q

1. free httpd 8001 port when using selinux

   yum install policycoreutils-python
   semanage port -a -t http_port_t -p tcp 8001
   

2. selinux開啟httpd連接network network_db

   錯誤訊息：could not connect to server: Permission denied Is the server running on host "localhost" (::1) and accepting TCP/IP connections on port 5432?

   setsebool -P httpd_can_network_connect_db 1
   setsebool -P httpd_can_network_connect 1
   

3. /etc/httpd/conf.d/php.conf SetEnvIf
   • 在request header['x-forwarded-proto']=https時
   • 調整header['HTTPS'] = on
   • https://github.com/dmikusa-pivotal/cf-php-apache-buildpack/issues/6

     In httpd-php.conf, add this line.
     #
     # Set HTTPS environment variable if we came in over secure
     #  channel.
     SetEnvIf x-forwarded-proto https HTTPS=on
     

4. haproxy reqadd

   • 在forward時加上request header['x-forwarded-proto']=https

   • http://stackoverflow.com/questions/452375/detecting-https-requests-in-php

     frontend ...
        ...
        reqadd X-Forwarded-Proto:\ https
     

5. apache http server force http redirect to https
   • http://www.cyberciti.biz/tips/howto-apache-force-https-secure-connections.html
   • .htaccess or httpd.conf for global

     RewriteEngine On
     RewriteCond %{HTTPS} off
     RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}