Lighttpd-https-cert, turris-auth and reverse proxy

[dGs]

Hello,

I would like to know the best way to remove permanently lighttpd-https-cert because I already have my SSL config file.

I created a lua script to uninstall lighttpd-https-cert and install lighttpd-mod-openssl, is it the best way?

Next since Turris 6.0 I have a problem with my reverse proxy configured to access app on my LXC container.

If those apps have a /login , accessing Domain.com will redirect me to turris-auth.

I haven’t find a way to configure lighttpd to ignore turris-auth for proxied Host :
$HTTP[“host”] == “app.domain.com” ( … )

Thanks

[dGs]

Reply to myself :
cat /etc/updater/conf.d/ssl.lua
Uninstall("lighttpd-https-cert", { priority = 60 })
Install("lighttpd-mod-openssl")

Seems to work.

And for the reverse proxy, I replaced 50-turris-auth.conf by the result of the command ‘turris-auth-server --lighttpd-config --luci-login’

And added around the fastcgi section :
$HOST["host"] =~ "regex to match my dns and local ip" { ... }

Now turris-auth won’t intercept /login, /logout, from my lighttpd reverse proxy.

[cocturr]

Out of interest, are you using lighttpd as a reverse proxy? are you happy with the performance overall?

[dGs]

Yes I use lighttpd to access WikiJs, Bookstack and Gitea installed on the Turris in a LXC container for each apps.
But only one user, me. No intensive usage. So it’s okay for my usage.