Try this also see a version of it in a text format attached in case of 
copying of this thread will develop hidden characters :

1) Settings in dspace.cfg or local.cfg:
dspace.server.url = https://dspace.umiz.at/server
dspace.ui.url = https://dspace.umiz.at
solr.server = http://localhost:8983/solr

2) Settings in config.prod.yml:
ui:
  ssl: false  
  host: localhost
  port: 4000
  nameSpace: /

rest:
  ssl: true
  host: dspace.umiz.at
  port: 443
  nameSpace: /server

3) a2enmod proxy_http proxy_html ssl headers
4) a2dissite 000-default default-ssl
5) vi /etc/apache2/sites-available/dspace.conf
<VirtualHost *:80>
     ServerName dspace.umiz.at
     Redirect / https://dspace.umiz.at
</VirtualHost>

<VirtualHost *:443>
     ServerName dspace.umiz.at
     LogLevel warn
     ErrorLog ${APACHE_LOG_DIR}/dspace.umiz.at.error.log
     CustomLog ${APACHE_LOG_DIR}/dspace.umiz.at.access.log combined
     ProxyRequests on
     SSLEngine on
     SSLProxyEngine on
     SSLCertificateFile /etc/letsencrypt/live/dspace.umiz.at/fullchain.pem
     SSLCertificateKeyFile /etc/letsencrypt/live/dspace.umiz.at/privkey.pem
     SSLCompression off
     SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
     SSLCipherSuite         
 
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
     SSLHonorCipherOrder     off
     SSLSessionTickets       off
     ProxyPreserveHost on
     RequestHeader set X-Forwarded-Proto https
     #ProxyPass /location-to-be-excluded !

   <Proxy *>
       AddDefaultCharset Off
       Require all granted
   </Proxy>

     ProxyPass /server http://localhost:8080/server
     ProxyPassReverse /server http://localhost:8080/server
     #Solr settings is here for testing only. You shouldn't permanantly 
enable solr to be accessed from the outside. If you do cores can be 
removed/modified/addedd because dspace doesn't support protected solr. 
     #ProxyPass /solr http://localhost:8983/
     #ProxyPassReverse /solr http://localhost:8983/
     ProxyPass / http://localhost:4000/
     ProxyPassReverse / http://localhost:4000/

</VirtualHost>

6) a2ensite dspace.conf
7) ufw allow 'OpenSSH'
8) ufw allow 'Apache Full'
9) ufw enable
10) ufw status
11) systemctl restart apache2

On Monday, March 14, 2022 at 2:31:10 PM UTC+3 wolfgang t. wrote:

> I just did see that the following cookies which are present in the demo 
> site, are not present when i open my site:
> XSRF-TOKEN
> klaro-anonymous
>
>

-- 
All messages to this mailing list should adhere to the Code of Conduct: 
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/dspace-tech/c48f522e-0df4-4789-b629-0ebf8aab3f48n%40googlegroups.com.
1) Settings in dspace.cfg or local.cfg:
dspace.server.url = https://dspace.umiz.at/server
dspace.ui.url = https://dspace.umiz.at
solr.server = http://localhost:8983/solr

2) Settings in config.prod.yml:
ui:
  ssl: false  
  host: localhost
  port: 4000
  nameSpace: /

rest:
  ssl: true
  host: dspace.umiz.at
  port: 443
  nameSpace: /server

3) a2enmod proxy_http proxy_html ssl headers
4) a2dissite 000-default default-ssl
5) vi /etc/apache2/sites-available/dspace.conf
<VirtualHost *:80>
     ServerName dspace.umiz.at
     Redirect / https://dspace.umiz.at
</VirtualHost>

<VirtualHost *:443>
     ServerName dspace.umiz.at
     LogLevel warn
     ErrorLog ${APACHE_LOG_DIR}/dspace.umiz.at.error.log
     CustomLog ${APACHE_LOG_DIR}/dspace.umiz.at.access.log combined
     ProxyRequests on
     SSLEngine on
     SSLProxyEngine on
     SSLCertificateFile /etc/letsencrypt/live/dspace.umiz.at/fullchain.pem
     SSLCertificateKeyFile /etc/letsencrypt/live/dspace.umiz.at/privkey.pem
     SSLCompression off
     SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
     SSLCipherSuite          
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
     SSLHonorCipherOrder     off
     SSLSessionTickets       off
     ProxyPreserveHost on
     RequestHeader set X-Forwarded-Proto https
     #ProxyPass /location-to-be-excluded !

   <Proxy *>
       AddDefaultCharset Off
       Require all granted
   </Proxy>

     ProxyPass /server http://localhost:8080/server
     ProxyPassReverse /server http://localhost:8080/server
     #Solr settings is here for testing only. You shouldn't permanantly enable 
solr to be accessed from the outside. If you do cores can be 
removed/modified/addedd because dspace doesn't support protected solr. 
     #ProxyPass /solr http://localhost:8983/
     #ProxyPassReverse /solr http://localhost:8983/
     ProxyPass / http://localhost:4000/
     ProxyPassReverse / http://localhost:4000/

</VirtualHost>

6) a2ensite dspace.conf
7) ufw allow 'OpenSSH'
8) ufw allow 'Apache Full'
9) ufw enable
10) ufw status
11) systemctl restart apache2

Reply via email to