aboutsummaryrefslogtreecommitdiffstats
path: root/config
diff options
context:
space:
mode:
Diffstat (limited to 'config')
-rw-r--r--config/apache2.conf12
-rw-r--r--config/nginx.conf6
2 files changed, 15 insertions, 3 deletions
diff --git a/config/apache2.conf b/config/apache2.conf
new file mode 100644
index 0000000..20927fa
--- /dev/null
+++ b/config/apache2.conf
@@ -0,0 +1,12 @@
+# Use Apache2 to serve ACME requests by passing them over to a
+# locally-bound lacme webserver component.
+#
+# This file needs to be sourced to the server directives (at least the
+# non-ssl one) of each virtual host requiring authorization.
+
+<Location /.well-known/acme-challenge/>
+ ProxyPass unix:///var/run/lacme.socket|http://127.0.0.1/.well-known/acme-challenge/
+ Order allow,deny
+ Allow from all
+</Location>
+
diff --git a/config/nginx.conf b/config/nginx.conf
index f842c12..6753ff9 100644
--- a/config/nginx.conf
+++ b/config/nginx.conf
@@ -1,10 +1,10 @@
-# Let nginx serve ACME requests directly, or pass them to lacme's
-# webserver component.
+# Use Nginx to serve ACME requests; either directly, or by passing them
+# over to a locally-bound lacme webserver component.
#
# This file needs to be sourced to the server directives (at least the
# non-ssl one) of each virtual host requiring authorization.
-location /.well-known/acme-challenge/ {
+location ^~ /.well-known/acme-challenge/ {
# Pass ACME requests to lacme's webserver component
proxy_pass http://unix:/var/run/lacme.socket;