Re: [SOGo] use https for shared DAV-links - how to ?

[Pou Pas Kale]

Hello,

Many thanks for your reply. We are using NGINX (not httpd - apache). Please 
find below our configuration at NGINX (sogo.tmpl). Is it possible to change the 
/SOGo at the end of the url?

QUOTE

# Settings for SOGo Groupware

# SOGo
location ~ ^/sogo { rewrite ^ https://$host/SOGo; }
location ~ ^/SOGO { rewrite ^ https://$host/SOGo; }

# Redirect /mail to /SOGo
#location ~ ^/mail { rewrite ^ https://$host/SOGo; }

# For Mac OS X and iOS devices.
rewrite ^/.well-known/caldav    /SOGo/dav permanent;
rewrite ^/.well-known/carddav   /SOGo/dav permanent;
rewrite ^/principals            /SOGo/dav permanent;

location ^~ /SOGo {
    include /etc/nginx/templates/hsts.tmpl;

    proxy_pass https://127.0.0.1:20000;

    # forward user's IP address
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $host;

    # always use https
    proxy_set_header x-webobjects-server-port $server_port;
    proxy_set_header x-webobjects-server-name $host;
    proxy_set_header x-webobjects-server-url  https://$host;

    proxy_set_header x-webobjects-server-protocol HTTP/1.0;
}

location ^~ /Microsoft-Server-ActiveSync {
    proxy_pass https://127.0.0.1:20000/SOGo/Microsoft-Server-ActiveSync;

    proxy_connect_timeout 3540;
    proxy_send_timeout 3540;
    proxy_read_timeout 3540;
}

location ^~ /SOGo/Microsoft-Server-ActiveSync {
    proxy_pass https://127.0.0.1:20000/SOGo/Microsoft-Server-ActiveSync;

    proxy_connect_timeout 3540;
    proxy_send_timeout 3540;
    proxy_read_timeout 3540;
}

location /SOGo.woa/WebServerResources/ {
    alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
    expires max;
}
location /SOGo/WebServerResources/ {
    alias /usr/lib64/GNUstep/SOGo/WebServerResources/;
    expires max;
}
location ^/SOGo/so/ControlPanel/Products/([^/]*)/Resources/(.*)$ {
    alias /usr/lib64/GNUstep/SOGo/$1.SOGo/Resources/$2;
    expires max;
}

UNQUOTE

Many thanks again for your assistance.

Best regards,

Sent from Outlook<http://aka.ms/weboutlook>

________________________________
From: users-requ...@sogo.nu on behalf of Christian Mack
Sent: Monday, January 31, 2022 12:52 PM
To: users@sogo.nu
Subject: Re: [SOGo] use https for shared DAV-links - how to ?

Hello

Check your reverse proxy settings.

In Apache you need:
[...]
  <Proxy http://your-sogo.server.name:20000/SOGo>
    RequestHeader set "x-webobjects-server-port" "443"
    RequestHeader set "x-webobjects-server-name" "%{HTTP_HOST}s"
    RequestHeader set "x-webobjects-server-url" 
"[https://%{HTTP_HOST}s]https://%{HTTP_HOST}s";
    RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
[...]

This will tell SOGo to use https and the given/received server for all
generated URLs.



Kind regards,
Christian Mack

Am 28.01.22 um 18:02 schrieb Götz Reinicke (goetz.reini...@filmakademie.de):
> Hi,
>
> we noticed, that the URLs for sharing calendars or addressbooks are „still“ 
> http only without „s“ :)
>
> Is it possible to set this by default? If so, how and where?
>
> Thanks and regards . Götz
>
>


--
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung IT-Dienste Forschung und Lehre
78457 Konstanz
+49 7531 88-4416

-- 
users@sogo.nu
https://inverse.ca/sogo/lists