Ниже приведены мои настройки
Код: Выделить всё
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
Header always unset Server
Header unset Server
Header set Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' 'unsafe-inline' https: data:; style-src 'self' 'unsafe-inline' https://${DNSNAME}:${SSL_PORT}; script-src 'self' 'unsafe-inline' https://${DNSNAME}:${SSL_PORT}; connect-src 'self' https://${DNSNAME}:${SSL_PORT}; frame-src 'self' https://${DNSNAME}:${SSL_PORT}; frame-ancestors 'self';"
Header set X-Content-Type-Options nosniff
Header set Cache-Control "no-cache"
Header always set X-XSS-Protection "1; mode=block"
Header set X-Frame-Options SAMEORIGIN
# Uncomment this line to enable ssl
SSLEngine on
SSLCertificateFile "${SSL_CERTIFICATE_FILE_PATH}"
SSLCertificateKeyFile "${SSL_CERTIFICATE_KEY_PATH}"
ServerName "${SRVNAME}"
ServerAlias "${DNSNAME}"
SSLProxyEngine on
ProxyRequests Off
RewriteEngine On
ProxyTimeout ${PROXY_PASS_TIMEOUT}
LogLevel ${LOG_LEVEL}
# ...... here are other rewrite conditions
# that does filtering request based on http verb and query string
# This does not set X-Forwarded-For header
RewriteRule ^(/api/(test)(.*))$ balancer://my_server$1 [P,NC]
# This does set X-Forwarded-For header
ProxyPass balancer://api/another_test
ProxyPassReverse balancer://api/another_test
BalancerMember "${SERVER_LOCATION}"
Использование apache 2.4.57
Подробнее здесь: https://stackoverflow.com/questions/781 ... -proxypass