, per settare un anno: max-age=31536000
+Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
+
+</VirtualHost>
+
+
 ```
 ##### restarta apache
 ```